From b77f640931b24d912c1fb4f0d44e3d553b9cc877 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 31 May 2021 14:32:51 +0200 Subject: [PATCH 001/180] Update forum --- forum | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/forum b/forum index fab5534..a078fa8 100644 --- a/forum +++ b/forum @@ -3,3 +3,17 @@ RAID FORUM (mirror 1) https://rf.ws RAID FORUM (mirror 2) https://raid.lol/ XSS (deep) https://xss.is/ XSS (dark) http://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/ +GETREKT https://www.getrekt.io/ +EXPLOIT.IN (deep) https://exploit.in/ +EXPLOIT.IN (dark) https://exploitivzcm5dawzhe6c32bbylyggbjvh5dyvsvb5lkuz5ptmunkmqd.onion/ +DEDICATET https://dedicatet.com/ +LOLZ https://lolz.guru/ +IFUD https://ifud.cx/ +DUBLIKAT https://my.dublikat.pro/ +DARKMARKET https://darkmarket.at/ +RUTOR https://darknet.rutor.nl/ +CRDCLUB https://crdclub.su/ +MONEYDARK https://moneymn.club/ +BTTFORUM https://btt-club.top/ +PROLOGIC https://prologic.su/ +HACKFORUMS https://hackforums.net/index.php From e9828d23c4e673ac20a59b51406b4d38197a3b0c Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 31 May 2021 14:35:47 +0200 Subject: [PATCH 002/180] Update others --- others | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/others b/others index aeda428..8637c29 100644 --- a/others +++ b/others @@ -1 +1,2 @@ -https://link-base.org/ +LINK BASE (various forums links) https://link-base.org/ +LYZEM (Telegram search engine) https://lyzem.com/ From 675c49c1c7f8c87c3cbe1578e4e1bd0b9988ec0c Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 31 May 2021 15:05:22 +0200 Subject: [PATCH 003/180] Update forum --- forum | 1 + 1 file changed, 1 insertion(+) diff --git a/forum b/forum index a078fa8..7f34c67 100644 --- a/forum +++ b/forum @@ -17,3 +17,4 @@ MONEYDARK https://moneymn.club/ BTTFORUM https://btt-club.top/ PROLOGIC https://prologic.su/ HACKFORUMS https://hackforums.net/index.php +SINISTER https://sinister.ly/ From 4655e216886fddc483fa14953fe71d58bc6f2214 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 1 Jun 2021 22:11:53 +0200 Subject: [PATCH 004/180] Update ransomware_gang --- ransomware_gang | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ransomware_gang b/ransomware_gang index 44b3a53..3a023e4 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -8,7 +8,7 @@ LORENZ http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/ CONTI http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/ RANSOMEXX http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/ SynACK http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/ -BABUK LOCKER http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/ +PAYLOD.BIN (EX BABUK LOCKER) http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ DARKSIDE http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ (CURRENTLY DOWN) CLOP http://ekbgzchl6x2ias37.onion/ MOUNTLOCKER http://mountnewsokhwilx.onion/ (CURRENTLY DOWN) From 0bb3f47c26243feef79457fef8cadb5483d7bc62 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 2 Jun 2021 01:47:17 +0200 Subject: [PATCH 005/180] Update telegram --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index 2d5d90b..f36b7ef 100644 --- a/telegram +++ b/telegram @@ -19,3 +19,4 @@ https://telegram.me/joinchat/UhP5kie2OiRetosa https://t.me/BruteForce https://t.me/icrewhackers https://t.me/leaklicks/ +https://t.me/baseleak From e853cdecf331ae7551167a75e52ca7ca7297d21e Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 2 Jun 2021 15:47:45 +0200 Subject: [PATCH 006/180] Update telegram --- telegram | 2 ++ 1 file changed, 2 insertions(+) diff --git a/telegram b/telegram index f36b7ef..687bb74 100644 --- a/telegram +++ b/telegram @@ -20,3 +20,5 @@ https://t.me/BruteForce https://t.me/icrewhackers https://t.me/leaklicks/ https://t.me/baseleak +https://t.me/joinchat/8yMjCnT06ytjNzQx +https://t.me/DataleakBin From 0168b6becd35affc42c089593f5097c485a9e3fc Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 2 Jun 2021 17:17:33 +0200 Subject: [PATCH 007/180] Update ransomware_gang --- ransomware_gang | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/ransomware_gang b/ransomware_gang index 3a023e4..cfd2d09 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -1,17 +1,18 @@ AVADDON http://avaddongun7rngel.onion/ SODINOKIBI (REVIL) http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/ NEFILIM http://hxt254aygrsziejn.onion/ -VFOKX http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/ +VFOKX (1) http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/ +VFOKX (2) http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/ MARKETO (deep) https://marketo.cloud/ MARKETO (dark) http://g5sbltooh2okkcb2.onion/ LORENZ http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/ -CONTI http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/ +CONTI/RYUK http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/ RANSOMEXX http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/ SynACK http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/ PAYLOD.BIN (EX BABUK LOCKER) http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ DARKSIDE http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ (CURRENTLY DOWN) CLOP http://ekbgzchl6x2ias37.onion/ -MOUNTLOCKER http://mountnewsokhwilx.onion/ (CURRENTLY DOWN) +MOUNT LOCKER http://mountnewsokhwilx.onion/ (CURRENTLY DOWN) PYSA http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html ASTROTEAM http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/ SUNCRYPT http://nbzzb6sa6xuura2z.onion/ From a532a4d0a08fa72f7f98cb36840e0b4555106ed0 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 2 Jun 2021 17:17:59 +0200 Subject: [PATCH 008/180] Update others --- others | 1 + 1 file changed, 1 insertion(+) diff --git a/others b/others index 8637c29..3b816e6 100644 --- a/others +++ b/others @@ -1,2 +1,3 @@ LINK BASE (various forums links) https://link-base.org/ LYZEM (Telegram search engine) https://lyzem.com/ +DARK LEAK MARKET http://54rdhzjzc4ids4u4wata4zr4ywfon5wpz2ml4q3avelgadpvmdal2vqd.onion/ From 0ac0e9989bbd7443e29fd0d72cadf49e42d51aea Mon Sep 17 00:00:00 2001 From: Andrea Draghetti Date: Thu, 3 Jun 2021 08:49:04 +0200 Subject: [PATCH 009/180] Adding Nulled --- forum | 1 + 1 file changed, 1 insertion(+) diff --git a/forum b/forum index 7f34c67..ee4145a 100644 --- a/forum +++ b/forum @@ -18,3 +18,4 @@ BTTFORUM https://btt-club.top/ PROLOGIC https://prologic.su/ HACKFORUMS https://hackforums.net/index.php SINISTER https://sinister.ly/ +NULLED https://www.nulled.to/ From 62eefca0e3498d4bfb5096eee74dc14b4fccaae0 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 3 Jun 2021 18:15:20 +0200 Subject: [PATCH 010/180] Update telegram --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index 687bb74..4c20ea3 100644 --- a/telegram +++ b/telegram @@ -22,3 +22,4 @@ https://t.me/leaklicks/ https://t.me/baseleak https://t.me/joinchat/8yMjCnT06ytjNzQx https://t.me/DataleakBin +https://t.me/combolist_top From fe0ce263e1af5e260e14d0cf7604bf06c04e2b62 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 6 Jun 2021 21:14:26 +0200 Subject: [PATCH 011/180] Update telegram --- telegram | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/telegram b/telegram index 4c20ea3..742fb28 100644 --- a/telegram +++ b/telegram @@ -15,7 +15,7 @@ https://t.me/NullLeak https://t.me/marketo_leaks https://t.me/outlew https://t.me/We_are_not_eternal -https://telegram.me/joinchat/UhP5kie2OiRetosa +https://t.me/joinchat/UhP5kie2OiRetosa https://t.me/BruteForce https://t.me/icrewhackers https://t.me/leaklicks/ @@ -23,3 +23,4 @@ https://t.me/baseleak https://t.me/joinchat/8yMjCnT06ytjNzQx https://t.me/DataleakBin https://t.me/combolist_top +https://t.me/meganzshare From dfc51e0eebb43f29ba39f9f2b56a003b643dafaa Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 6 Jun 2021 23:08:57 +0200 Subject: [PATCH 012/180] Update telegram --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index 742fb28..b54fd88 100644 --- a/telegram +++ b/telegram @@ -24,3 +24,4 @@ https://t.me/joinchat/8yMjCnT06ytjNzQx https://t.me/DataleakBin https://t.me/combolist_top https://t.me/meganzshare +https://t.me/joinchat/WCSE2vgon6IYGLgz From c39e162a1934ac4dc174ce72d26e923dae0ba869 Mon Sep 17 00:00:00 2001 From: Kaanis <85311401+Kaanis@users.noreply.github.com> Date: Tue, 8 Jun 2021 06:40:56 +0200 Subject: [PATCH 013/180] Added three forums --- forum | 3 +++ 1 file changed, 3 insertions(+) diff --git a/forum b/forum index ee4145a..0558f95 100644 --- a/forum +++ b/forum @@ -19,3 +19,6 @@ PROLOGIC https://prologic.su/ HACKFORUMS https://hackforums.net/index.php SINISTER https://sinister.ly/ NULLED https://www.nulled.to/ +OGUSERS https://www.ogusers.com/ +CRACKED https://cracked.to/ +ELEAKS https://eleaks.to/ From c14931b0353211eeb4bea55c663fdfcebfde79c7 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 10 Jun 2021 08:36:19 +0200 Subject: [PATCH 014/180] Update discord --- discord | 2 ++ 1 file changed, 2 insertions(+) diff --git a/discord b/discord index ec92e26..35fa8e3 100644 --- a/discord +++ b/discord @@ -1 +1,3 @@ _db [breach] https://discord.com/channels/828102975838748752/828194003103121439 + +OpticalMarket https://discord.com/invite/9rArswGsYZ From b78e6bed298a4474013aaa884a8273baf05e3e25 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 10 Jun 2021 08:52:01 +0200 Subject: [PATCH 015/180] Update discord --- discord | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/discord b/discord index 35fa8e3..37fd008 100644 --- a/discord +++ b/discord @@ -1,3 +1,2 @@ _db [breach] https://discord.com/channels/828102975838748752/828194003103121439 - -OpticalMarket https://discord.com/invite/9rArswGsYZ +OpticalMarket https://discord.com/channels/844252443214610492/844349064237809675 From 68d17208712a8462275d11ddee5fb4bfed5ae8c0 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 11 Jun 2021 15:05:19 +0200 Subject: [PATCH 016/180] Update ransomware_gang --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index cfd2d09..ae8a86a 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -33,6 +33,7 @@ BLACK SHADOW http://544corkfh5hwhtn4.onion/ (CURRENTLY DOWN) N3TW0RM http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ (CURRENTLY DOWN) HADES http://ixltdyumdlthrtgx.onion/ (CURRENTLY DOWN) DOPPLE PAYMER http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/ +RANSOMWARE GROUP SITES (list) http://thexfvx7hqcrpgtm.onion/ PROMETHEUS http://promethw27cbrcot.onion/blog/ GRIEF http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion NEMTY http://nemty.top (CURRENTLY DOWN) From d1498a67fdea2ab798d871d419f03f3bc4234480 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 12 Jun 2021 00:31:02 +0200 Subject: [PATCH 017/180] Update telegram --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index b54fd88..2bf6cfd 100644 --- a/telegram +++ b/telegram @@ -25,3 +25,4 @@ https://t.me/DataleakBin https://t.me/combolist_top https://t.me/meganzshare https://t.me/joinchat/WCSE2vgon6IYGLgz +https://t.me/dataleakbreach From 200f984bdccc1a06bfd5f3eeefc71a0b4f735f9d Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 12 Jun 2021 00:34:30 +0200 Subject: [PATCH 018/180] Update telegram --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index 2bf6cfd..8139674 100644 --- a/telegram +++ b/telegram @@ -26,3 +26,4 @@ https://t.me/combolist_top https://t.me/meganzshare https://t.me/joinchat/WCSE2vgon6IYGLgz https://t.me/dataleakbreach +https://t.me/combo_lists From db862249e18ccf35c51634d69cbdacba46e8b254 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 12 Jun 2021 13:13:25 +0200 Subject: [PATCH 019/180] Update others --- others | 1 + 1 file changed, 1 insertion(+) diff --git a/others b/others index 3b816e6..b8cf190 100644 --- a/others +++ b/others @@ -1,3 +1,4 @@ LINK BASE (various forums links) https://link-base.org/ LYZEM (Telegram search engine) https://lyzem.com/ DARK LEAK MARKET http://54rdhzjzc4ids4u4wata4zr4ywfon5wpz2ml4q3avelgadpvmdal2vqd.onion/ +HAPPY BLOG http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/ From 39db898cf875472f2586e164eb5055cf9f67029f Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 13 Jun 2021 07:36:13 +0200 Subject: [PATCH 020/180] Update telegram --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index 8139674..ff5153d 100644 --- a/telegram +++ b/telegram @@ -27,3 +27,4 @@ https://t.me/meganzshare https://t.me/joinchat/WCSE2vgon6IYGLgz https://t.me/dataleakbreach https://t.me/combo_lists +https://t.me/LeakData From 0e09bde5d88c7d157504e17caeb5eddfdcb44441 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 13 Jun 2021 21:53:00 +0200 Subject: [PATCH 021/180] Update telegram --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index ff5153d..971f447 100644 --- a/telegram +++ b/telegram @@ -28,3 +28,4 @@ https://t.me/joinchat/WCSE2vgon6IYGLgz https://t.me/dataleakbreach https://t.me/combo_lists https://t.me/LeakData +https://t.me/LeaksData From 37c19ede5434eb5780e8cfbde54b28f851375517 Mon Sep 17 00:00:00 2001 From: Giacomo Giallombardo Date: Wed, 16 Jun 2021 16:23:08 +0200 Subject: [PATCH 022/180] Added some Telegram resources --- telegram | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/telegram b/telegram index 971f447..667a7f2 100644 --- a/telegram +++ b/telegram @@ -29,3 +29,7 @@ https://t.me/dataleakbreach https://t.me/combo_lists https://t.me/LeakData https://t.me/LeaksData +https://t.me/fuckeddb +https://t.me/Blank_Link +https://t.me/DWI_OFFICIAL +https://t.me/we_are_not_eternal From 393f31583368fb0138c4bd000c49c25c6f5830b2 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 16 Jun 2021 17:11:46 +0200 Subject: [PATCH 023/180] Update telegram --- telegram | 1 - 1 file changed, 1 deletion(-) diff --git a/telegram b/telegram index 667a7f2..67cc943 100644 --- a/telegram +++ b/telegram @@ -32,4 +32,3 @@ https://t.me/LeaksData https://t.me/fuckeddb https://t.me/Blank_Link https://t.me/DWI_OFFICIAL -https://t.me/we_are_not_eternal From fa3752edcaa25aa2c760acf054b0b3d3de451992 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 16 Jun 2021 17:24:48 +0200 Subject: [PATCH 024/180] Update telegram --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index 67cc943..2a893ec 100644 --- a/telegram +++ b/telegram @@ -32,3 +32,4 @@ https://t.me/LeaksData https://t.me/fuckeddb https://t.me/Blank_Link https://t.me/DWI_OFFICIAL +https://t.me/joinchat/5wChO8HFwJ43YTVk From d9e9f7466b180e7f25d59b163c003de198c22837 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 17 Jun 2021 17:53:08 +0200 Subject: [PATCH 025/180] Update discord --- discord | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/discord b/discord index 37fd008..d82fb2d 100644 --- a/discord +++ b/discord @@ -1,2 +1,2 @@ -_db [breach] https://discord.com/channels/828102975838748752/828194003103121439 -OpticalMarket https://discord.com/channels/844252443214610492/844349064237809675 +_db [breach] hhttps://discord.gg/sWhxHsYK (valid 7 days from 06/17/21) +OpticalMarket https://discord.gg/pFb34DN4 (valid 7 days from 06/17/21) From 24fb23cd673acabc9d08fcc6d97d1aa072a5e22e Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 23 Jun 2021 00:06:17 +0200 Subject: [PATCH 026/180] Update others --- others | 3 +++ 1 file changed, 3 insertions(+) diff --git a/others b/others index b8cf190..6a1af22 100644 --- a/others +++ b/others @@ -2,3 +2,6 @@ LINK BASE (various forums links) https://link-base.org/ LYZEM (Telegram search engine) https://lyzem.com/ DARK LEAK MARKET http://54rdhzjzc4ids4u4wata4zr4ywfon5wpz2ml4q3avelgadpvmdal2vqd.onion/ HAPPY BLOG http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/ +PHOBOS SEARCH ENGINE http://phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion +HAYSTACK SEARCH ENGINE http://haystakvxad7wbk5.onion +VISITOR SEARCH ENGINE http://visitorfi5kl7q7i.onion From 56a01374ad084c17f32d6e403629fcb76d3bf918 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 23 Jun 2021 00:25:19 +0200 Subject: [PATCH 027/180] Update others --- others | 1 + 1 file changed, 1 insertion(+) diff --git a/others b/others index 6a1af22..aa723cd 100644 --- a/others +++ b/others @@ -5,3 +5,4 @@ HAPPY BLOG http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion PHOBOS SEARCH ENGINE http://phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion HAYSTACK SEARCH ENGINE http://haystakvxad7wbk5.onion VISITOR SEARCH ENGINE http://visitorfi5kl7q7i.onion +I2P SEARCH ENGINE http://i2poulge3qyo33q4uazlda367okpkczn4rno2vjfetawoghciae6ygad.onion/ From 07e0faf177f43f5ed8d1c6a4859c4555f22530d6 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 25 Jun 2021 09:43:55 +0200 Subject: [PATCH 028/180] Update ransomware_gang --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index ae8a86a..8e70805 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -39,3 +39,4 @@ GRIEF http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion NEMTY http://nemty.top (CURRENTLY DOWN) SEKHMET http://sekhmet.top (CURRENTLY DOWN) NETWALKER rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion (CURRENTLY DOWN) +LOCKBIT 2.0 http://Lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion From 9c37e3af173dcffbaf93466ad9dced282fa60dc8 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 26 Jun 2021 00:40:59 +0200 Subject: [PATCH 029/180] Update others Add DARKFEED --- others | 1 + 1 file changed, 1 insertion(+) diff --git a/others b/others index aa723cd..772a4c1 100644 --- a/others +++ b/others @@ -6,3 +6,4 @@ PHOBOS SEARCH ENGINE http://phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahim HAYSTACK SEARCH ENGINE http://haystakvxad7wbk5.onion VISITOR SEARCH ENGINE http://visitorfi5kl7q7i.onion I2P SEARCH ENGINE http://i2poulge3qyo33q4uazlda367okpkczn4rno2vjfetawoghciae6ygad.onion/ +DARKFEED LIVE RANSOMWARE MONITOR https://darkfeed.io/indexransomware/ From 4a3211d1b13fb1212c8a0d688bc331da82408ac2 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 26 Jun 2021 15:35:20 +0200 Subject: [PATCH 030/180] add Hive --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index 8e70805..f07897b 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -40,3 +40,4 @@ NEMTY http://nemty.top (CURRENTLY DOWN) SEKHMET http://sekhmet.top (CURRENTLY DOWN) NETWALKER rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion (CURRENTLY DOWN) LOCKBIT 2.0 http://Lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion +HIVE http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/ From fd3a343cfe6f1e6768a83c3927f3791380ffe75f Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 27 Jun 2021 16:00:37 +0200 Subject: [PATCH 031/180] Update telegram --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index 2a893ec..3dd3028 100644 --- a/telegram +++ b/telegram @@ -33,3 +33,4 @@ https://t.me/fuckeddb https://t.me/Blank_Link https://t.me/DWI_OFFICIAL https://t.me/joinchat/5wChO8HFwJ43YTVk +https://t.me/mailpasword From 2e94b0941dcc804573160812e3ed53c73e9f0907 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 28 Jun 2021 10:13:24 +0200 Subject: [PATCH 032/180] Add Vice Society --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index f07897b..44b7804 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -41,3 +41,4 @@ SEKHMET http://sekhmet.top (CURRENTLY DOWN) NETWALKER rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion (CURRENTLY DOWN) LOCKBIT 2.0 http://Lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion HIVE http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/ +VICE SOCIETY http://4hzyuotli6maqa4u.onion From 56460dce81a5f184c409f72a46eae85d27769f4d Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 28 Jun 2021 11:04:27 +0200 Subject: [PATCH 033/180] 1 channel reported as deleted --- telegram | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/telegram b/telegram index 3dd3028..b86fb75 100644 --- a/telegram +++ b/telegram @@ -13,7 +13,7 @@ https://t.me/freedataleak https://t.me/AntiPlumbers https://t.me/NullLeak https://t.me/marketo_leaks -https://t.me/outlew +https://t.me/outlew (DELETED) https://t.me/We_are_not_eternal https://t.me/joinchat/UhP5kie2OiRetosa https://t.me/BruteForce From 51b7120a80f5ed6829b063fada232be399be3645 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 28 Jun 2021 14:26:24 +0200 Subject: [PATCH 034/180] Add DWF --- forum | 1 + 1 file changed, 1 insertion(+) diff --git a/forum b/forum index 0558f95..51456f2 100644 --- a/forum +++ b/forum @@ -22,3 +22,4 @@ NULLED https://www.nulled.to/ OGUSERS https://www.ogusers.com/ CRACKED https://cracked.to/ ELEAKS https://eleaks.to/ +DWF http://dwforumsmrcqdnt3.onion/ From 3411c7faa58f2c2871255c499ad3d641da588bc1 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 29 Jun 2021 15:36:25 +0200 Subject: [PATCH 035/180] Add darkfeed ransom wiki --- others | 1 + 1 file changed, 1 insertion(+) diff --git a/others b/others index 772a4c1..69e82a4 100644 --- a/others +++ b/others @@ -7,3 +7,4 @@ HAYSTACK SEARCH ENGINE http://haystakvxad7wbk5.onion VISITOR SEARCH ENGINE http://visitorfi5kl7q7i.onion I2P SEARCH ENGINE http://i2poulge3qyo33q4uazlda367okpkczn4rno2vjfetawoghciae6ygad.onion/ DARKFEED LIVE RANSOMWARE MONITOR https://darkfeed.io/indexransomware/ +DARKFEED RANSOMWIKI https://darkfeed.io/ransomwiki/ From 10d85b69a6d5c0e4a42690e9ecf683e4964cf14b Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 1 Jul 2021 23:03:09 +0200 Subject: [PATCH 036/180] Add DarkTor --- others | 1 + 1 file changed, 1 insertion(+) diff --git a/others b/others index 69e82a4..09c087d 100644 --- a/others +++ b/others @@ -8,3 +8,4 @@ VISITOR SEARCH ENGINE http://visitorfi5kl7q7i.onion I2P SEARCH ENGINE http://i2poulge3qyo33q4uazlda367okpkczn4rno2vjfetawoghciae6ygad.onion/ DARKFEED LIVE RANSOMWARE MONITOR https://darkfeed.io/indexransomware/ DARKFEED RANSOMWIKI https://darkfeed.io/ransomwiki/ +DARKTOR http://darktorhvabc652txfc575oendhykqcllb7bh7jhhsjduocdlyzdbmqd.onion/ From 22f332f2352992cdc10764949f7699ab12a0dc7d Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 2 Jul 2021 16:15:12 +0200 Subject: [PATCH 037/180] Add Yad2Leaks --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index b86fb75..35d2bc9 100644 --- a/telegram +++ b/telegram @@ -34,3 +34,4 @@ https://t.me/Blank_Link https://t.me/DWI_OFFICIAL https://t.me/joinchat/5wChO8HFwJ43YTVk https://t.me/mailpasword +https://t.me/Yad2Leaks From 779d3d5159717023cbdd0b949c8cbe61b5b50858 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 5 Jul 2021 08:19:36 +0200 Subject: [PATCH 038/180] Add Dar2web --- forum | 1 + 1 file changed, 1 insertion(+) diff --git a/forum b/forum index 51456f2..454f341 100644 --- a/forum +++ b/forum @@ -23,3 +23,4 @@ OGUSERS https://www.ogusers.com/ CRACKED https://cracked.to/ ELEAKS https://eleaks.to/ DWF http://dwforumsmrcqdnt3.onion/ +DARK2WEB https://dark2web.net/ From 1c08ac9d6b7114715d9c294290a67f6ab1bebbda Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 6 Jul 2021 15:37:30 +0200 Subject: [PATCH 039/180] Add Avos, Ech0raix, Qlocker --- ransomware_gang | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ransomware_gang b/ransomware_gang index 44b7804..d3d8078 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -42,3 +42,6 @@ NETWALKER rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion (CURREN LOCKBIT 2.0 http://Lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion HIVE http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/ VICE SOCIETY http://4hzyuotli6maqa4u.onion +AVOS http://avos2fuj6olp6x36.onion/ +ECH0RAIX http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion +QLOCKER http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion From ce02db8993335dfbfc0f184216785fb3e07bf0db Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 6 Jul 2021 17:27:53 +0200 Subject: [PATCH 040/180] Add theofficial0day --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index 35d2bc9..c68c461 100644 --- a/telegram +++ b/telegram @@ -35,3 +35,4 @@ https://t.me/DWI_OFFICIAL https://t.me/joinchat/5wChO8HFwJ43YTVk https://t.me/mailpasword https://t.me/Yad2Leaks +https://t.me/theofficial0day From 7f3addc43a473353ee061caf6067e449f8f959ef Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 6 Jul 2021 17:29:18 +0200 Subject: [PATCH 041/180] refresh codes --- discord | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/discord b/discord index d82fb2d..e1c827c 100644 --- a/discord +++ b/discord @@ -1,2 +1,2 @@ -_db [breach] hhttps://discord.gg/sWhxHsYK (valid 7 days from 06/17/21) -OpticalMarket https://discord.gg/pFb34DN4 (valid 7 days from 06/17/21) +_db [breach] https://discord.gg/j3HmDmhh (valid 7 days from 07/06/21) +OpticalMarket https://discord.gg/kUyhdgvM (valid 7 days from 07/06/21) From 37ebbc6bc387876ecf181ff6eba4a4dad4708036 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 6 Jul 2021 17:36:10 +0200 Subject: [PATCH 042/180] Add inj3ct0r exploit database --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index c68c461..e708252 100644 --- a/telegram +++ b/telegram @@ -36,3 +36,4 @@ https://t.me/joinchat/5wChO8HFwJ43YTVk https://t.me/mailpasword https://t.me/Yad2Leaks https://t.me/theofficial0day +https://t.me/joinchat/AAAAAFGhhcV9p1Rm2f_Emw From da2bd44c2d2acb0f9a3e8fcbebcf188fb08a9bb0 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 6 Jul 2021 17:39:51 +0200 Subject: [PATCH 043/180] Add 0Day.Today --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index e708252..742a5db 100644 --- a/telegram +++ b/telegram @@ -37,3 +37,4 @@ https://t.me/mailpasword https://t.me/Yad2Leaks https://t.me/theofficial0day https://t.me/joinchat/AAAAAFGhhcV9p1Rm2f_Emw +https://t.me/LeaRNEXploIT From 8d241843e69ce89f41cc4e80d0e21c24b9863671 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 7 Jul 2021 16:26:00 +0200 Subject: [PATCH 044/180] Update README.md --- README.md | 28 ++++++++++++++++++++++++++-- 1 file changed, 26 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 37fa790..4a1f116 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,28 @@ # deepdarkCTI -Collection of Cyber Threat Intelligence sources from the deep and dark web +Collection of Cyber Threat Intelligence sources from the Deep and Dark Web -The aim of this project is to collect the sources, present in the deep and dark web, which can be useful in Cyber Threat Intelligence contexts. +The aim of this project is to collect the sources, present in the Deep and Dark web, which can be useful in Cyber Threat Intelligence contexts. + +**What is Cyber Threat Intelligence?** +Cyber Threat Intelligence (CTI) is defined as the collection and analysis of information about threats and adversaries and drawing patterns that provide an ability to make knowledgeable decisions for the preparedness, prevention and response actions against various cyber attacks. + +CTI involves collecting, researching and analyzing trends and technical developments in the area of cyber threats ans if often presented in the form of Indicators of Compromise (IoCs) or threat feeds, provides evidence-base knowledge regarding an organization's unique threat landscape. + +In Cyber Threat Intelligence, analysis if performed based on the intent, capability and opportunity triad. With the study of this triad, experts can evaluate and make infomred, forward-learning strategic, operational and tactical decisions on existing or emerging threats to the organization. + +**There are three types of Threat Intelligence:** +_Strategic_ - provides high-level information regarding cyber security posture, threats and its impact on business. +_Tactical_ - provides information related to threat actor's Tactics, Techniques and Procedures (TTPs) used to perform attacks. +_Operational_ - provides information about specific threats against the organization. + +**Typical sources of intelligence are:** +- Open Source Intelligence (OSINT) +- Human Intelligence +- Counter Intelligence +- Internal Intelligence + +Through this project, which takes into consideration the OSINT sources related to the Deep and Dark Web domain, we aim to monitor the intelligence information present in the following sources: +- Telegram channels, groups and chats +- Discord channels +- ransomware gangs sites +- forums related to cyber criminal activities and data leaks From 5a9cac59a02f1983776a8a7c0769d8e8a9a2c53a Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 7 Jul 2021 16:27:40 +0200 Subject: [PATCH 045/180] Update README.md --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index 4a1f116..1f92c79 100644 --- a/README.md +++ b/README.md @@ -11,17 +11,20 @@ CTI involves collecting, researching and analyzing trends and technical developm In Cyber Threat Intelligence, analysis if performed based on the intent, capability and opportunity triad. With the study of this triad, experts can evaluate and make infomred, forward-learning strategic, operational and tactical decisions on existing or emerging threats to the organization. **There are three types of Threat Intelligence:** + _Strategic_ - provides high-level information regarding cyber security posture, threats and its impact on business. _Tactical_ - provides information related to threat actor's Tactics, Techniques and Procedures (TTPs) used to perform attacks. _Operational_ - provides information about specific threats against the organization. **Typical sources of intelligence are:** + - Open Source Intelligence (OSINT) - Human Intelligence - Counter Intelligence - Internal Intelligence Through this project, which takes into consideration the OSINT sources related to the Deep and Dark Web domain, we aim to monitor the intelligence information present in the following sources: + - Telegram channels, groups and chats - Discord channels - ransomware gangs sites From a470575fa27c895f98a64b6fe17a5fe0d69acdc4 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 7 Jul 2021 16:28:08 +0200 Subject: [PATCH 046/180] Update README.md --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 1f92c79..ac4759d 100644 --- a/README.md +++ b/README.md @@ -13,7 +13,9 @@ In Cyber Threat Intelligence, analysis if performed based on the intent, capabil **There are three types of Threat Intelligence:** _Strategic_ - provides high-level information regarding cyber security posture, threats and its impact on business. + _Tactical_ - provides information related to threat actor's Tactics, Techniques and Procedures (TTPs) used to perform attacks. + _Operational_ - provides information about specific threats against the organization. **Typical sources of intelligence are:** From 0f52a53f5a10c33cfc24470477c87ad0ec635505 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 8 Jul 2021 13:26:10 +0200 Subject: [PATCH 047/180] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index ac4759d..3c9c2ab 100644 --- a/README.md +++ b/README.md @@ -4,6 +4,7 @@ Collection of Cyber Threat Intelligence sources from the Deep and Dark Web The aim of this project is to collect the sources, present in the Deep and Dark web, which can be useful in Cyber Threat Intelligence contexts. **What is Cyber Threat Intelligence?** + Cyber Threat Intelligence (CTI) is defined as the collection and analysis of information about threats and adversaries and drawing patterns that provide an ability to make knowledgeable decisions for the preparedness, prevention and response actions against various cyber attacks. CTI involves collecting, researching and analyzing trends and technical developments in the area of cyber threats ans if often presented in the form of Indicators of Compromise (IoCs) or threat feeds, provides evidence-base knowledge regarding an organization's unique threat landscape. From e431b4dd8418f47d99154be1b1b9220ee5e755e2 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 9 Jul 2021 20:39:55 +0200 Subject: [PATCH 048/180] Add My Decryptor --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index d3d8078..28bd9e8 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -45,3 +45,4 @@ VICE SOCIETY http://4hzyuotli6maqa4u.onion AVOS http://avos2fuj6olp6x36.onion/ ECH0RAIX http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion QLOCKER http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion +MYDECRYPTOR http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion From 6d50d6f3f58f24c4c86d16ffcc4bd40a67e91682 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 12 Jul 2021 16:48:21 +0200 Subject: [PATCH 049/180] Add RAMP --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index 28bd9e8..101c588 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -46,3 +46,4 @@ AVOS http://avos2fuj6olp6x36.onion/ ECH0RAIX http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion QLOCKER http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion MYDECRYPTOR http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion +RAMP http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ From c1098c4c16e8b5f54fc8e13d5c94ad974a97bebd Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 13 Jul 2021 19:08:35 +0200 Subject: [PATCH 050/180] Add EP918 --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index 101c588..a42c8c2 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -47,3 +47,4 @@ ECH0RAIX http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion QLOCKER http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion MYDECRYPTOR http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion RAMP http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ +EP918 http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/ From 09fc50b6b4ff07c18cae4105889b11137e1a0aa0 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 13 Jul 2021 19:10:04 +0200 Subject: [PATCH 051/180] Add AVOS --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index a42c8c2..6227ca7 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -48,3 +48,4 @@ QLOCKER http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion MYDECRYPTOR http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion RAMP http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ EP918 http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/ +AVOS http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion From 62a176c518d74caaee2772d8a5e4440023cea277 Mon Sep 17 00:00:00 2001 From: danieleperera Date: Wed, 14 Jul 2021 16:56:34 +0200 Subject: [PATCH 052/180] added underground botnet/other markets --- markets | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 markets diff --git a/markets b/markets new file mode 100644 index 0000000..32e18ff --- /dev/null +++ b/markets @@ -0,0 +1,5 @@ +WHM market http://76p5k6gw25l5jpy7ombo2m7gt4zppowbz47sizvlzkigvnyhhc26znyd.onion +Russian Market (tor) http://rusmarkethgwhfbn.onion/ +Russian Market (clear) https://russianmarket.gs/ +Russian Market (clear) https://russianmarket.gs/ +Genesis Market (clear) https://genesis.market/ From 7d1ee640bbf4e1afc5a260a5e9d368ab69cd2248 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 14 Jul 2021 17:05:23 +0200 Subject: [PATCH 053/180] Add Conti (surface web) --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index 6227ca7..e88481a 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -7,6 +7,7 @@ MARKETO (deep) https://marketo.cloud/ MARKETO (dark) http://g5sbltooh2okkcb2.onion/ LORENZ http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/ CONTI/RYUK http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/ +CONTI (SURFACE WEB) https://continews.click/ RANSOMEXX http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/ SynACK http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/ PAYLOD.BIN (EX BABUK LOCKER) http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ From 78d569f9534f9d54026da796a369dae6b260bc73 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 14 Jul 2021 19:20:15 +0200 Subject: [PATCH 054/180] Add markets in sources --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 3c9c2ab..582f995 100644 --- a/README.md +++ b/README.md @@ -32,3 +32,4 @@ Through this project, which takes into consideration the OSINT sources related t - Discord channels - ransomware gangs sites - forums related to cyber criminal activities and data leaks +- markets From cd99ed147e1e6d7c86db2dca7957f79a19b2f673 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 17 Jul 2021 08:17:06 +0200 Subject: [PATCH 055/180] Add Quantum Blog --- others | 1 + 1 file changed, 1 insertion(+) diff --git a/others b/others index 09c087d..105fa5c 100644 --- a/others +++ b/others @@ -9,3 +9,4 @@ I2P SEARCH ENGINE http://i2poulge3qyo33q4uazlda367okpkczn4rno2vjfetawoghciae6yga DARKFEED LIVE RANSOMWARE MONITOR https://darkfeed.io/indexransomware/ DARKFEED RANSOMWIKI https://darkfeed.io/ransomwiki/ DARKTOR http://darktorhvabc652txfc575oendhykqcllb7bh7jhhsjduocdlyzdbmqd.onion/ +QUANTUM BLOG http://quantum445bh3gzuyilxdzs5xdepf3b7lkcupswvkryf3n7hgzpxebid.onion From 5ed1c0ef3baa2974a443d359d122bdb892793f5a Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 17 Jul 2021 08:22:00 +0200 Subject: [PATCH 056/180] Add info about Telegram channel for the contributors --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 582f995..73dce46 100644 --- a/README.md +++ b/README.md @@ -3,6 +3,8 @@ Collection of Cyber Threat Intelligence sources from the Deep and Dark Web The aim of this project is to collect the sources, present in the Deep and Dark web, which can be useful in Cyber Threat Intelligence contexts. +The contributors of the project have a Telegram channel available to propose new sources to be integrated within the project and to have a place to discuss the tactics and techniques of research and analysis that are used daily. + **What is Cyber Threat Intelligence?** Cyber Threat Intelligence (CTI) is defined as the collection and analysis of information about threats and adversaries and drawing patterns that provide an ability to make knowledgeable decisions for the preparedness, prevention and response actions against various cyber attacks. From 9e76d0645b4662a64cad76bc4eabbf33044103cb Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 17 Jul 2021 12:51:42 +0200 Subject: [PATCH 057/180] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 73dce46..9140e24 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,7 @@ Collection of Cyber Threat Intelligence sources from the Deep and Dark Web The aim of this project is to collect the sources, present in the Deep and Dark web, which can be useful in Cyber Threat Intelligence contexts. -The contributors of the project have a Telegram channel available to propose new sources to be integrated within the project and to have a place to discuss the tactics and techniques of research and analysis that are used daily. +The contributors of the project have a Telegram groups available to propose new sources to be integrated within the project and to have a place to discuss the tactics and techniques of research and analysis that are used daily. **What is Cyber Threat Intelligence?** From 43f4e0771b616e5155f43137a73a654f7b2385c1 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 17 Jul 2021 15:26:06 +0200 Subject: [PATCH 058/180] Add HYDRA --- markets | 1 + 1 file changed, 1 insertion(+) diff --git a/markets b/markets index 32e18ff..7977aaa 100644 --- a/markets +++ b/markets @@ -3,3 +3,4 @@ Russian Market (tor) http://rusmarkethgwhfbn.onion/ Russian Market (clear) https://russianmarket.gs/ Russian Market (clear) https://russianmarket.gs/ Genesis Market (clear) https://genesis.market/ +HYDRA http://hydra3rudf3j4hww.onion/ From 2b1a429c1a5eeed043c815ee851850709616a5b9 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 18 Jul 2021 11:03:17 +0200 Subject: [PATCH 059/180] Add Saudi Aramco Leak --- others | 1 + 1 file changed, 1 insertion(+) diff --git a/others b/others index 105fa5c..4ad1fb3 100644 --- a/others +++ b/others @@ -10,3 +10,4 @@ DARKFEED LIVE RANSOMWARE MONITOR https://darkfeed.io/indexransomware/ DARKFEED RANSOMWIKI https://darkfeed.io/ransomwiki/ DARKTOR http://darktorhvabc652txfc575oendhykqcllb7bh7jhhsjduocdlyzdbmqd.onion/ QUANTUM BLOG http://quantum445bh3gzuyilxdzs5xdepf3b7lkcupswvkryf3n7hgzpxebid.onion +SAUDI ARAMCO LEAK http://662m7dfcpfsmeetqucdekz3rn4a6dxsxbdjwd6iz3rwnogjsj7i3hxad.onion/ From c41aba537ba71a080aa39b50d2205b7f77ef18da Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 19 Jul 2021 00:27:38 +0200 Subject: [PATCH 060/180] Add MAGBO --- markets | 1 + 1 file changed, 1 insertion(+) diff --git a/markets b/markets index 7977aaa..3ec33f8 100644 --- a/markets +++ b/markets @@ -4,3 +4,4 @@ Russian Market (clear) https://russianmarket.gs/ Russian Market (clear) https://russianmarket.gs/ Genesis Market (clear) https://genesis.market/ HYDRA http://hydra3rudf3j4hww.onion/ +MAGBO http://magbocc3tco4vmxx.onion/ From 377081471b6584d531a40337c5ac40927c37cf77 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 19 Jul 2021 00:32:03 +0200 Subject: [PATCH 061/180] Add MAGBO (clear) --- markets | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/markets b/markets index 3ec33f8..b258450 100644 --- a/markets +++ b/markets @@ -4,4 +4,5 @@ Russian Market (clear) https://russianmarket.gs/ Russian Market (clear) https://russianmarket.gs/ Genesis Market (clear) https://genesis.market/ HYDRA http://hydra3rudf3j4hww.onion/ -MAGBO http://magbocc3tco4vmxx.onion/ +MAGBO (tor) http://magbocc3tco4vmxx.onion/ +MAGBO (clear) https://magbo.shop From 453aad7132e56b470a0a71d6d56d50b4e7cc3973 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 19 Jul 2021 01:06:11 +0200 Subject: [PATCH 062/180] Add Eros Market --- discord | 1 + 1 file changed, 1 insertion(+) diff --git a/discord b/discord index e1c827c..c3baebd 100644 --- a/discord +++ b/discord @@ -1,2 +1,3 @@ _db [breach] https://discord.gg/j3HmDmhh (valid 7 days from 07/06/21) OpticalMarket https://discord.gg/kUyhdgvM (valid 7 days from 07/06/21) +Eros Market https://discord.gg/YZmJNjcG (valid 7 data from 07/19/21) From f582716c2599b4d85a86f453f4ad0e87e39d216d Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 19 Jul 2021 01:09:49 +0200 Subject: [PATCH 063/180] Add Eros Market group --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index 742a5db..4e771d8 100644 --- a/telegram +++ b/telegram @@ -38,3 +38,4 @@ https://t.me/Yad2Leaks https://t.me/theofficial0day https://t.me/joinchat/AAAAAFGhhcV9p1Rm2f_Emw https://t.me/LeaRNEXploIT +https://t.me/joinchat/YR89p_rg8Oo0Y2Ux From c0e6fff4c26fe039decc69d493271f665c944214 Mon Sep 17 00:00:00 2001 From: Massimiliano Dal Cero <5049867+massimiliano-dalcero@users.noreply.github.com> Date: Tue, 20 Jul 2021 15:29:07 +0200 Subject: [PATCH 064/180] Update forum --- forum | 1 + 1 file changed, 1 insertion(+) diff --git a/forum b/forum index 454f341..5dfbd2b 100644 --- a/forum +++ b/forum @@ -24,3 +24,4 @@ CRACKED https://cracked.to/ ELEAKS https://eleaks.to/ DWF http://dwforumsmrcqdnt3.onion/ DARK2WEB https://dark2web.net/ +ITALIAN DARKNET COMMUNITY 3.0 http://dhri7ogvfpnflpkj3sc5x7umjl4gd26bkukzotbwdy76yjp5qvhjzmqd.onion From 66b02be6f5db6f52d9b4e07a8c9b756ce8cdd99c Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 21 Jul 2021 18:41:47 +0200 Subject: [PATCH 065/180] Add HARON --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index e88481a..ce840f0 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -50,3 +50,4 @@ MYDECRYPTOR http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion RAMP http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ EP918 http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/ AVOS http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion +HARON http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion From d0e4a3122cea83cf726ec915639d5d28f41fac71 Mon Sep 17 00:00:00 2001 From: Idar Lund Date: Wed, 21 Jul 2021 20:40:41 +0200 Subject: [PATCH 066/180] added Bl4ckt0r not really a ransomware gang, but since "marketo" is added here, this one should too --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index ce840f0..6c219d3 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -51,3 +51,4 @@ RAMP http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ EP918 http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/ AVOS http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion HARON http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion +Bl4ckt0r http://bl4cktorpms2gybrcyt52aakcxt6yn37byb65uama5cimhifcscnqkid.onion/ From 6bb26ec14af22f003bc0b671c3b843789cc04e72 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 21 Jul 2021 21:24:41 +0200 Subject: [PATCH 067/180] Remove Bl4ckt0r (to move in others) --- ransomware_gang | 1 - 1 file changed, 1 deletion(-) diff --git a/ransomware_gang b/ransomware_gang index 6c219d3..ce840f0 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -51,4 +51,3 @@ RAMP http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ EP918 http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/ AVOS http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion HARON http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion -Bl4ckt0r http://bl4cktorpms2gybrcyt52aakcxt6yn37byb65uama5cimhifcscnqkid.onion/ From bbe087deab1a3c4fe58414f12dc32525a7fdba29 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 21 Jul 2021 21:25:33 +0200 Subject: [PATCH 068/180] Add BL4CKT0R --- others | 1 + 1 file changed, 1 insertion(+) diff --git a/others b/others index 4ad1fb3..29ac090 100644 --- a/others +++ b/others @@ -11,3 +11,4 @@ DARKFEED RANSOMWIKI https://darkfeed.io/ransomwiki/ DARKTOR http://darktorhvabc652txfc575oendhykqcllb7bh7jhhsjduocdlyzdbmqd.onion/ QUANTUM BLOG http://quantum445bh3gzuyilxdzs5xdepf3b7lkcupswvkryf3n7hgzpxebid.onion SAUDI ARAMCO LEAK http://662m7dfcpfsmeetqucdekz3rn4a6dxsxbdjwd6iz3rwnogjsj7i3hxad.onion/ +BL4CKT0R http://bl4cktorpms2gybrcyt52aakcxt6yn37byb65uama5cimhifcscnqkid.onion/ From 94b3fd73db409e129ac8b5cd80b26c01e3fb5317 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 22 Jul 2021 08:10:20 +0200 Subject: [PATCH 069/180] Add various channels --- telegram | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/telegram b/telegram index 4e771d8..16c78e9 100644 --- a/telegram +++ b/telegram @@ -39,3 +39,8 @@ https://t.me/theofficial0day https://t.me/joinchat/AAAAAFGhhcV9p1Rm2f_Emw https://t.me/LeaRNEXploIT https://t.me/joinchat/YR89p_rg8Oo0Y2Ux +https://t.me/grandgive +https://t.me/torlinks +https://t.me/Sell_rdp1 +https://t.me/cyb3rtr0nian +https://t.me/cyber_cracking_mv From 02c8d5708ab54fe3a002a483069d42e5892e3ffb Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 22 Jul 2021 16:14:19 +0200 Subject: [PATCH 070/180] Add LOCKDATA AUCTION --- markets | 1 + 1 file changed, 1 insertion(+) diff --git a/markets b/markets index b258450..ff64d27 100644 --- a/markets +++ b/markets @@ -6,3 +6,4 @@ Genesis Market (clear) https://genesis.market/ HYDRA http://hydra3rudf3j4hww.onion/ MAGBO (tor) http://magbocc3tco4vmxx.onion/ MAGBO (clear) https://magbo.shop +LOCKDATA AUCTION (probably scam site) http://wm6mbuzipviusuc42kcggzkdpbhuv45sn7olyamy6mcqqked3waslbqd.onion/ From 7c5c938791a32626f5db5fb2e19499421689465e Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 22 Jul 2021 23:25:59 +0200 Subject: [PATCH 071/180] Add DarkZone --- markets | 1 + 1 file changed, 1 insertion(+) diff --git a/markets b/markets index ff64d27..e848f81 100644 --- a/markets +++ b/markets @@ -7,3 +7,4 @@ HYDRA http://hydra3rudf3j4hww.onion/ MAGBO (tor) http://magbocc3tco4vmxx.onion/ MAGBO (clear) https://magbo.shop LOCKDATA AUCTION (probably scam site) http://wm6mbuzipviusuc42kcggzkdpbhuv45sn7olyamy6mcqqked3waslbqd.onion/ +DARK ZONE http://6bcecdo7ldzkudt6dnsuljqoyhgme4afsnytarre5nucjhgzmrn4txad.onion From 7d9d5f333807fff06fc61ef5542a64954ab987f1 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 23 Jul 2021 16:23:47 +0200 Subject: [PATCH 072/180] Add CRDCLUB (dark) --- forum | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/forum b/forum index 5dfbd2b..ef3f2c0 100644 --- a/forum +++ b/forum @@ -13,6 +13,7 @@ DUBLIKAT https://my.dublikat.pro/ DARKMARKET https://darkmarket.at/ RUTOR https://darknet.rutor.nl/ CRDCLUB https://crdclub.su/ +CRDCLUB (dark) http://crdclub4wraumez4.onion/ MONEYDARK https://moneymn.club/ BTTFORUM https://btt-club.top/ PROLOGIC https://prologic.su/ @@ -22,6 +23,6 @@ NULLED https://www.nulled.to/ OGUSERS https://www.ogusers.com/ CRACKED https://cracked.to/ ELEAKS https://eleaks.to/ -DWF http://dwforumsmrcqdnt3.onion/ +DWF (dark) http://dwforumsmrcqdnt3.onion/ DARK2WEB https://dark2web.net/ -ITALIAN DARKNET COMMUNITY 3.0 http://dhri7ogvfpnflpkj3sc5x7umjl4gd26bkukzotbwdy76yjp5qvhjzmqd.onion +ITALIAN DARKNET COMMUNITY 3.0 (dark) http://dhri7ogvfpnflpkj3sc5x7umjl4gd26bkukzotbwdy76yjp5qvhjzmqd.onion From 526b14d70743c65412c340d9e9efd7466188cef5 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 23 Jul 2021 16:41:40 +0200 Subject: [PATCH 073/180] Add ALTENEN and CARDING FORUM --- forum | 2 ++ 1 file changed, 2 insertions(+) diff --git a/forum b/forum index ef3f2c0..b7aa05a 100644 --- a/forum +++ b/forum @@ -26,3 +26,5 @@ ELEAKS https://eleaks.to/ DWF (dark) http://dwforumsmrcqdnt3.onion/ DARK2WEB https://dark2web.net/ ITALIAN DARKNET COMMUNITY 3.0 (dark) http://dhri7ogvfpnflpkj3sc5x7umjl4gd26bkukzotbwdy76yjp5qvhjzmqd.onion +ALTENEN (deep) https://altenens.is/ +CARDING FORUM (deep) https://cybercarders.su/ From 45cb3a16428f43d032ef38aee5e123d58bd23cd2 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 24 Jul 2021 14:19:27 +0200 Subject: [PATCH 074/180] Add Twitter filters for ransomware related researches --- methods | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 methods diff --git a/methods b/methods new file mode 100644 index 0000000..2eb904e --- /dev/null +++ b/methods @@ -0,0 +1,4 @@ +TWITTER - Look for ransomware related resources on the dark web +(url:onion) "ransomware" +ransomware AND (url:onion -filter:retweets) +(hxxp:// OR http://) [.] AND url:onion From 662e10ffa4ee127991c1df11f9d04a0a30e9375f Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 24 Jul 2021 14:35:47 +0200 Subject: [PATCH 075/180] Add Google research for AnonFiles onion sources --- methods | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/methods b/methods index 2eb904e..52adb5c 100644 --- a/methods +++ b/methods @@ -1,4 +1,12 @@ -TWITTER - Look for ransomware related resources on the dark web +TWITTER + +Look for ransomware related resources on the dark web (url:onion) "ransomware" ransomware AND (url:onion -filter:retweets) (hxxp:// OR http://) [.] AND url:onion + + +GOOGLE + +Look for onion sites on AnonFiles shared +intext:.onion site:anonfiles.com From a0e4d2f9e91a2771a948eb912772e6e2144d294c Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 24 Jul 2021 14:37:16 +0200 Subject: [PATCH 076/180] Add Analysis of a Dark Web Site --- methods | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/methods b/methods index 52adb5c..b25d5a0 100644 --- a/methods +++ b/methods @@ -10,3 +10,8 @@ GOOGLE Look for onion sites on AnonFiles shared intext:.onion site:anonfiles.com + + +DARK WEB SITE ANALYSIS + +https://www.neteye-blog.com/2021/07/analysis-of-a-dark-web-site/ From 900f12c5c4aa5030e51caf7dc32841f378ba749e Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 24 Jul 2021 15:52:11 +0200 Subject: [PATCH 077/180] Add vulnerability PoC research --- methods | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/methods b/methods index b25d5a0..f1eb369 100644 --- a/methods +++ b/methods @@ -5,12 +5,18 @@ Look for ransomware related resources on the dark web ransomware AND (url:onion -filter:retweets) (hxxp:// OR http://) [.] AND url:onion +Look for vulnerability PoC +PoC and CVE-20xx-xxxxx + GOOGLE Look for onion sites on AnonFiles shared intext:.onion site:anonfiles.com +Look for vulnerability PoC in GiHub +CVE-20xx-xxxxx site:GitHub.com + DARK WEB SITE ANALYSIS From 343e4c46cca21d68a6a41923e84ea76ecded0a7d Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 24 Jul 2021 18:30:55 +0200 Subject: [PATCH 078/180] Add Altenen --- telegram | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram b/telegram index 16c78e9..211ec8d 100644 --- a/telegram +++ b/telegram @@ -44,3 +44,4 @@ https://t.me/torlinks https://t.me/Sell_rdp1 https://t.me/cyb3rtr0nian https://t.me/cyber_cracking_mv +https://t.me/altenens From 1b2aad778f06c479bc6e131bb13c177978367f34 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 24 Jul 2021 22:37:29 +0200 Subject: [PATCH 079/180] Add Telegram and Discord --- methods | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/methods b/methods index f1eb369..37445ba 100644 --- a/methods +++ b/methods @@ -21,3 +21,13 @@ CVE-20xx-xxxxx site:GitHub.com DARK WEB SITE ANALYSIS https://www.neteye-blog.com/2021/07/analysis-of-a-dark-web-site/ + + +TELEGRAM + +Search for onion links in Telegram groups and channels + + +DISCORD + +Search for onion links in Discord channels From 973ff609eca1059010d870600f2a5b8253a1da44 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 24 Jul 2021 23:13:59 +0200 Subject: [PATCH 080/180] Add Shodan --- methods | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/methods b/methods index 37445ba..e29bd8c 100644 --- a/methods +++ b/methods @@ -31,3 +31,11 @@ Search for onion links in Telegram groups and channels DISCORD Search for onion links in Discord channels + + +SHODAN + +Use these filters: +ssl:".onion" +".onion" +"linkxyz.onion" From 29857ba8d44a04c8b06504639386097adce7cfd2 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 24 Jul 2021 23:15:14 +0200 Subject: [PATCH 081/180] Add Reddit --- methods | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/methods b/methods index e29bd8c..69ae55f 100644 --- a/methods +++ b/methods @@ -39,3 +39,7 @@ Use these filters: ssl:".onion" ".onion" "linkxyz.onion" + +REDDIT + +join to r/onions From 3bfab7c69048abf9bf98e4eab4e3ef8c3db06dcb Mon Sep 17 00:00:00 2001 From: Gianni Amato Date: Sat, 24 Jul 2021 23:27:49 +0200 Subject: [PATCH 082/180] Update methods --- methods | 2 ++ 1 file changed, 2 insertions(+) diff --git a/methods b/methods index 69ae55f..ca642ff 100644 --- a/methods +++ b/methods @@ -8,6 +8,8 @@ ransomware AND (url:onion -filter:retweets) Look for vulnerability PoC PoC and CVE-20xx-xxxxx +Look for leaks on pastebin or ghostbin +target OR dump OR combo OR password OR leak OR breach OR databreach OR credential OR steal AND (url:pastebin.com OR url:ghostbin.co) GOOGLE From 7c09b59425eef12a563b2ba09bb738ba475e32e0 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 25 Jul 2021 18:44:46 +0200 Subject: [PATCH 083/180] Add Hello Kitty --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index ce840f0..edad2c2 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -51,3 +51,4 @@ RAMP http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ EP918 http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/ AVOS http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion HARON http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion +HELLO KITTY http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/ From 59e1c7255d08b9ba29015d34af8f934ddb91536d Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 12:24:30 +0200 Subject: [PATCH 084/180] Update ransomware_gang --- ransomware_gang | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang b/ransomware_gang index edad2c2..e3e4ab2 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -52,3 +52,4 @@ EP918 http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/ AVOS http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion HARON http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion HELLO KITTY http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/ +RAGNAROK http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/ From a9f692d54fd4fa7d395fe32565e6f2e5e4f40b00 Mon Sep 17 00:00:00 2001 From: danieleperera Date: Tue, 27 Jul 2021 16:33:45 +0200 Subject: [PATCH 085/180] updated to markdown format --- ransomware_gang | 112 ++++++++++++++++++++++++------------------------ 1 file changed, 57 insertions(+), 55 deletions(-) diff --git a/ransomware_gang b/ransomware_gang index e3e4ab2..f521ccc 100644 --- a/ransomware_gang +++ b/ransomware_gang @@ -1,55 +1,57 @@ -AVADDON http://avaddongun7rngel.onion/ -SODINOKIBI (REVIL) http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/ -NEFILIM http://hxt254aygrsziejn.onion/ -VFOKX (1) http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/ -VFOKX (2) http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/ -MARKETO (deep) https://marketo.cloud/ -MARKETO (dark) http://g5sbltooh2okkcb2.onion/ -LORENZ http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/ -CONTI/RYUK http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/ -CONTI (SURFACE WEB) https://continews.click/ -RANSOMEXX http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/ -SynACK http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/ -PAYLOD.BIN (EX BABUK LOCKER) http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ -DARKSIDE http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ (CURRENTLY DOWN) -CLOP http://ekbgzchl6x2ias37.onion/ -MOUNT LOCKER http://mountnewsokhwilx.onion/ (CURRENTLY DOWN) -PYSA http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html -ASTROTEAM http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/ -SUNCRYPT http://nbzzb6sa6xuura2z.onion/ -PAY2KEY http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion/ -EVEREST http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/ -RANZY/AKO http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion/ (CURRENTLY DOWN) -CUBA http://cuba4mp6ximo2zlo.onion/ -RAGNAROK http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion/ (CURRENTLY DOWN) -RAGNAR LOCKER (old) http://ragnarleaks.top/ (CURRENTLY DOWN) -RAGNAR LOCKER http://p6o7m73ujalhgkiv.onion/ -EGREGOR https://egregornews.com/ (CURRENTLY DOWN) -MAZE https://newsmaze.net/ (CURRENTLY DOWN) -LV (1) http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion -LV (2) http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion/ -XING LOCKER http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/ -LOCKBIT http://lockbitkodidilol.onion/ (CURRENTLY DOWN) -BLACK SHADOW http://544corkfh5hwhtn4.onion/ (CURRENTLY DOWN) -N3TW0RM http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ (CURRENTLY DOWN) -HADES http://ixltdyumdlthrtgx.onion/ (CURRENTLY DOWN) -DOPPLE PAYMER http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/ -RANSOMWARE GROUP SITES (list) http://thexfvx7hqcrpgtm.onion/ -PROMETHEUS http://promethw27cbrcot.onion/blog/ -GRIEF http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion -NEMTY http://nemty.top (CURRENTLY DOWN) -SEKHMET http://sekhmet.top (CURRENTLY DOWN) -NETWALKER rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion (CURRENTLY DOWN) -LOCKBIT 2.0 http://Lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion -HIVE http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/ -VICE SOCIETY http://4hzyuotli6maqa4u.onion -AVOS http://avos2fuj6olp6x36.onion/ -ECH0RAIX http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion -QLOCKER http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion -MYDECRYPTOR http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion -RAMP http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/ -EP918 http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/ -AVOS http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion -HARON http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion -HELLO KITTY http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/ -RAGNAROK http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/ +|Name|Link| +| ------ | ------ | +|AVADDON| http://avaddongun7rngel.onion/| +|SODINOKIBI (REVIL)| http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/| +|NEFILIM| http://hxt254aygrsziejn.onion/| +|VFOKX (1)| http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/| +|VFOKX (2)| http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/| +|MARKETO (deep)| https://marketo.cloud/| +|MARKETO (dark)| http://g5sbltooh2okkcb2.onion/| +|LORENZ |http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/| +|CONTI/RYUK| http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/| +|CONTI (SURFACE WEB)| https://continews.click/| +|RANSOMEXX| http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/| +|SynACK| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/| +|PAYLOD.BIN (EX BABUK LOCKER) |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/| +|DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ (CURRENTLY DOWN)| +|CLOP |http://ekbgzchl6x2ias37.onion/| +|MOUNT LOCKER |http://mountnewsokhwilx.onion/ (CURRENTLY DOWN)| +|PYSA |http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html| +|ASTROTEAM |http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/| +|SUNCRYPT |http://nbzzb6sa6xuura2z.onion/| +|PAY2KEY |http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion/| +|EVEREST |http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/| +|RANZY/AKO |http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion/ (CURRENTLY DOWN)| +|CUBA |http://cuba4mp6ximo2zlo.onion/| +|RAGNAROK |http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion/ (CURRENTLY DOWN)| +|RAGNAR LOCKER (old) |http://ragnarleaks.top/ (CURRENTLY DOWN)| +|RAGNAR LOCKER |http://p6o7m73ujalhgkiv.onion/| +|EGREGOR |https://egregornews.com/ (CURRENTLY DOWN)| +|MAZE |https://newsmaze.net/ (CURRENTLY DOWN)| +|LV (1) |http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion| +|LV (2) |http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion/| +|XING LOCKER| http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/| +|LOCKBIT |http://lockbitkodidilol.onion/ (CURRENTLY DOWN)| +|BLACK SHADOW |http://544corkfh5hwhtn4.onion/ (CURRENTLY DOWN)| +|N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ (CURRENTLY DOWN)| +|HADES |http://ixltdyumdlthrtgx.onion/ (CURRENTLY DOWN)| +|DOPPLE PAYMER |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/| +|RANSOMWARE GROUP SITES (list) |http://thexfvx7hqcrpgtm.onion/| +|PROMETHEUS |http://promethw27cbrcot.onion/blog/| +|GRIEF |http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion| +|NEMTY |http://nemty.top (CURRENTLY DOWN)| +|SEKHMET |http://sekhmet.top (CURRENTLY DOWN)| +|NETWALKER |http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion (CURRENTLY DOWN)| +|LOCKBIT 2.0 |http://Lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion| +|HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/| +|VICE SOCIETY |http://4hzyuotli6maqa4u.onion| +|AVOS |http://avos2fuj6olp6x36.onion/| +|ECH0RAIX |http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion| +|QLOCKER |http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion| +|MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion| +|RAMP |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/| +|EP918 |http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/| +|AVOS |http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion| +|HARON |http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion| +|HELLO KITTY |http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/| +|RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/ From 77e8630fc85ad0dc10827d013b322c02d67fa331 Mon Sep 17 00:00:00 2001 From: danieleperera Date: Tue, 27 Jul 2021 16:34:28 +0200 Subject: [PATCH 086/180] renamed txt to md --- ransomware_gang => ransomware_gang.md | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename ransomware_gang => ransomware_gang.md (100%) diff --git a/ransomware_gang b/ransomware_gang.md similarity index 100% rename from ransomware_gang rename to ransomware_gang.md From 780ca11a21fa48017f4b1cffdfaa914aef8c6c09 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 16:36:59 +0200 Subject: [PATCH 087/180] Add FSSQUAD --- forum | 1 + 1 file changed, 1 insertion(+) diff --git a/forum b/forum index b7aa05a..d730003 100644 --- a/forum +++ b/forum @@ -28,3 +28,4 @@ DARK2WEB https://dark2web.net/ ITALIAN DARKNET COMMUNITY 3.0 (dark) http://dhri7ogvfpnflpkj3sc5x7umjl4gd26bkukzotbwdy76yjp5qvhjzmqd.onion ALTENEN (deep) https://altenens.is/ CARDING FORUM (deep) https://cybercarders.su/ +FSSQUAD https://fssquad.com/ From 1833f6883e3870271bc4439b290b54e47517ad01 Mon Sep 17 00:00:00 2001 From: danieleperera Date: Tue, 27 Jul 2021 16:38:54 +0200 Subject: [PATCH 088/180] added status --- ransomware_gang.md | 112 ++++++++++++++++++++++----------------------- 1 file changed, 56 insertions(+), 56 deletions(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index f521ccc..7b29391 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -1,57 +1,57 @@ -|Name|Link| -| ------ | ------ | -|AVADDON| http://avaddongun7rngel.onion/| -|SODINOKIBI (REVIL)| http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/| -|NEFILIM| http://hxt254aygrsziejn.onion/| -|VFOKX (1)| http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/| -|VFOKX (2)| http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/| -|MARKETO (deep)| https://marketo.cloud/| -|MARKETO (dark)| http://g5sbltooh2okkcb2.onion/| -|LORENZ |http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/| -|CONTI/RYUK| http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/| -|CONTI (SURFACE WEB)| https://continews.click/| -|RANSOMEXX| http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/| -|SynACK| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/| -|PAYLOD.BIN (EX BABUK LOCKER) |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/| -|DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ (CURRENTLY DOWN)| -|CLOP |http://ekbgzchl6x2ias37.onion/| -|MOUNT LOCKER |http://mountnewsokhwilx.onion/ (CURRENTLY DOWN)| -|PYSA |http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html| -|ASTROTEAM |http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/| -|SUNCRYPT |http://nbzzb6sa6xuura2z.onion/| -|PAY2KEY |http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion/| -|EVEREST |http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/| -|RANZY/AKO |http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion/ (CURRENTLY DOWN)| -|CUBA |http://cuba4mp6ximo2zlo.onion/| -|RAGNAROK |http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion/ (CURRENTLY DOWN)| -|RAGNAR LOCKER (old) |http://ragnarleaks.top/ (CURRENTLY DOWN)| -|RAGNAR LOCKER |http://p6o7m73ujalhgkiv.onion/| -|EGREGOR |https://egregornews.com/ (CURRENTLY DOWN)| -|MAZE |https://newsmaze.net/ (CURRENTLY DOWN)| -|LV (1) |http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion| -|LV (2) |http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion/| -|XING LOCKER| http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/| -|LOCKBIT |http://lockbitkodidilol.onion/ (CURRENTLY DOWN)| -|BLACK SHADOW |http://544corkfh5hwhtn4.onion/ (CURRENTLY DOWN)| -|N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ (CURRENTLY DOWN)| -|HADES |http://ixltdyumdlthrtgx.onion/ (CURRENTLY DOWN)| -|DOPPLE PAYMER |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/| -|RANSOMWARE GROUP SITES (list) |http://thexfvx7hqcrpgtm.onion/| -|PROMETHEUS |http://promethw27cbrcot.onion/blog/| -|GRIEF |http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion| -|NEMTY |http://nemty.top (CURRENTLY DOWN)| -|SEKHMET |http://sekhmet.top (CURRENTLY DOWN)| -|NETWALKER |http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion (CURRENTLY DOWN)| -|LOCKBIT 2.0 |http://Lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion| -|HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/| -|VICE SOCIETY |http://4hzyuotli6maqa4u.onion| -|AVOS |http://avos2fuj6olp6x36.onion/| -|ECH0RAIX |http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion| -|QLOCKER |http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion| -|MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion| -|RAMP |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/| -|EP918 |http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/| -|AVOS |http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion| -|HARON |http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion| -|HELLO KITTY |http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/| +|Name|Link|Status| +| ------ | ------ | ------ | +|AVADDON| http://avaddongun7rngel.onion/|| +|SODINOKIBI (REVIL)| http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/|| +|NEFILIM| http://hxt254aygrsziejn.onion/|| +|VFOKX (1)| http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/|| +|VFOKX (2)| http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/|| +|MARKETO (deep)| https://marketo.cloud/|| +|MARKETO (dark)| http://g5sbltooh2okkcb2.onion/|| +|LORENZ |http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/|| +|CONTI/RYUK| http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/|| +|CONTI (SURFACE WEB)| https://continews.click/|| +|RANSOMEXX| http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/|| +|SynACK| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/|| +|PAYLOD.BIN (EX BABUK LOCKER) |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/|| +|DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ |(CURRENTLY DOWN)| +|CLOP |http://ekbgzchl6x2ias37.onion/|| +|MOUNT LOCKER |http://mountnewsokhwilx.onion/ (CURRENTLY DOWN)|| +|PYSA |http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html|| +|ASTROTEAM |http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/|| +|SUNCRYPT |http://nbzzb6sa6xuura2z.onion/|| +|PAY2KEY |http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion/|| +|EVEREST |http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/|| +|RANZY/AKO |http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion/ |(CURRENTLY DOWN)| +|CUBA |http://cuba4mp6ximo2zlo.onion/|| +|RAGNAROK |http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion/ |(CURRENTLY DOWN)| +|RAGNAR LOCKER (old) |http://ragnarleaks.top/ |(CURRENTLY DOWN)| +|RAGNAR LOCKER |http://p6o7m73ujalhgkiv.onion/|| +|EGREGOR |https://egregornews.com/ |(CURRENTLY DOWN)| +|MAZE |https://newsmaze.net/ |(CURRENTLY DOWN)| +|LV (1) |http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion|| +|LV (2) |http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion/|| +|XING LOCKER| http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/|| +|LOCKBIT |http://lockbitkodidilol.onion/ |(CURRENTLY DOWN)| +|BLACK SHADOW |http://544corkfh5hwhtn4.onion/ |(CURRENTLY DOWN)| +|N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ |(CURRENTLY DOWN)| +|HADES |http://ixltdyumdlthrtgx.onion/ (CURRENTLY DOWN)|| +|DOPPLE PAYMER |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/|| +|RANSOMWARE GROUP SITES (list) |http://thexfvx7hqcrpgtm.onion/|| +|PROMETHEUS |http://promethw27cbrcot.onion/blog/|| +|GRIEF |http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion|| +|NEMTY |http://nemty.top |(CURRENTLY DOWN)| +|SEKHMET |http://sekhmet.top |(CURRENTLY DOWN)| +|NETWALKER |http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion |(CURRENTLY DOWN)| +|LOCKBIT 2.0 |http://Lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion|| +|HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/|| +|VICE SOCIETY |http://4hzyuotli6maqa4u.onion|| +|AVOS |http://avos2fuj6olp6x36.onion/|| +|ECH0RAIX |http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion|| +|QLOCKER |http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion|| +|MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion|| +|RAMP |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/|| +|EP918 |http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/|| +|AVOS |http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion|| +|HARON |http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion|| +|HELLO KITTY |http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/|| |RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/ From bef6704df2d94ebea899c37087919fc6aab76137 Mon Sep 17 00:00:00 2001 From: danieleperera Date: Tue, 27 Jul 2021 16:40:01 +0200 Subject: [PATCH 089/180] updated --- ransomware_gang.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 7b29391..12ac8c8 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -15,7 +15,7 @@ |PAYLOD.BIN (EX BABUK LOCKER) |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/|| |DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ |(CURRENTLY DOWN)| |CLOP |http://ekbgzchl6x2ias37.onion/|| -|MOUNT LOCKER |http://mountnewsokhwilx.onion/ (CURRENTLY DOWN)|| +|MOUNT LOCKER |http://mountnewsokhwilx.onion/ |(CURRENTLY DOWN)| |PYSA |http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html|| |ASTROTEAM |http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/|| |SUNCRYPT |http://nbzzb6sa6xuura2z.onion/|| @@ -34,7 +34,7 @@ |LOCKBIT |http://lockbitkodidilol.onion/ |(CURRENTLY DOWN)| |BLACK SHADOW |http://544corkfh5hwhtn4.onion/ |(CURRENTLY DOWN)| |N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ |(CURRENTLY DOWN)| -|HADES |http://ixltdyumdlthrtgx.onion/ (CURRENTLY DOWN)|| +|HADES |http://ixltdyumdlthrtgx.onion/ |(CURRENTLY DOWN)| |DOPPLE PAYMER |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/|| |RANSOMWARE GROUP SITES (list) |http://thexfvx7hqcrpgtm.onion/|| |PROMETHEUS |http://promethw27cbrcot.onion/blog/|| From 3468005d5e2ab57ffc36800ecaf646307f46b59e Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 16:42:06 +0200 Subject: [PATCH 090/180] ADD DATABASE --- markets | 1 + 1 file changed, 1 insertion(+) diff --git a/markets b/markets index e848f81..c9f0a2a 100644 --- a/markets +++ b/markets @@ -8,3 +8,4 @@ MAGBO (tor) http://magbocc3tco4vmxx.onion/ MAGBO (clear) https://magbo.shop LOCKDATA AUCTION (probably scam site) http://wm6mbuzipviusuc42kcggzkdpbhuv45sn7olyamy6mcqqked3waslbqd.onion/ DARK ZONE http://6bcecdo7ldzkudt6dnsuljqoyhgme4afsnytarre5nucjhgzmrn4txad.onion +DATABASE http://database6e2t4yvdsrbw3qq6votzyfzspaso7sjga2tchx6tov23nsid.onion/ From 1c8ecdd7c98fe5613b9f126e9d50cda0a8abc44c Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 17:31:10 +0200 Subject: [PATCH 091/180] added markdown to discord --- discord | 3 --- discord.md | 5 +++++ 2 files changed, 5 insertions(+), 3 deletions(-) delete mode 100644 discord create mode 100644 discord.md diff --git a/discord b/discord deleted file mode 100644 index c3baebd..0000000 --- a/discord +++ /dev/null @@ -1,3 +0,0 @@ -_db [breach] https://discord.gg/j3HmDmhh (valid 7 days from 07/06/21) -OpticalMarket https://discord.gg/kUyhdgvM (valid 7 days from 07/06/21) -Eros Market https://discord.gg/YZmJNjcG (valid 7 data from 07/19/21) diff --git a/discord.md b/discord.md new file mode 100644 index 0000000..2581893 --- /dev/null +++ b/discord.md @@ -0,0 +1,5 @@ +|Name|Link| +| ------ | ------ | +|_db [breach]| https://discord.gg/j3HmDmhh (valid 7 days from 07/06/21)| +|OpticalMarket| https://discord.gg/kUyhdgvM (valid 7 days from 07/06/21)| +|Eros Market| https://discord.gg/YZmJNjcG (valid 7 data from 07/19/21)| From bf850ff6f50e872dc49a5f675586c08af7f0112a Mon Sep 17 00:00:00 2001 From: danieleperera Date: Tue, 27 Jul 2021 17:34:03 +0200 Subject: [PATCH 092/180] added two methods --- methods | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/methods b/methods index ca642ff..eb46e50 100644 --- a/methods +++ b/methods @@ -45,3 +45,18 @@ ssl:".onion" REDDIT join to r/onions + +How to download large files from Tor or anonymize yourself while downloading files +- Install torsocks `sudo apt install torsocks` +- Use torsocks chained with wget `torsocks wget --tries=0 --retry-connrefused --continue --timeout=90 --progress=bar --show-progress --random-wait --append-output=/tmp/wget_background ` + + +How to download files via cmdline from Raidforums +- On your favorite browser go to raidforums website +- Open developer tools (for firefox CTRL+SHIFT+i) +- Go to network (if no data do CTRL+r to reload) +- Right click on a request and copy cURL (this cURL should contain your session cookies) +- Paste copied on your favorite text editor +- Replace url with download link (usually it's something like https://db.raidforums.com/z/down.php?id=259554) +- Append --output to your cURL cmd with a filename like (curl ... --output thisisatest.7z) +- Enjoy From f9b23a93ec249dff1c405391f90cd3c7c02381dc Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 17:35:10 +0200 Subject: [PATCH 093/180] Add status field --- discord.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/discord.md b/discord.md index 2581893..0103760 100644 --- a/discord.md +++ b/discord.md @@ -1,5 +1,6 @@ -|Name|Link| -| ------ | ------ | -|_db [breach]| https://discord.gg/j3HmDmhh (valid 7 days from 07/06/21)| -|OpticalMarket| https://discord.gg/kUyhdgvM (valid 7 days from 07/06/21)| -|Eros Market| https://discord.gg/YZmJNjcG (valid 7 data from 07/19/21)| +|Name|Link|Status| +| ------ | ------ | ------ | +|AVADDON| http://avaddongun7rngel.onion/|| +|_db [breach]| https://discord.gg/j3HmDmhh| valid 7 days from 07/06/21| +|OpticalMarket| https://discord.gg/kUyhdgvM| valid 7 days from 07/06/21| +|Eros Market| https://discord.gg/YZmJNjcG| valid 7 days from 07/19/21| From 14e9c693473a8b39822d9ef4bb3cc1e0245b915d Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 17:35:23 +0200 Subject: [PATCH 094/180] fix --- discord.md | 1 - 1 file changed, 1 deletion(-) diff --git a/discord.md b/discord.md index 0103760..4cbda9a 100644 --- a/discord.md +++ b/discord.md @@ -1,6 +1,5 @@ |Name|Link|Status| | ------ | ------ | ------ | -|AVADDON| http://avaddongun7rngel.onion/|| |_db [breach]| https://discord.gg/j3HmDmhh| valid 7 days from 07/06/21| |OpticalMarket| https://discord.gg/kUyhdgvM| valid 7 days from 07/06/21| |Eros Market| https://discord.gg/YZmJNjcG| valid 7 days from 07/19/21| From 6d0fda9763d225e8cce74d4187ed246fa5cde6be Mon Sep 17 00:00:00 2001 From: SimoneCagol <57213014+SimoneCagol@users.noreply.github.com> Date: Tue, 27 Jul 2021 17:41:44 +0200 Subject: [PATCH 095/180] added markdown to others --- others | 14 -------------- others.md | 16 ++++++++++++++++ 2 files changed, 16 insertions(+), 14 deletions(-) delete mode 100644 others create mode 100644 others.md diff --git a/others b/others deleted file mode 100644 index 29ac090..0000000 --- a/others +++ /dev/null @@ -1,14 +0,0 @@ -LINK BASE (various forums links) https://link-base.org/ -LYZEM (Telegram search engine) https://lyzem.com/ -DARK LEAK MARKET http://54rdhzjzc4ids4u4wata4zr4ywfon5wpz2ml4q3avelgadpvmdal2vqd.onion/ -HAPPY BLOG http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/ -PHOBOS SEARCH ENGINE http://phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion -HAYSTACK SEARCH ENGINE http://haystakvxad7wbk5.onion -VISITOR SEARCH ENGINE http://visitorfi5kl7q7i.onion -I2P SEARCH ENGINE http://i2poulge3qyo33q4uazlda367okpkczn4rno2vjfetawoghciae6ygad.onion/ -DARKFEED LIVE RANSOMWARE MONITOR https://darkfeed.io/indexransomware/ -DARKFEED RANSOMWIKI https://darkfeed.io/ransomwiki/ -DARKTOR http://darktorhvabc652txfc575oendhykqcllb7bh7jhhsjduocdlyzdbmqd.onion/ -QUANTUM BLOG http://quantum445bh3gzuyilxdzs5xdepf3b7lkcupswvkryf3n7hgzpxebid.onion -SAUDI ARAMCO LEAK http://662m7dfcpfsmeetqucdekz3rn4a6dxsxbdjwd6iz3rwnogjsj7i3hxad.onion/ -BL4CKT0R http://bl4cktorpms2gybrcyt52aakcxt6yn37byb65uama5cimhifcscnqkid.onion/ diff --git a/others.md b/others.md new file mode 100644 index 0000000..d901042 --- /dev/null +++ b/others.md @@ -0,0 +1,16 @@ +|Name|Link| +| ------ | ------ | +|LINK BASE (various forums links)|https://link-base.org/| +|LYZEM (Telegram search engine)|https://lyzem.com/| +|DARK LEAK MARKET|http://54rdhzjzc4ids4u4wata4zr4ywfon5wpz2ml4q3avelgadpvmdal2vqd.onion/| +|HAPPY BLOG|http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/| +|PHOBOS SEARCH ENGINE|http://phobosxilamwcg75xt22id7aywkzol6q6rfl2flipcqoc4e4ahima5id.onion| +|HAYSTACK SEARCH ENGINE|http://haystakvxad7wbk5.onion| +|VISITOR SEARCH ENGINE|http://visitorfi5kl7q7i.onion| +|I2P SEARCH ENGINE|http://i2poulge3qyo33q4uazlda367okpkczn4rno2vjfetawoghciae6ygad.onion/| +|DARKFEED LIVE RANSOMWARE MONITOR|https://darkfeed.io/indexransomware/| +|DARKFEED RANSOMWIKI|https://darkfeed.io/ransomwiki/| +|DARKTOR|http://darktorhvabc652txfc575oendhykqcllb7bh7jhhsjduocdlyzdbmqd.onion/| +|QUANTUM BLOG|http://quantum445bh3gzuyilxdzs5xdepf3b7lkcupswvkryf3n7hgzpxebid.onion| +|SAUDI ARAMCO LEAK|http://662m7dfcpfsmeetqucdekz3rn4a6dxsxbdjwd6iz3rwnogjsj7i3hxad.onion/| +|BL4CKT0R|http://bl4cktorpms2gybrcyt52aakcxt6yn37byb65uama5cimhifcscnqkid.onion/| From 2bd88adddcabebcd7d80eec03825823234561322 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 22:35:17 +0200 Subject: [PATCH 096/180] added markdown to markets --- markets | 11 ----------- markets.md | 13 +++++++++++++ 2 files changed, 13 insertions(+), 11 deletions(-) delete mode 100644 markets create mode 100644 markets.md diff --git a/markets b/markets deleted file mode 100644 index c9f0a2a..0000000 --- a/markets +++ /dev/null @@ -1,11 +0,0 @@ -WHM market http://76p5k6gw25l5jpy7ombo2m7gt4zppowbz47sizvlzkigvnyhhc26znyd.onion -Russian Market (tor) http://rusmarkethgwhfbn.onion/ -Russian Market (clear) https://russianmarket.gs/ -Russian Market (clear) https://russianmarket.gs/ -Genesis Market (clear) https://genesis.market/ -HYDRA http://hydra3rudf3j4hww.onion/ -MAGBO (tor) http://magbocc3tco4vmxx.onion/ -MAGBO (clear) https://magbo.shop -LOCKDATA AUCTION (probably scam site) http://wm6mbuzipviusuc42kcggzkdpbhuv45sn7olyamy6mcqqked3waslbqd.onion/ -DARK ZONE http://6bcecdo7ldzkudt6dnsuljqoyhgme4afsnytarre5nucjhgzmrn4txad.onion -DATABASE http://database6e2t4yvdsrbw3qq6votzyfzspaso7sjga2tchx6tov23nsid.onion/ diff --git a/markets.md b/markets.md new file mode 100644 index 0000000..fd32a4e --- /dev/null +++ b/markets.md @@ -0,0 +1,13 @@ +|Name|Link| +| ------ | ------ | +|WHM market| http://76p5k6gw25l5jpy7ombo2m7gt4zppowbz47sizvlzkigvnyhhc26znyd.onion| +|Russian Market (tor)| http://rusmarkethgwhfbn.onion/| +|Russian Market (clear)| https://russianmarket.gs/| +|Russian Market (clear)| https://russianmarket.gs/| +|Genesis Market (clear)| https://genesis.market/| +|HYDRA|http://hydra3rudf3j4hww.onion/| +|MAGBO (tor)| http://magbocc3tco4vmxx.onion/| +|MAGBO (clear)| https://magbo.shop| +|LOCKDATA AUCTION (probably scam site)| http://wm6mbuzipviusuc42kcggzkdpbhuv45sn7olyamy6mcqqked3waslbqd.onion/| +|DARK ZONE| http://6bcecdo7ldzkudt6dnsuljqoyhgme4afsnytarre5nucjhgzmrn4txad.onion| +|DATABASE| http://database6e2t4yvdsrbw3qq6votzyfzspaso7sjga2tchx6tov23nsid.onion/| From 50b90f163ad3ae79f412bc48990e89ab9b083fa1 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 22:40:02 +0200 Subject: [PATCH 097/180] added markdown to forum --- forum | 31 ------------------------------- forum.md | 33 +++++++++++++++++++++++++++++++++ 2 files changed, 33 insertions(+), 31 deletions(-) delete mode 100644 forum create mode 100644 forum.md diff --git a/forum b/forum deleted file mode 100644 index d730003..0000000 --- a/forum +++ /dev/null @@ -1,31 +0,0 @@ -RAID FORUM https://raidforums.com/ -RAID FORUM (mirror 1) https://rf.ws -RAID FORUM (mirror 2) https://raid.lol/ -XSS (deep) https://xss.is/ -XSS (dark) http://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/ -GETREKT https://www.getrekt.io/ -EXPLOIT.IN (deep) https://exploit.in/ -EXPLOIT.IN (dark) https://exploitivzcm5dawzhe6c32bbylyggbjvh5dyvsvb5lkuz5ptmunkmqd.onion/ -DEDICATET https://dedicatet.com/ -LOLZ https://lolz.guru/ -IFUD https://ifud.cx/ -DUBLIKAT https://my.dublikat.pro/ -DARKMARKET https://darkmarket.at/ -RUTOR https://darknet.rutor.nl/ -CRDCLUB https://crdclub.su/ -CRDCLUB (dark) http://crdclub4wraumez4.onion/ -MONEYDARK https://moneymn.club/ -BTTFORUM https://btt-club.top/ -PROLOGIC https://prologic.su/ -HACKFORUMS https://hackforums.net/index.php -SINISTER https://sinister.ly/ -NULLED https://www.nulled.to/ -OGUSERS https://www.ogusers.com/ -CRACKED https://cracked.to/ -ELEAKS https://eleaks.to/ -DWF (dark) http://dwforumsmrcqdnt3.onion/ -DARK2WEB https://dark2web.net/ -ITALIAN DARKNET COMMUNITY 3.0 (dark) http://dhri7ogvfpnflpkj3sc5x7umjl4gd26bkukzotbwdy76yjp5qvhjzmqd.onion -ALTENEN (deep) https://altenens.is/ -CARDING FORUM (deep) https://cybercarders.su/ -FSSQUAD https://fssquad.com/ diff --git a/forum.md b/forum.md new file mode 100644 index 0000000..4f9d3cb --- /dev/null +++ b/forum.md @@ -0,0 +1,33 @@ +|Name|Link| +| ------ | ------ | +|RAID FORUM| https://raidforums.com/| +|RAID FORUM (mirror 1)| https://rf.ws| +|RAID FORUM (mirror 2)| https://raid.lol/| +|XSS (deep)| https://xss.is/| +|XSS (dark)| http://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/| +|GETREKT| https://www.getrekt.io/| +|EXPLOIT.IN (deep)| https://exploit.in/| +|EXPLOIT.IN (dark)| https://exploitivzcm5dawzhe6c32bbylyggbjvh5dyvsvb5lkuz5ptmunkmqd.onion/| +|DEDICATET| https://dedicatet.com/| +|LOLZ| https://lolz.guru/| +|IFUD| https://ifud.cx/| +|DUBLIKAT| https://my.dublikat.pro/| +|DARKMARKET| https://darkmarket.at/| +|RUTOR| https://darknet.rutor.nl/| +|CRDCLUB| https://crdclub.su/| +|CRDCLUB (dark)| http://crdclub4wraumez4.onion/| +|MONEYDARK| https://moneymn.club/| +|BTTFORUM| https://btt-club.top/| +|PROLOGIC| https://prologic.su/| +|HACKFORUMS| https://hackforums.net/index.php| +|SINISTER| https://sinister.ly/| +|NULLED| https://www.nulled.to/| +|OGUSERS| https://www.ogusers.com/| +|CRACKED| https://cracked.to/| +|ELEAKS| https://eleaks.to/| +|DWF (dark)| http://dwforumsmrcqdnt3.onion/| +|DARK2WEB| https://dark2web.net/| +|ITALIAN DARKNET COMMUNITY 3.0 (dark)| http://dhri7ogvfpnflpkj3sc5x7umjl4gd26bkukzotbwdy76yjp5qvhjzmqd.onion| +|ALTENEN (deep)| https://altenens.is/| +|CARDING FORUM (deep)| https://cybercarders.su/| +|FSSQUAD| https://fssquad.com/| From dfb51aef754fca5b4321a6b8b95892e55e9f176d Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 22:43:03 +0200 Subject: [PATCH 098/180] added markdown to telegram --- telegram | 47 ----------------------------------------------- telegram.md | 49 +++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 49 insertions(+), 47 deletions(-) delete mode 100644 telegram create mode 100644 telegram.md diff --git a/telegram b/telegram deleted file mode 100644 index 211ec8d..0000000 --- a/telegram +++ /dev/null @@ -1,47 +0,0 @@ -https://t.me/arvin_club -https://t.me/shieldteam1 -https://t.me/databreach -https://t.me/Combulist -https://t.me/leaked_databases -https://t.me/opendataleaks -https://t.me/dbforall -https://t.me/data1eaks -https://t.me/HK4GANG -https://t.me/freedomf0x -https://t.me/baseleak -https://t.me/freedataleak -https://t.me/AntiPlumbers -https://t.me/NullLeak -https://t.me/marketo_leaks -https://t.me/outlew (DELETED) -https://t.me/We_are_not_eternal -https://t.me/joinchat/UhP5kie2OiRetosa -https://t.me/BruteForce -https://t.me/icrewhackers -https://t.me/leaklicks/ -https://t.me/baseleak -https://t.me/joinchat/8yMjCnT06ytjNzQx -https://t.me/DataleakBin -https://t.me/combolist_top -https://t.me/meganzshare -https://t.me/joinchat/WCSE2vgon6IYGLgz -https://t.me/dataleakbreach -https://t.me/combo_lists -https://t.me/LeakData -https://t.me/LeaksData -https://t.me/fuckeddb -https://t.me/Blank_Link -https://t.me/DWI_OFFICIAL -https://t.me/joinchat/5wChO8HFwJ43YTVk -https://t.me/mailpasword -https://t.me/Yad2Leaks -https://t.me/theofficial0day -https://t.me/joinchat/AAAAAFGhhcV9p1Rm2f_Emw -https://t.me/LeaRNEXploIT -https://t.me/joinchat/YR89p_rg8Oo0Y2Ux -https://t.me/grandgive -https://t.me/torlinks -https://t.me/Sell_rdp1 -https://t.me/cyb3rtr0nian -https://t.me/cyber_cracking_mv -https://t.me/altenens diff --git a/telegram.md b/telegram.md new file mode 100644 index 0000000..29a1569 --- /dev/null +++ b/telegram.md @@ -0,0 +1,49 @@ +|Link| +| ------ | +|https://t.me/arvin_club| +|https://t.me/shieldteam1| +|https://t.me/databreach| +|https://t.me/Combulist| +|https://t.me/leaked_databases| +|https://t.me/opendataleaks| +|https://t.me/dbforall| +|https://t.me/data1eaks| +|https://t.me/HK4GANG| +|https://t.me/freedomf0x| +|https://t.me/baseleak| +|https://t.me/freedataleak| +|https://t.me/AntiPlumbers| +|https://t.me/NullLeak| +|https://t.me/marketo_leaks| +|https://t.me/outlew (DELETED)| +|https://t.me/We_are_not_eternal| +|https://t.me/joinchat/UhP5kie2OiRetosa| +|https://t.me/BruteForce| +|https://t.me/icrewhackers| +|https://t.me/leaklicks/| +|https://t.me/baseleak| +|https://t.me/joinchat/8yMjCnT06ytjNzQx| +|https://t.me/DataleakBin| +|https://t.me/combolist_top| +|https://t.me/meganzshare| +|https://t.me/joinchat/WCSE2vgon6IYGLgz| +|https://t.me/dataleakbreach| +|https://t.me/combo_lists| +|https://t.me/LeakData| +|https://t.me/LeaksData| +|https://t.me/fuckeddb| +|https://t.me/Blank_Link| +|https://t.me/DWI_OFFICIAL| +|https://t.me/joinchat/5wChO8HFwJ43YTVk| +|https://t.me/mailpasword| +|https://t.me/Yad2Leaks| +|https://t.me/theofficial0day| +|https://t.me/joinchat/AAAAAFGhhcV9p1Rm2f_Emw| +|https://t.me/LeaRNEXploIT| +|https://t.me/joinchat/YR89p_rg8Oo0Y2Ux| +|https://t.me/grandgive| +|https://t.me/torlinks| +|https://t.me/Sell_rdp1| +|https://t.me/cyb3rtr0nian| +|https://t.me/cyber_cracking_mv| +|https://t.me/altenens|| From 42f1e4f948d886fbce4439d99fa07b44c20470a4 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 23:27:20 +0200 Subject: [PATCH 099/180] Add markdown to methods --- methods => methods.md | 24 +++++++++++++----------- 1 file changed, 13 insertions(+), 11 deletions(-) rename methods => methods.md (83%) diff --git a/methods b/methods.md similarity index 83% rename from methods rename to methods.md index eb46e50..9f4093e 100644 --- a/methods +++ b/methods.md @@ -1,4 +1,4 @@ -TWITTER +**TWITTER** Look for ransomware related resources on the dark web (url:onion) "ransomware" @@ -11,47 +11,49 @@ PoC and CVE-20xx-xxxxx Look for leaks on pastebin or ghostbin target OR dump OR combo OR password OR leak OR breach OR databreach OR credential OR steal AND (url:pastebin.com OR url:ghostbin.co) -GOOGLE +**GOOGLE** Look for onion sites on AnonFiles shared intext:.onion site:anonfiles.com -Look for vulnerability PoC in GiHub +Look for vulnerability PoC in GitHub CVE-20xx-xxxxx site:GitHub.com -DARK WEB SITE ANALYSIS +**DARK WEB SITE ANALYSIS** https://www.neteye-blog.com/2021/07/analysis-of-a-dark-web-site/ -TELEGRAM +**TELEGRAM** Search for onion links in Telegram groups and channels -DISCORD +**DISCORD** Search for onion links in Discord channels -SHODAN +**SHODAN** Use these filters: ssl:".onion" ".onion" "linkxyz.onion" -REDDIT +**REDDIT** join to r/onions -How to download large files from Tor or anonymize yourself while downloading files + +**VARIOUS + +**How to download large files from Tor or anonymize yourself while downloading files ** - Install torsocks `sudo apt install torsocks` - Use torsocks chained with wget `torsocks wget --tries=0 --retry-connrefused --continue --timeout=90 --progress=bar --show-progress --random-wait --append-output=/tmp/wget_background ` - -How to download files via cmdline from Raidforums +**How to download files via cmdline from Raidforums** - On your favorite browser go to raidforums website - Open developer tools (for firefox CTRL+SHIFT+i) - Go to network (if no data do CTRL+r to reload) From c67228fcd00ff09d1263a8e6b5b895198a4459be Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 23:30:06 +0200 Subject: [PATCH 100/180] fix --- methods.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/methods.md b/methods.md index 9f4093e..016a6ac 100644 --- a/methods.md +++ b/methods.md @@ -47,7 +47,7 @@ ssl:".onion" join to r/onions -**VARIOUS +**VARIOUS** **How to download large files from Tor or anonymize yourself while downloading files ** - Install torsocks `sudo apt install torsocks` From 9474a82f0ecbd27daf66a7781c76332aa8ee4e47 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 27 Jul 2021 23:36:04 +0200 Subject: [PATCH 101/180] Add info to join Telegram group --- README.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 9140e24..680a771 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,8 @@ Collection of Cyber Threat Intelligence sources from the Deep and Dark Web The aim of this project is to collect the sources, present in the Deep and Dark web, which can be useful in Cyber Threat Intelligence contexts. -The contributors of the project have a Telegram groups available to propose new sources to be integrated within the project and to have a place to discuss the tactics and techniques of research and analysis that are used daily. +The contributors of the project (or people active in the field of Cyber Threat Intelligence) have a **Telegram groups** available to propose new sources to be integrated within the project and to have a place to discuss the tactics and techniques of research and analysis that are used daily. +It is possible to request access to the Telegram group by sending a request to https://t.me/fastfire83 **What is Cyber Threat Intelligence?** @@ -35,3 +36,5 @@ Through this project, which takes into consideration the OSINT sources related t - ransomware gangs sites - forums related to cyber criminal activities and data leaks - markets + +In addition, within the **methods** file, various techniques for searching and analyzing sources are described. From 3b3e3de5c465a1e759caf17ccc76d52c564ad99e Mon Sep 17 00:00:00 2001 From: "Juan A. Velasco" Date: Wed, 28 Jul 2021 10:28:03 +0200 Subject: [PATCH 102/180] Updates ransomware gangs including BlackMatter --- ransomware_gang.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 12ac8c8..bc7a431 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -54,4 +54,5 @@ |AVOS |http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion|| |HARON |http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion|| |HELLO KITTY |http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/|| -|RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/ +|RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/|| +|BLACKMATTER |http://blackmax7su6mbwtcyo3xwtpfxpm356jjqrs34y4crcytpw7mifuedyd.onion/ From 66d479ad3e0801ef27bd0645885c7a839d70fc7a Mon Sep 17 00:00:00 2001 From: Idar Lund Date: Wed, 28 Jul 2021 19:18:25 +0200 Subject: [PATCH 103/180] added u/p added user:password for HARON group and updated url to correct blog url --- ransomware_gang.md | 116 ++++++++++++++++++++++----------------------- 1 file changed, 58 insertions(+), 58 deletions(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index bc7a431..c039288 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -1,58 +1,58 @@ -|Name|Link|Status| -| ------ | ------ | ------ | -|AVADDON| http://avaddongun7rngel.onion/|| -|SODINOKIBI (REVIL)| http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/|| -|NEFILIM| http://hxt254aygrsziejn.onion/|| -|VFOKX (1)| http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/|| -|VFOKX (2)| http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/|| -|MARKETO (deep)| https://marketo.cloud/|| -|MARKETO (dark)| http://g5sbltooh2okkcb2.onion/|| -|LORENZ |http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/|| -|CONTI/RYUK| http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/|| -|CONTI (SURFACE WEB)| https://continews.click/|| -|RANSOMEXX| http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/|| -|SynACK| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/|| -|PAYLOD.BIN (EX BABUK LOCKER) |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/|| -|DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ |(CURRENTLY DOWN)| -|CLOP |http://ekbgzchl6x2ias37.onion/|| -|MOUNT LOCKER |http://mountnewsokhwilx.onion/ |(CURRENTLY DOWN)| -|PYSA |http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html|| -|ASTROTEAM |http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/|| -|SUNCRYPT |http://nbzzb6sa6xuura2z.onion/|| -|PAY2KEY |http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion/|| -|EVEREST |http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/|| -|RANZY/AKO |http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion/ |(CURRENTLY DOWN)| -|CUBA |http://cuba4mp6ximo2zlo.onion/|| -|RAGNAROK |http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion/ |(CURRENTLY DOWN)| -|RAGNAR LOCKER (old) |http://ragnarleaks.top/ |(CURRENTLY DOWN)| -|RAGNAR LOCKER |http://p6o7m73ujalhgkiv.onion/|| -|EGREGOR |https://egregornews.com/ |(CURRENTLY DOWN)| -|MAZE |https://newsmaze.net/ |(CURRENTLY DOWN)| -|LV (1) |http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion|| -|LV (2) |http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion/|| -|XING LOCKER| http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/|| -|LOCKBIT |http://lockbitkodidilol.onion/ |(CURRENTLY DOWN)| -|BLACK SHADOW |http://544corkfh5hwhtn4.onion/ |(CURRENTLY DOWN)| -|N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ |(CURRENTLY DOWN)| -|HADES |http://ixltdyumdlthrtgx.onion/ |(CURRENTLY DOWN)| -|DOPPLE PAYMER |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/|| -|RANSOMWARE GROUP SITES (list) |http://thexfvx7hqcrpgtm.onion/|| -|PROMETHEUS |http://promethw27cbrcot.onion/blog/|| -|GRIEF |http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion|| -|NEMTY |http://nemty.top |(CURRENTLY DOWN)| -|SEKHMET |http://sekhmet.top |(CURRENTLY DOWN)| -|NETWALKER |http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion |(CURRENTLY DOWN)| -|LOCKBIT 2.0 |http://Lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion|| -|HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/|| -|VICE SOCIETY |http://4hzyuotli6maqa4u.onion|| -|AVOS |http://avos2fuj6olp6x36.onion/|| -|ECH0RAIX |http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion|| -|QLOCKER |http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion|| -|MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion|| -|RAMP |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/|| -|EP918 |http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/|| -|AVOS |http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion|| -|HARON |http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion|| -|HELLO KITTY |http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/|| -|RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/|| -|BLACKMATTER |http://blackmax7su6mbwtcyo3xwtpfxpm356jjqrs34y4crcytpw7mifuedyd.onion/ +|Name|Link|Status|User:Password| +| ------ | ------ | ------ | ------ | +|AVADDON| http://avaddongun7rngel.onion/||| +|SODINOKIBI (REVIL)| http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/||| +|NEFILIM| http://hxt254aygrsziejn.onion/||| +|VFOKX (1)| http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/||| +|VFOKX (2)| http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/||| +|MARKETO (deep)| https://marketo.cloud/||| +|MARKETO (dark)| http://g5sbltooh2okkcb2.onion/||| +|LORENZ |http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/||| +|CONTI/RYUK| http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/||| +|CONTI (SURFACE WEB)| https://continews.click/||| +|RANSOMEXX| http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/||| +|SynACK| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/||| +|PAYLOD.BIN (EX BABUK LOCKER) |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/||| +|DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ |(CURRENTLY DOWN)|| +|CLOP |http://ekbgzchl6x2ias37.onion/||| +|MOUNT LOCKER |http://mountnewsokhwilx.onion/ |(CURRENTLY DOWN)|| +|PYSA |http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html||| +|ASTROTEAM |http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/||| +|SUNCRYPT |http://nbzzb6sa6xuura2z.onion/||| +|PAY2KEY |http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion/||| +|EVEREST |http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/||| +|RANZY/AKO |http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion/ |(CURRENTLY DOWN)|| +|CUBA |http://cuba4mp6ximo2zlo.onion/||| +|RAGNAROK |http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion/ |(CURRENTLY DOWN)|| +|RAGNAR LOCKER (old) |http://ragnarleaks.top/ |(CURRENTLY DOWN)|| +|RAGNAR LOCKER |http://p6o7m73ujalhgkiv.onion/||| +|EGREGOR |https://egregornews.com/ |(CURRENTLY DOWN)|| +|MAZE |https://newsmaze.net/ |(CURRENTLY DOWN)|| +|LV (1) |http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion||| +|LV (2) |http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion/||| +|XING LOCKER| http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/||| +|LOCKBIT |http://lockbitkodidilol.onion/ |(CURRENTLY DOWN)|| +|BLACK SHADOW |http://544corkfh5hwhtn4.onion/ |(CURRENTLY DOWN)|| +|N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ |(CURRENTLY DOWN)|| +|HADES |http://ixltdyumdlthrtgx.onion/ |(CURRENTLY DOWN)|| +|DOPPLE PAYMER |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/||| +|RANSOMWARE GROUP SITES (list) |http://thexfvx7hqcrpgtm.onion/||| +|PROMETHEUS |http://promethw27cbrcot.onion/blog/||| +|GRIEF |http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion||| +|NEMTY |http://nemty.top |(CURRENTLY DOWN)|| +|SEKHMET |http://sekhmet.top |(CURRENTLY DOWN)|| +|NETWALKER |http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion |(CURRENTLY DOWN)|| +|LOCKBIT 2.0 |http://Lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion||| +|HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/||| +|VICE SOCIETY |http://4hzyuotli6maqa4u.onion||| +|AVOS |http://avos2fuj6olp6x36.onion/||| +|ECH0RAIX |http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion||| +|QLOCKER |http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion||| +|MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion||| +|RAMP |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/||| +|EP918 |http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/||| +|AVOS |http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion||| +|HARON |http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion/blog.php||Chaddadgroup:Chaddadgroup| +|HELLO KITTY |http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/||| +|RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/||| +|BLACKMATTER |http://blackmax7su6mbwtcyo3xwtpfxpm356jjqrs34y4crcytpw7mifuedyd.onion/||| From 41d3022b7c2706dc4abb60f03205f618dfdb37f1 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 28 Jul 2021 21:34:49 +0200 Subject: [PATCH 104/180] Update SynACK --- ransomware_gang.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index c039288..66d2115 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -11,7 +11,7 @@ |CONTI/RYUK| http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/||| |CONTI (SURFACE WEB)| https://continews.click/||| |RANSOMEXX| http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/||| -|SynACK| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/||| +|SynACK (El_Cometa)| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/||| |PAYLOD.BIN (EX BABUK LOCKER) |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/||| |DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ |(CURRENTLY DOWN)|| |CLOP |http://ekbgzchl6x2ias37.onion/||| From 9811b1d2630947179a25a2b9c6a685cbc0858b6d Mon Sep 17 00:00:00 2001 From: V <45754825+vxsh4d0w@users.noreply.github.com> Date: Thu, 29 Jul 2021 00:59:30 +0200 Subject: [PATCH 105/180] Added a couple of new forums --- forum.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/forum.md b/forum.md index 4f9d3cb..fb5faee 100644 --- a/forum.md +++ b/forum.md @@ -31,3 +31,7 @@ |ALTENEN (deep)| https://altenens.is/| |CARDING FORUM (deep)| https://cybercarders.su/| |FSSQUAD| https://fssquad.com/| +|MAILPASS| https://mailpass.club/| +|BHF| https://bhf.io/| +|LOLZGURU| https://lolz.guru/| +|NOHIDESPACE| https://nohide.space/| From 03be689fd56d18ea3daf0880bd6d6121116771fd Mon Sep 17 00:00:00 2001 From: V <45754825+vxsh4d0w@users.noreply.github.com> Date: Thu, 29 Jul 2021 01:09:18 +0200 Subject: [PATCH 106/180] New channels --- telegram.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/telegram.md b/telegram.md index 29a1569..09e9692 100644 --- a/telegram.md +++ b/telegram.md @@ -47,3 +47,6 @@ |https://t.me/cyb3rtr0nian| |https://t.me/cyber_cracking_mv| |https://t.me/altenens|| +|https://t.me/mailpassclub|| +|https://t.me/emailMarketingDliaPraktikov|| + From e54b0f158fb5a136b0d17c268c3377b97757d401 Mon Sep 17 00:00:00 2001 From: V <45754825+vxsh4d0w@users.noreply.github.com> Date: Thu, 29 Jul 2021 01:13:59 +0200 Subject: [PATCH 107/180] Another forum --- forum.md | 1 + 1 file changed, 1 insertion(+) diff --git a/forum.md b/forum.md index 4f9d3cb..7be3a7d 100644 --- a/forum.md +++ b/forum.md @@ -31,3 +31,4 @@ |ALTENEN (deep)| https://altenens.is/| |CARDING FORUM (deep)| https://cybercarders.su/| |FSSQUAD| https://fssquad.com/| +|LEAKS.SX| https://leak.sx/| From 521c893cdf7d621f9f6ef7238a0d2e54e596d0b6 Mon Sep 17 00:00:00 2001 From: "Juan A. Velasco" Date: Thu, 29 Jul 2021 10:20:49 +0200 Subject: [PATCH 108/180] Updates with new Babuk site (return) --- ransomware_gang.md | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang.md b/ransomware_gang.md index 66d2115..c9ecd7f 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -56,3 +56,4 @@ |HELLO KITTY |http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/||| |RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/||| |BLACKMATTER |http://blackmax7su6mbwtcyo3xwtpfxpm356jjqrs34y4crcytpw7mifuedyd.onion/||| +|BABUK |http://nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion/||| From 6cb55d9713e6a8d484d25b701bc5e65c239b6cfd Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 29 Jul 2021 12:59:18 +0200 Subject: [PATCH 109/180] Update telegram.md Hi @vxsh4d0w , ok for mailpassclub channel, instead I did not find interesting information in the emailMarketingDliaPraktikov channel, so I decided not to add it to the project --- telegram.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/telegram.md b/telegram.md index 09e9692..fd757a6 100644 --- a/telegram.md +++ b/telegram.md @@ -48,5 +48,3 @@ |https://t.me/cyber_cracking_mv| |https://t.me/altenens|| |https://t.me/mailpassclub|| -|https://t.me/emailMarketingDliaPraktikov|| - From 77d0984e371daee92db310170760610cb6433fa7 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 29 Jul 2021 13:01:42 +0200 Subject: [PATCH 110/180] Add DB_MARKEET --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index fd757a6..b74cb29 100644 --- a/telegram.md +++ b/telegram.md @@ -48,3 +48,4 @@ |https://t.me/cyber_cracking_mv| |https://t.me/altenens|| |https://t.me/mailpassclub|| +|https://t.me/DB_MARKEET| From 5bdfc259b228918d2f42cacd3fb07521136bf589 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 29 Jul 2021 13:04:45 +0200 Subject: [PATCH 111/180] Add NoHide.Space --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index b74cb29..95fa10e 100644 --- a/telegram.md +++ b/telegram.md @@ -49,3 +49,4 @@ |https://t.me/altenens|| |https://t.me/mailpassclub|| |https://t.me/DB_MARKEET| +||https://t.me/nohidespace| From 495bdfc5556d176728d1d61b72e92782b87df780 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 30 Jul 2021 09:58:52 +0200 Subject: [PATCH 112/180] Add Hotarus --- ransomware_gang.md | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang.md b/ransomware_gang.md index c9ecd7f..492c687 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -57,3 +57,4 @@ |RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/||| |BLACKMATTER |http://blackmax7su6mbwtcyo3xwtpfxpm356jjqrs34y4crcytpw7mifuedyd.onion/||| |BABUK |http://nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion/||| +|HOTARUS |http://r6d636w47ncnaukrpvlhmtdbvbeltc6enfcuuow3jclpmyga7cz374qd.onion/||| From df7c2a3b9c61330d85d3226c7eb9944ab32de828 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 30 Jul 2021 12:12:09 +0200 Subject: [PATCH 113/180] Add hadesh0p --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index 95fa10e..fa1a883 100644 --- a/telegram.md +++ b/telegram.md @@ -50,3 +50,4 @@ |https://t.me/mailpassclub|| |https://t.me/DB_MARKEET| ||https://t.me/nohidespace| +||https://t.me/hadesh0p| From 4b96877668d08d1f33ba2b55ab49a57a82c16161 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 30 Jul 2021 12:13:40 +0200 Subject: [PATCH 114/180] fix --- telegram.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/telegram.md b/telegram.md index fa1a883..b489456 100644 --- a/telegram.md +++ b/telegram.md @@ -46,8 +46,8 @@ |https://t.me/Sell_rdp1| |https://t.me/cyb3rtr0nian| |https://t.me/cyber_cracking_mv| -|https://t.me/altenens|| -|https://t.me/mailpassclub|| +|https://t.me/altenens| +|https://t.me/mailpassclub| |https://t.me/DB_MARKEET| -||https://t.me/nohidespace| -||https://t.me/hadesh0p| +|https://t.me/nohidespace| +|https://t.me/hadesh0p| From 887dc64199cccec1824d7ea6b86316842afea44f Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 30 Jul 2021 13:47:23 +0200 Subject: [PATCH 115/180] Add PWNDB --- others.md | 1 + 1 file changed, 1 insertion(+) diff --git a/others.md b/others.md index d901042..a4a4144 100644 --- a/others.md +++ b/others.md @@ -14,3 +14,4 @@ |QUANTUM BLOG|http://quantum445bh3gzuyilxdzs5xdepf3b7lkcupswvkryf3n7hgzpxebid.onion| |SAUDI ARAMCO LEAK|http://662m7dfcpfsmeetqucdekz3rn4a6dxsxbdjwd6iz3rwnogjsj7i3hxad.onion/| |BL4CKT0R|http://bl4cktorpms2gybrcyt52aakcxt6yn37byb65uama5cimhifcscnqkid.onion/| +|PWNDB|http://pwndb2am4tzkvold.onion/| From 2aa9fe25053a8e74c721311c7cbbc87b3db74d9b Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 30 Jul 2021 14:36:19 +0200 Subject: [PATCH 116/180] Add breachdetector --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index b489456..d178886 100644 --- a/telegram.md +++ b/telegram.md @@ -51,3 +51,4 @@ |https://t.me/DB_MARKEET| |https://t.me/nohidespace| |https://t.me/hadesh0p| +||https://t.me/breachdetector| From 37606cedff122b4809dfea6af4f2dfc70489b295 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 30 Jul 2021 14:36:31 +0200 Subject: [PATCH 117/180] Update telegram.md --- telegram.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/telegram.md b/telegram.md index d178886..b2b167d 100644 --- a/telegram.md +++ b/telegram.md @@ -51,4 +51,4 @@ |https://t.me/DB_MARKEET| |https://t.me/nohidespace| |https://t.me/hadesh0p| -||https://t.me/breachdetector| +|https://t.me/breachdetector| From a6d9a704dc4560f6afb037444f665110d225f73f Mon Sep 17 00:00:00 2001 From: V <45754825+vxsh4d0w@users.noreply.github.com> Date: Fri, 30 Jul 2021 16:12:44 +0200 Subject: [PATCH 118/180] Link moved from Ransomware_Gang section --- others.md | 1 + 1 file changed, 1 insertion(+) diff --git a/others.md b/others.md index a4a4144..df69a65 100644 --- a/others.md +++ b/others.md @@ -15,3 +15,4 @@ |SAUDI ARAMCO LEAK|http://662m7dfcpfsmeetqucdekz3rn4a6dxsxbdjwd6iz3rwnogjsj7i3hxad.onion/| |BL4CKT0R|http://bl4cktorpms2gybrcyt52aakcxt6yn37byb65uama5cimhifcscnqkid.onion/| |PWNDB|http://pwndb2am4tzkvold.onion/| +|RANSOMWARE PAYMENTS TRACKER| https://ransomwhe.re/||| From 50faa0dcb6d09c378573e063a9a411f4577b1330 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 30 Jul 2021 23:03:30 +0200 Subject: [PATCH 119/180] Create exploits.md --- exploits.md | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 exploits.md diff --git a/exploits.md b/exploits.md new file mode 100644 index 0000000..929cd73 --- /dev/null +++ b/exploits.md @@ -0,0 +1,6 @@ +|Name|Link| +| ------ | ------ | +|CXSECURITY| https://cxsecurity.com/exploit/| +|EXPLOIT DATABASE| https://www.exploit-db.com/| +|VULNERABILITY LAB| https://www.vulnerability-lab.com/| +|0DAY.TODAY| https://0day.today/| From ea83a9343cbf6da6db1e8ac3128874c7a5ffa109 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 30 Jul 2021 23:07:23 +0200 Subject: [PATCH 120/180] Add exploits databases --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 680a771..e1dc428 100644 --- a/README.md +++ b/README.md @@ -36,5 +36,6 @@ Through this project, which takes into consideration the OSINT sources related t - ransomware gangs sites - forums related to cyber criminal activities and data leaks - markets +- exploits databases In addition, within the **methods** file, various techniques for searching and analyzing sources are described. From 727fe6751832091311e4572c8462a0a9dfbd791c Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 30 Jul 2021 23:23:11 +0200 Subject: [PATCH 121/180] Add Awesome CVE PoC --- exploits.md | 1 + 1 file changed, 1 insertion(+) diff --git a/exploits.md b/exploits.md index 929cd73..b5861a3 100644 --- a/exploits.md +++ b/exploits.md @@ -4,3 +4,4 @@ |EXPLOIT DATABASE| https://www.exploit-db.com/| |VULNERABILITY LAB| https://www.vulnerability-lab.com/| |0DAY.TODAY| https://0day.today/| +|AWESOME CVE POC| https://github.com/qazbnm456/awesome-cve-poc| From 53ef22a3873198e0c3d8b4e4bc6a0e82f9dc7d98 Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 30 Jul 2021 23:28:25 +0200 Subject: [PATCH 122/180] Add RAPID7 --- exploits.md | 1 + 1 file changed, 1 insertion(+) diff --git a/exploits.md b/exploits.md index b5861a3..ca704f8 100644 --- a/exploits.md +++ b/exploits.md @@ -5,3 +5,4 @@ |VULNERABILITY LAB| https://www.vulnerability-lab.com/| |0DAY.TODAY| https://0day.today/| |AWESOME CVE POC| https://github.com/qazbnm456/awesome-cve-poc| +|RAPID7| https://www.rapid7.com/db/?type=metasploit| From ac1e4424a6ff058315cf966774efce996a12e878 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 31 Jul 2021 10:11:18 +0200 Subject: [PATCH 123/180] Add PWNWIKI,VULNMON,SEEBUG --- exploits.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/exploits.md b/exploits.md index ca704f8..d3eb6a0 100644 --- a/exploits.md +++ b/exploits.md @@ -6,3 +6,6 @@ |0DAY.TODAY| https://0day.today/| |AWESOME CVE POC| https://github.com/qazbnm456/awesome-cve-poc| |RAPID7| https://www.rapid7.com/db/?type=metasploit| +|PWNWIKI| https://www.pwnwiki.org/index.php?title=Main_Page| +|VULNMON| https://vulmon.com/| +|SEEBUG| https://www.seebug.org/| From 8725eb13e7714ea4135be171b7bc19442fc26c3e Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 31 Jul 2021 10:12:14 +0200 Subject: [PATCH 124/180] Add PWNWIKI --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index b2b167d..c798909 100644 --- a/telegram.md +++ b/telegram.md @@ -52,3 +52,4 @@ |https://t.me/nohidespace| |https://t.me/hadesh0p| |https://t.me/breachdetector| +|https://t.me/pwnwiki_zhchannel| From 48064df25e1b9c57f78e9e88d91d50b733606709 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 31 Jul 2021 23:12:07 +0200 Subject: [PATCH 125/180] Add IntelligenceX Dorks --- methods.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/methods.md b/methods.md index 016a6ac..4ec8b48 100644 --- a/methods.md +++ b/methods.md @@ -62,3 +62,10 @@ join to r/onions - Replace url with download link (usually it's something like https://db.raidforums.com/z/down.php?id=259554) - Append --output to your cURL cmd with a filename like (curl ... --output thisisatest.7z) - Enjoy + +**SEARCH INVITATION LINKS (thanks to IntelligenceX https://intelx.io/dorks) +Skype: https://www.google.com/search?q=%22join.skype.com%22%20-site:google.com%20-site:microsoft.com +Zoom: https://www.google.com/search?q=%22zoom.us%2Fj%2F%22 +Google Hangouts: https://www.google.com/search?q=%22hangouts.google.com%2Fgroup%2F%22%20-site:google.com +Telegram: https://www.google.com/search?q=%22t.me%2Fjoinchat%22 +Whatsapp: https://www.bing.com/search?q=site%3Achat.whatsapp.com From 808f2de06cfb6b09e0bec88b71249177e508560e Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 31 Jul 2021 23:13:56 +0200 Subject: [PATCH 126/180] fix --- methods.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/methods.md b/methods.md index 4ec8b48..7481d53 100644 --- a/methods.md +++ b/methods.md @@ -49,7 +49,7 @@ join to r/onions **VARIOUS** -**How to download large files from Tor or anonymize yourself while downloading files ** +**How to download large files from Tor or anonymize yourself while downloading files** - Install torsocks `sudo apt install torsocks` - Use torsocks chained with wget `torsocks wget --tries=0 --retry-connrefused --continue --timeout=90 --progress=bar --show-progress --random-wait --append-output=/tmp/wget_background ` @@ -63,9 +63,9 @@ join to r/onions - Append --output to your cURL cmd with a filename like (curl ... --output thisisatest.7z) - Enjoy -**SEARCH INVITATION LINKS (thanks to IntelligenceX https://intelx.io/dorks) -Skype: https://www.google.com/search?q=%22join.skype.com%22%20-site:google.com%20-site:microsoft.com -Zoom: https://www.google.com/search?q=%22zoom.us%2Fj%2F%22 -Google Hangouts: https://www.google.com/search?q=%22hangouts.google.com%2Fgroup%2F%22%20-site:google.com -Telegram: https://www.google.com/search?q=%22t.me%2Fjoinchat%22 -Whatsapp: https://www.bing.com/search?q=site%3Achat.whatsapp.com +**SEARCH INVITATION LINKS (thanks to IntelligenceX https://intelx.io/dorks)** +- Skype: https://www.google.com/search?q=%22join.skype.com%22%20-site:google.com%20-site:microsoft.com +- Zoom: https://www.google.com/search?q=%22zoom.us%2Fj%2F%22 +- Google Hangouts: https://www.google.com/search?q=%22hangouts.google.com%2Fgroup%2F%22%20-site:google.com +- Telegram: https://www.google.com/search?q=%22t.me%2Fjoinchat%22 +- Whatsapp: https://www.bing.com/search?q=site%3Achat.whatsapp.com From 1b592f74f5143df3783bad1beac220f6af3de830 Mon Sep 17 00:00:00 2001 From: Andrea Draghetti Date: Mon, 2 Aug 2021 11:34:14 +0200 Subject: [PATCH 127/180] Add DarkfeedNews and Blueteamzone --- telegram.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/telegram.md b/telegram.md index c798909..8bbb7e2 100644 --- a/telegram.md +++ b/telegram.md @@ -53,3 +53,5 @@ |https://t.me/hadesh0p| |https://t.me/breachdetector| |https://t.me/pwnwiki_zhchannel| +|https://t.me/blueteamzone| +|https://t.me/s/DarkfeedNews| From febaa4d649814967550db16c8855fa8851a1110d Mon Sep 17 00:00:00 2001 From: Balaji <88177505+SBV-Cybersec@users.noreply.github.com> Date: Mon, 2 Aug 2021 18:05:33 +0530 Subject: [PATCH 128/180] Update exploits.md Added Sploitus --- exploits.md | 1 + 1 file changed, 1 insertion(+) diff --git a/exploits.md b/exploits.md index d3eb6a0..11e5c88 100644 --- a/exploits.md +++ b/exploits.md @@ -9,3 +9,4 @@ |PWNWIKI| https://www.pwnwiki.org/index.php?title=Main_Page| |VULNMON| https://vulmon.com/| |SEEBUG| https://www.seebug.org/| +|Sploitus| https://sploitus.com/rss/| From 9a47ffbd7439895e7b6916e6bb84dac85ce86b23 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 2 Aug 2021 22:36:26 +0200 Subject: [PATCH 129/180] Add new CLOP site --- ransomware_gang.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 492c687..8b325a0 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -14,7 +14,8 @@ |SynACK (El_Cometa)| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/||| |PAYLOD.BIN (EX BABUK LOCKER) |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/||| |DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ |(CURRENTLY DOWN)|| -|CLOP |http://ekbgzchl6x2ias37.onion/||| +|CLOP (old) |http://ekbgzchl6x2ias37.onion/||| +|CLOP |http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/ |MOUNT LOCKER |http://mountnewsokhwilx.onion/ |(CURRENTLY DOWN)|| |PYSA |http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html||| |ASTROTEAM |http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/||| From a88a512b2af3a93bd4e55efac36442452be89f33 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 3 Aug 2021 22:55:10 +0200 Subject: [PATCH 130/180] Add 0DAYFANS thankk to Tony! --- exploits.md | 1 + 1 file changed, 1 insertion(+) diff --git a/exploits.md b/exploits.md index d3eb6a0..c9cbbc8 100644 --- a/exploits.md +++ b/exploits.md @@ -9,3 +9,4 @@ |PWNWIKI| https://www.pwnwiki.org/index.php?title=Main_Page| |VULNMON| https://vulmon.com/| |SEEBUG| https://www.seebug.org/| +|0DAYFANS| https://0dayfans.com/| From 800c414b5394b05e1e7260018926b00f5f1ba8f2 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 3 Aug 2021 23:01:55 +0200 Subject: [PATCH 131/180] Fix PAYLOAD.BIN --- ransomware_gang.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 8b325a0..57776ba 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -12,7 +12,7 @@ |CONTI (SURFACE WEB)| https://continews.click/||| |RANSOMEXX| http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/||| |SynACK (El_Cometa)| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/||| -|PAYLOD.BIN (EX BABUK LOCKER) |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/||| +|PAYLOAD.BIN (EX BABUK LOCKER) |http://vbmisqjshn4yblehk2vbnil53tlqklxsdaztgphcilto3vdj4geao5qd.onion||| |DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ |(CURRENTLY DOWN)|| |CLOP (old) |http://ekbgzchl6x2ias37.onion/||| |CLOP |http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/ From c11117d68ff0910ad39782d4ccb9f9dfa8dd402d Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 3 Aug 2021 23:21:43 +0200 Subject: [PATCH 132/180] Add some markets --- markets.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/markets.md b/markets.md index fd32a4e..07cd2c6 100644 --- a/markets.md +++ b/markets.md @@ -1,6 +1,6 @@ |Name|Link| | ------ | ------ | -|WHM market| http://76p5k6gw25l5jpy7ombo2m7gt4zppowbz47sizvlzkigvnyhhc26znyd.onion| +|WHM market (1)| http://76p5k6gw25l5jpy7ombo2m7gt4zppowbz47sizvlzkigvnyhhc26znyd.onion| |Russian Market (tor)| http://rusmarkethgwhfbn.onion/| |Russian Market (clear)| https://russianmarket.gs/| |Russian Market (clear)| https://russianmarket.gs/| @@ -11,3 +11,7 @@ |LOCKDATA AUCTION (probably scam site)| http://wm6mbuzipviusuc42kcggzkdpbhuv45sn7olyamy6mcqqked3waslbqd.onion/| |DARK ZONE| http://6bcecdo7ldzkudt6dnsuljqoyhgme4afsnytarre5nucjhgzmrn4txad.onion| |DATABASE| http://database6e2t4yvdsrbw3qq6votzyfzspaso7sjga2tchx6tov23nsid.onion/| +|VICE CITY| http://vice2e3gr3pmaikukidllstulxvkb7a247gkguihzvyk3gqwdpolqead.onion/| +|DARKFOX MARKET| http://p5eg3xsssjglu6tvwfazp2nqqwfpah55wr3ljil2bezp5shix5ruqsqd.onion/| +|DAKC0DE| http://darkodemard3wjoe63ld6zebog73ncy77zb2iwjtdjam4xwvpjmjitid.onion/| +|WHM market (2)| http://auzbdiguv5qtp37xoma3n4xfch62duxtdiu4cfrrwbxgckipd4aktxid.onion/| From 3e0eafe577b57603a409f4448d4e2b7e9831e538 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 5 Aug 2021 00:23:09 +0200 Subject: [PATCH 133/180] fix Sploitus --- exploits.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/exploits.md b/exploits.md index 6808bfc..99f7e10 100644 --- a/exploits.md +++ b/exploits.md @@ -9,5 +9,5 @@ |PWNWIKI| https://www.pwnwiki.org/index.php?title=Main_Page| |VULNMON| https://vulmon.com/| |SEEBUG| https://www.seebug.org/| -|Sploitus| https://sploitus.com/rss/| +|SPLOITUS| https://sploitus.com/| |0DAYFANS| https://0dayfans.com/| From f883b31bbaac27a2b01f31d9c484b9f4074c07cb Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 7 Aug 2021 07:19:58 +0200 Subject: [PATCH 134/180] Add ALL WORLD CARDS --- others.md | 1 + 1 file changed, 1 insertion(+) diff --git a/others.md b/others.md index df69a65..c1efcfd 100644 --- a/others.md +++ b/others.md @@ -16,3 +16,4 @@ |BL4CKT0R|http://bl4cktorpms2gybrcyt52aakcxt6yn37byb65uama5cimhifcscnqkid.onion/| |PWNDB|http://pwndb2am4tzkvold.onion/| |RANSOMWARE PAYMENTS TRACKER| https://ransomwhe.re/||| +|ALL WORLD CARDS| http://awcardsqtyy2nzjz4bqwbccvv6xr4bdcwcgfyewd7gsx5mhh63c2lsad.onion/||| From 95e243e5865497a808230ff722575afad9bf8174 Mon Sep 17 00:00:00 2001 From: Balaji <88177505+SBV-Cybersec@users.noreply.github.com> Date: Mon, 9 Aug 2021 11:44:35 +0530 Subject: [PATCH 135/180] Update telegram.md Added 4 more channels --- telegram.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/telegram.md b/telegram.md index 8bbb7e2..e7f7ec5 100644 --- a/telegram.md +++ b/telegram.md @@ -55,3 +55,7 @@ |https://t.me/pwnwiki_zhchannel| |https://t.me/blueteamzone| |https://t.me/s/DarkfeedNews| +|https://t.me/club1337| +|https://t.me/itsecalert| +|https://t.me/cveNotify| +|https://t.me/techpwnews| From 5a3ab79881e868c8799b7cf8d66ca1e852f4da08 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 9 Aug 2021 11:56:19 +0200 Subject: [PATCH 136/180] Add category field and some sources --- telegram.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/telegram.md b/telegram.md index e7f7ec5..802b367 100644 --- a/telegram.md +++ b/telegram.md @@ -1,5 +1,5 @@ -|Link| -| ------ | +|Link| Category| +| ------ | ------ | |https://t.me/arvin_club| |https://t.me/shieldteam1| |https://t.me/databreach| @@ -54,8 +54,10 @@ |https://t.me/breachdetector| |https://t.me/pwnwiki_zhchannel| |https://t.me/blueteamzone| -|https://t.me/s/DarkfeedNews| +|https://t.me/s/DarkfeedNews| News |https://t.me/club1337| -|https://t.me/itsecalert| -|https://t.me/cveNotify| -|https://t.me/techpwnews| +|https://t.me/itsecalert| News +|https://t.me/cveNotify| CVE feed +|https://t.me/techpwnews| News +|https://t.me/base_brutesu| Combo List +|https://t.me/nohidespace| Combo List From c44ffcfe1f577cd8ff1cdf6a2966f23033487201 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 10 Aug 2021 10:28:36 +0200 Subject: [PATCH 137/180] Create raas and add RANION --- raas | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 raas diff --git a/raas b/raas new file mode 100644 index 0000000..abc7aa3 --- /dev/null +++ b/raas @@ -0,0 +1,4 @@ +|Name|Link| +| ------ | ------ | +|RANION (v2)| http://ranionjgot5cud3p.onion/| +|RANION (v3)| http://ranionv3j2o7wrn3um6de33eccbchhg32mkgnnoi72enkpp7jc25h3ad.onion| From 376ed3522d312b6b03b687758020f5be5aa8b5f7 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 10 Aug 2021 10:32:00 +0200 Subject: [PATCH 138/180] Rename raas to raas.md --- raas => raas.md | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename raas => raas.md (100%) diff --git a/raas b/raas.md similarity index 100% rename from raas rename to raas.md From 148d41424952e92506252832bc71cf0c47ac969a Mon Sep 17 00:00:00 2001 From: Andrea Draghetti Date: Tue, 10 Aug 2021 17:59:30 +0200 Subject: [PATCH 139/180] Converted LockBit 2.0 url to lowercase --- ransomware_gang.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 57776ba..cb5db5e 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -43,7 +43,7 @@ |NEMTY |http://nemty.top |(CURRENTLY DOWN)|| |SEKHMET |http://sekhmet.top |(CURRENTLY DOWN)|| |NETWALKER |http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion |(CURRENTLY DOWN)|| -|LOCKBIT 2.0 |http://Lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion||| +|LOCKBIT 2.0 |http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion||| |HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/||| |VICE SOCIETY |http://4hzyuotli6maqa4u.onion||| |AVOS |http://avos2fuj6olp6x36.onion/||| From cbc1a0a6b4f6985309a627c967078b39d39743d8 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 10 Aug 2021 23:26:42 +0200 Subject: [PATCH 140/180] Add spamsmtpcombo --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index 802b367..a2b4743 100644 --- a/telegram.md +++ b/telegram.md @@ -61,3 +61,4 @@ |https://t.me/techpwnews| News |https://t.me/base_brutesu| Combo List |https://t.me/nohidespace| Combo List +|https://t.me/spamsmtpcombo| Combo List From 13812803bd3152d7db912236efeeae8b084440d5 Mon Sep 17 00:00:00 2001 From: mailergfp <32095167+mailergfp@users.noreply.github.com> Date: Wed, 11 Aug 2021 15:59:49 +0200 Subject: [PATCH 141/180] Update ransomware_gang.md added avos locker victmin's list --- ransomware_gang.md | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang.md b/ransomware_gang.md index cb5db5e..2cd9f2e 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -47,6 +47,7 @@ |HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/||| |VICE SOCIETY |http://4hzyuotli6maqa4u.onion||| |AVOS |http://avos2fuj6olp6x36.onion/||| +|AVOS Locker Press release |http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion/||| |ECH0RAIX |http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion||| |QLOCKER |http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion||| |MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion||| From 9ea8fcf81f0c5abfdb0aab4d0dd72f2d99967999 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 11 Aug 2021 16:03:36 +0200 Subject: [PATCH 142/180] Add Tox ID column --- ransomware_gang.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index cb5db5e..9fd66f6 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -1,5 +1,5 @@ -|Name|Link|Status|User:Password| -| ------ | ------ | ------ | ------ | +|Name|Link|Status|User:Password|Tox ID| +| ------ | ------ | ------ | ------ | ------ | |AVADDON| http://avaddongun7rngel.onion/||| |SODINOKIBI (REVIL)| http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/||| |NEFILIM| http://hxt254aygrsziejn.onion/||| @@ -43,7 +43,7 @@ |NEMTY |http://nemty.top |(CURRENTLY DOWN)|| |SEKHMET |http://sekhmet.top |(CURRENTLY DOWN)|| |NETWALKER |http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion |(CURRENTLY DOWN)|| -|LOCKBIT 2.0 |http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion||| +|LOCKBIT 2.0 |http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion|||3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7 |HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/||| |VICE SOCIETY |http://4hzyuotli6maqa4u.onion||| |AVOS |http://avos2fuj6olp6x36.onion/||| From 86fb316bc6691248670ed2aafd05527b885c0681 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 11 Aug 2021 16:17:30 +0200 Subject: [PATCH 143/180] Fix AVOS --- ransomware_gang.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 281d205..327908d 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -9,7 +9,7 @@ |MARKETO (dark)| http://g5sbltooh2okkcb2.onion/||| |LORENZ |http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/||| |CONTI/RYUK| http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/||| -|CONTI (SURFACE WEB)| https://continews.click/||| +|CONTI/RYUK (SURFACE WEB)| https://continews.click/||| |RANSOMEXX| http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/||| |SynACK (El_Cometa)| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/||| |PAYLOAD.BIN (EX BABUK LOCKER) |http://vbmisqjshn4yblehk2vbnil53tlqklxsdaztgphcilto3vdj4geao5qd.onion||| @@ -46,8 +46,8 @@ |LOCKBIT 2.0 |http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion|||3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7 |HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/||| |VICE SOCIETY |http://4hzyuotli6maqa4u.onion||| -|AVOS |http://avos2fuj6olp6x36.onion/||| -|AVOS Locker Press release |http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion/||| +|AVOS (victims request id page)|http://avos2fuj6olp6x36.onion/||| +|AVOS|http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion/||| |ECH0RAIX |http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion||| |QLOCKER |http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion||| |MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion||| @@ -60,3 +60,4 @@ |BLACKMATTER |http://blackmax7su6mbwtcyo3xwtpfxpm356jjqrs34y4crcytpw7mifuedyd.onion/||| |BABUK |http://nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion/||| |HOTARUS |http://r6d636w47ncnaukrpvlhmtdbvbeltc6enfcuuow3jclpmyga7cz374qd.onion/||| +|CRYLOCK (victims request id page)| http://d57uremugxjrafyg.onion/ From ba0e13a41d36a20c93dd0140e6987e0280638289 Mon Sep 17 00:00:00 2001 From: f4d0 Date: Wed, 11 Aug 2021 15:21:30 +0100 Subject: [PATCH 144/180] AVADDON is down Avaddon has retired around 12 June 2021, and it is done since then. --- ransomware_gang.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 327908d..29a861a 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -1,6 +1,6 @@ |Name|Link|Status|User:Password|Tox ID| | ------ | ------ | ------ | ------ | ------ | -|AVADDON| http://avaddongun7rngel.onion/||| +|AVADDON| http://avaddongun7rngel.onion/|(CURRENTLY DOWN)|| |SODINOKIBI (REVIL)| http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/||| |NEFILIM| http://hxt254aygrsziejn.onion/||| |VFOKX (1)| http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/||| From 128ad972087764c119ed072420b798bf840459e0 Mon Sep 17 00:00:00 2001 From: fastfire Date: Wed, 11 Aug 2021 17:34:02 +0200 Subject: [PATCH 145/180] Add ransomware group site list --- ransomware_gang.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 29a861a..8e1a3c0 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -1,5 +1,7 @@ |Name|Link|Status|User:Password|Tox ID| | ------ | ------ | ------ | ------ | ------ | +|RANSOMWARE GROUP SITES (list)| http://thexfvx7hqcrpgtm.onion/||| +|RANSOMWARE GROUP SITES (list)| http://ransomwr3tsydeii4q43vazm7wofla5ujdajquitomtd47cxjtfgwyyd.onion/ |AVADDON| http://avaddongun7rngel.onion/|(CURRENTLY DOWN)|| |SODINOKIBI (REVIL)| http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/||| |NEFILIM| http://hxt254aygrsziejn.onion/||| @@ -37,7 +39,6 @@ |N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ |(CURRENTLY DOWN)|| |HADES |http://ixltdyumdlthrtgx.onion/ |(CURRENTLY DOWN)|| |DOPPLE PAYMER |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/||| -|RANSOMWARE GROUP SITES (list) |http://thexfvx7hqcrpgtm.onion/||| |PROMETHEUS |http://promethw27cbrcot.onion/blog/||| |GRIEF |http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion||| |NEMTY |http://nemty.top |(CURRENTLY DOWN)|| From 3636a725ebae5cc4e5ba587dff632aa044288d18 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 12 Aug 2021 14:31:30 +0200 Subject: [PATCH 146/180] Add BlackByte --- ransomware_gang.md | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang.md b/ransomware_gang.md index 8e1a3c0..cb29d61 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -62,3 +62,4 @@ |BABUK |http://nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion/||| |HOTARUS |http://r6d636w47ncnaukrpvlhmtdbvbeltc6enfcuuow3jclpmyga7cz374qd.onion/||| |CRYLOCK (victims request id page)| http://d57uremugxjrafyg.onion/ +|BLACKBYTE| http://6iaj3efye3q62xjgfxyegrufhewxew7yt4scxjd45tlfafyja6q4ctqd.onion||| From 509b446818623f4c23e5b927d74ea0563f19f33a Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 12 Aug 2021 19:02:38 +0200 Subject: [PATCH 147/180] Add AlphaBay --- markets.md | 1 + 1 file changed, 1 insertion(+) diff --git a/markets.md b/markets.md index 07cd2c6..fa281b8 100644 --- a/markets.md +++ b/markets.md @@ -15,3 +15,4 @@ |DARKFOX MARKET| http://p5eg3xsssjglu6tvwfazp2nqqwfpah55wr3ljil2bezp5shix5ruqsqd.onion/| |DAKC0DE| http://darkodemard3wjoe63ld6zebog73ncy77zb2iwjtdjam4xwvpjmjitid.onion/| |WHM market (2)| http://auzbdiguv5qtp37xoma3n4xfch62duxtdiu4cfrrwbxgckipd4aktxid.onion/| +|AlphaBay| https://alphabay522szl32u4ci5e3iokdsth56ei7rwngr2wm7i5jo54j2eid.onion/| From d66fb568c63820e676b2ddebdde1762f4e75c8eb Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 12 Aug 2021 21:33:10 +0200 Subject: [PATCH 148/180] Fix AlphaBay --- markets.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/markets.md b/markets.md index fa281b8..eedb149 100644 --- a/markets.md +++ b/markets.md @@ -15,4 +15,4 @@ |DARKFOX MARKET| http://p5eg3xsssjglu6tvwfazp2nqqwfpah55wr3ljil2bezp5shix5ruqsqd.onion/| |DAKC0DE| http://darkodemard3wjoe63ld6zebog73ncy77zb2iwjtdjam4xwvpjmjitid.onion/| |WHM market (2)| http://auzbdiguv5qtp37xoma3n4xfch62duxtdiu4cfrrwbxgckipd4aktxid.onion/| -|AlphaBay| https://alphabay522szl32u4ci5e3iokdsth56ei7rwngr2wm7i5jo54j2eid.onion/| +|AlphaBay| https://alphabay522szl32u4ci5e3iokdsyth56ei7rwngr2wm7i5jo54j2eid.onion/| From 1a2ed8064f861aaeaeda85b5eda63566e23a1295 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 12 Aug 2021 22:42:45 +0200 Subject: [PATCH 149/180] Add AlphaBay i2p --- markets.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/markets.md b/markets.md index eedb149..d908bbd 100644 --- a/markets.md +++ b/markets.md @@ -15,4 +15,6 @@ |DARKFOX MARKET| http://p5eg3xsssjglu6tvwfazp2nqqwfpah55wr3ljil2bezp5shix5ruqsqd.onion/| |DAKC0DE| http://darkodemard3wjoe63ld6zebog73ncy77zb2iwjtdjam4xwvpjmjitid.onion/| |WHM market (2)| http://auzbdiguv5qtp37xoma3n4xfch62duxtdiu4cfrrwbxgckipd4aktxid.onion/| -|AlphaBay| https://alphabay522szl32u4ci5e3iokdsyth56ei7rwngr2wm7i5jo54j2eid.onion/| +|AlphaBay (tor)| http://alphabay522szl32u4ci5e3iokdsyth56ei7rwngr2wm7i5jo54j2eid.onion| +|AlphaBay (i2p)| tnaefzkcnhryeusi7hdpqujqiqmnbtah3dmjcg3gvezohunjuxbq.b32.i2p + From 94a3e0e263b2ca69ccdb4d2a030399fa95299799 Mon Sep 17 00:00:00 2001 From: f4d0 Date: Sun, 15 Aug 2021 15:23:19 +0100 Subject: [PATCH 150/180] Alphabetical order and Karma leaks Sorted the entries Alphabetically and added Karma Leaks. This last one from user nuke86 related with issue 32. --- ransomware_gang.md | 109 +++++++++++++++++++++++---------------------- 1 file changed, 55 insertions(+), 54 deletions(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index cb29d61..8b6e540 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -2,64 +2,65 @@ | ------ | ------ | ------ | ------ | ------ | |RANSOMWARE GROUP SITES (list)| http://thexfvx7hqcrpgtm.onion/||| |RANSOMWARE GROUP SITES (list)| http://ransomwr3tsydeii4q43vazm7wofla5ujdajquitomtd47cxjtfgwyyd.onion/ -|AVADDON| http://avaddongun7rngel.onion/|(CURRENTLY DOWN)|| -|SODINOKIBI (REVIL)| http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/||| -|NEFILIM| http://hxt254aygrsziejn.onion/||| -|VFOKX (1)| http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/||| -|VFOKX (2)| http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/||| -|MARKETO (deep)| https://marketo.cloud/||| -|MARKETO (dark)| http://g5sbltooh2okkcb2.onion/||| -|LORENZ |http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/||| -|CONTI/RYUK| http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/||| -|CONTI/RYUK (SURFACE WEB)| https://continews.click/||| -|RANSOMEXX| http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/||| -|SynACK (El_Cometa)| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/||| -|PAYLOAD.BIN (EX BABUK LOCKER) |http://vbmisqjshn4yblehk2vbnil53tlqklxsdaztgphcilto3vdj4geao5qd.onion||| -|DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ |(CURRENTLY DOWN)|| +|ASTROTEAM|http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/||| +|AVADDON|http://avaddongun7rngel.onion/|(CURRENTLY DOWN)|| +|AVOS (victims request id page)|http://avos2fuj6olp6x36.onion/||| +|AVOS|http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion/||| +|AVOS|http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion||| +|BABUK|http://nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion/||| +|BLACKBYTE|http://6iaj3efye3q62xjgfxyegrufhewxew7yt4scxjd45tlfafyja6q4ctqd.onion||| +|BLACKMATTER|http://blackmax7su6mbwtcyo3xwtpfxpm356jjqrs34y4crcytpw7mifuedyd.onion/||| +|BLACK SHADOW |http://544corkfh5hwhtn4.onion/ |(CURRENTLY DOWN)|| |CLOP (old) |http://ekbgzchl6x2ias37.onion/||| |CLOP |http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/ -|MOUNT LOCKER |http://mountnewsokhwilx.onion/ |(CURRENTLY DOWN)|| -|PYSA |http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html||| -|ASTROTEAM |http://anewset3pcya3xvk73hj7yunuamutxxsm5sohkdi32blhmql55tvgqad.onion/||| -|SUNCRYPT |http://nbzzb6sa6xuura2z.onion/||| -|PAY2KEY |http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion/||| -|EVEREST |http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/||| -|RANZY/AKO |http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion/ |(CURRENTLY DOWN)|| +|CONTI/RYUK| http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/||| +|CONTI/RYUK (SURFACE WEB)| https://continews.click/||| +|CRYLOCK (victims request id page)| http://d57uremugxjrafyg.onion/ |CUBA |http://cuba4mp6ximo2zlo.onion/||| +|DARKSIDE |http://darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion/ |(CURRENTLY DOWN)|| +|DOPPLE PAYMER |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/||| +|ECH0RAIX |http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion||| +|EGREGOR |https://egregornews.com/ |(CURRENTLY DOWN)|| +|EP918 |http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/||| +|EVEREST |http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/||| +|GRIEF |http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion||| +|HADES |http://ixltdyumdlthrtgx.onion/ |(CURRENTLY DOWN)|| +|HARON |http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion/blog.php||Chaddadgroup:Chaddadgroup| +|HELLO KITTY |http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/||| +|HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/||| +|HOTARUS |http://r6d636w47ncnaukrpvlhmtdbvbeltc6enfcuuow3jclpmyga7cz374qd.onion/||| +|KARMA| http://3nvzqyo6l4wkrzumzu5aod7zbosq4ipgf7ifgj3hsvbcr5vcasordvqd.onion/||| +|LOCKBIT |http://lockbitkodidilol.onion/ |(CURRENTLY DOWN)|| +|LOCKBIT 2.0 |http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion|||3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7 +|LORENZ |http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/||| +|LV (1) |http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion||| +|LV (2) |http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion/||| +|MARKETO (deep)| https://marketo.cloud/||| +|MARKETO (dark)| http://g5sbltooh2okkcb2.onion/||| +|MAZE |https://newsmaze.net/ |(CURRENTLY DOWN)|| +|MOUNT LOCKER |http://mountnewsokhwilx.onion/ |(CURRENTLY DOWN)|| +|MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion||| +|N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ |(CURRENTLY DOWN)|| +|NEFILIM| http://hxt254aygrsziejn.onion/||| +|NEMTY |http://nemty.top |(CURRENTLY DOWN)|| +|NETWALKER |http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion |(CURRENTLY DOWN)|| +|PAY2KEY |http://pay2key2zkg7arp3kv3cuugdaqwuesifnbofun4j6yjdw5ry7zw2asid.onion/||| +|PAYLOAD.BIN (EX BABUK LOCKER) |http://vbmisqjshn4yblehk2vbnil53tlqklxsdaztgphcilto3vdj4geao5qd.onion||| +|PROMETHEUS |http://promethw27cbrcot.onion/blog/||| +|PYSA |http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html||| +|QLOCKER |http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion||| +|RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/||| |RAGNAROK |http://wobpitin77vdsdiswr43duntv6eqw4rvphedutpaxycjdie6gg3binad.onion/ |(CURRENTLY DOWN)|| |RAGNAR LOCKER (old) |http://ragnarleaks.top/ |(CURRENTLY DOWN)|| |RAGNAR LOCKER |http://p6o7m73ujalhgkiv.onion/||| -|EGREGOR |https://egregornews.com/ |(CURRENTLY DOWN)|| -|MAZE |https://newsmaze.net/ |(CURRENTLY DOWN)|| -|LV (1) |http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion||| -|LV (2) |http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion/||| -|XING LOCKER| http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/||| -|LOCKBIT |http://lockbitkodidilol.onion/ |(CURRENTLY DOWN)|| -|BLACK SHADOW |http://544corkfh5hwhtn4.onion/ |(CURRENTLY DOWN)|| -|N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ |(CURRENTLY DOWN)|| -|HADES |http://ixltdyumdlthrtgx.onion/ |(CURRENTLY DOWN)|| -|DOPPLE PAYMER |http://hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion/||| -|PROMETHEUS |http://promethw27cbrcot.onion/blog/||| -|GRIEF |http://griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion||| -|NEMTY |http://nemty.top |(CURRENTLY DOWN)|| -|SEKHMET |http://sekhmet.top |(CURRENTLY DOWN)|| -|NETWALKER |http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion |(CURRENTLY DOWN)|| -|LOCKBIT 2.0 |http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion|||3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7 -|HIVE |http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/||| -|VICE SOCIETY |http://4hzyuotli6maqa4u.onion||| -|AVOS (victims request id page)|http://avos2fuj6olp6x36.onion/||| -|AVOS|http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion/||| -|ECH0RAIX |http://veqlxhq7ub5qze3qy56zx2cig2e6tzsgxdspkubwbayqije6oatma6id.onion||| -|QLOCKER |http://gvka2m4qt5fod2fltkjmdk4gxh5oxemhpgmnmtjptms6fkgfzdd62tad.onion||| -|MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion||| |RAMP |http://wavbeudogz6byhnardd2lkp2jafims3j7tj6k6qnywchn2csngvtffqd.onion/||| -|EP918 |http://dg5fyig37abmivryrxlordrczn6d6r5wzcfe2msuo5mbbu2exnu46fid.onion/||| -|AVOS |http://avosqxh72b5ia23dl5fgwcpndkctuzqvh2iefk5imp3pi5gfhel5klad.onion||| -|HARON |http://ft4zr2jzlqoyob7yg4fcpwyt37hox3ajajqnfkdvbfrkjioyunmqnpad.onion/blog.php||Chaddadgroup:Chaddadgroup| -|HELLO KITTY |http://3r6n77mpe737w4sbxxxrpc5phbluv6xhtdl5ujpnlvmck5tc7blq2rqd.onion/||| -|RAGNAROK |http://sushlnty2j7qdzy64qnvyb6ajkwg7resd3p6agc2widnawodtcedgjid.onion/||| -|BLACKMATTER |http://blackmax7su6mbwtcyo3xwtpfxpm356jjqrs34y4crcytpw7mifuedyd.onion/||| -|BABUK |http://nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion/||| -|HOTARUS |http://r6d636w47ncnaukrpvlhmtdbvbeltc6enfcuuow3jclpmyga7cz374qd.onion/||| -|CRYLOCK (victims request id page)| http://d57uremugxjrafyg.onion/ -|BLACKBYTE| http://6iaj3efye3q62xjgfxyegrufhewxew7yt4scxjd45tlfafyja6q4ctqd.onion||| +|RANSOMEXX| http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/||| +|RANZY/AKO |http://37rckgo66iydpvgpwve7b2el5q2zhjw4tv4lmyewufnpx4lhkekxkoqd.onion/ |(CURRENTLY DOWN)|| +|SEKHMET |http://sekhmet.top |(CURRENTLY DOWN)|| +|SODINOKIBI (REVIL)| http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/||| +|SUNCRYPT |http://nbzzb6sa6xuura2z.onion/||| +|SynACK (El_Cometa)| http://xqkz2rmrqkeqf6sjbrb47jfwnqxcd4o2zvaxxzrpbh2piknms37rw2ad.onion/||| +|VFOKX (1)| http://vfokxcdzjbpehgit223vzdzwte47l3zcqtafj34qrr26htjo4uf3obid.onion/||| +|VFOKX (2)| http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/||| +|VICE SOCIETY |http://4hzyuotli6maqa4u.onion||| +|XING LOCKER| http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/||| From accab6378c193442331cd96f6ff595ed4c4d94ea Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 15 Aug 2021 17:55:04 +0200 Subject: [PATCH 151/180] Add RAMP --- forum.md | 1 + 1 file changed, 1 insertion(+) diff --git a/forum.md b/forum.md index a9d2fe2..b8e148f 100644 --- a/forum.md +++ b/forum.md @@ -36,3 +36,4 @@ |LOLZGURU| https://lolz.guru/| |NOHIDESPACE| https://nohide.space/| |LEAKS.SX| https://leak.sx/| +|RAMP| http://ramp4u5iz4xx75vmt6nk5xfrs5mrmtokzszqxhhkjqlk7pbwykaz7zid.onion/login/ From 1469cb9ffa87e178d6e9c06426b7968a8a40da89 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 16 Aug 2021 15:38:41 +0200 Subject: [PATCH 152/180] Fix openleak channel --- telegram.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/telegram.md b/telegram.md index a2b4743..8f647c2 100644 --- a/telegram.md +++ b/telegram.md @@ -21,7 +21,7 @@ |https://t.me/BruteForce| |https://t.me/icrewhackers| |https://t.me/leaklicks/| -|https://t.me/baseleak| +|https://t.me/openleak| |https://t.me/joinchat/8yMjCnT06ytjNzQx| |https://t.me/DataleakBin| |https://t.me/combolist_top| From 8a95a31b1dde764ef8fccdf759cbe8a0864289ed Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 16 Aug 2021 15:40:26 +0200 Subject: [PATCH 153/180] Update telegram.md --- telegram.md | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/telegram.md b/telegram.md index 8f647c2..19af738 100644 --- a/telegram.md +++ b/telegram.md @@ -4,39 +4,39 @@ |https://t.me/shieldteam1| |https://t.me/databreach| |https://t.me/Combulist| -|https://t.me/leaked_databases| -|https://t.me/opendataleaks| +|https://t.me/leaked_databases| Data Leaks +|https://t.me/opendataleaks| Data Leaks |https://t.me/dbforall| |https://t.me/data1eaks| |https://t.me/HK4GANG| |https://t.me/freedomf0x| -|https://t.me/baseleak| -|https://t.me/freedataleak| +|https://t.me/baseleak| Data Leaks +|https://t.me/freedataleak| Data Leaks |https://t.me/AntiPlumbers| -|https://t.me/NullLeak| -|https://t.me/marketo_leaks| +|https://t.me/NullLeak| Data Leaks +|https://t.me/marketo_leaks| Data Leaks |https://t.me/outlew (DELETED)| |https://t.me/We_are_not_eternal| |https://t.me/joinchat/UhP5kie2OiRetosa| |https://t.me/BruteForce| |https://t.me/icrewhackers| -|https://t.me/leaklicks/| -|https://t.me/openleak| +|https://t.me/leaklicks/| Data Leaks +|https://t.me/openleak| Data Leaks |https://t.me/joinchat/8yMjCnT06ytjNzQx| -|https://t.me/DataleakBin| +|https://t.me/DataleakBin| Data Leaks |https://t.me/combolist_top| |https://t.me/meganzshare| |https://t.me/joinchat/WCSE2vgon6IYGLgz| -|https://t.me/dataleakbreach| +|https://t.me/dataleakbreach| Data Leaks |https://t.me/combo_lists| -|https://t.me/LeakData| -|https://t.me/LeaksData| +|https://t.me/LeakData| Data Leaks +|https://t.me/LeaksData| Data Leaks |https://t.me/fuckeddb| |https://t.me/Blank_Link| |https://t.me/DWI_OFFICIAL| |https://t.me/joinchat/5wChO8HFwJ43YTVk| |https://t.me/mailpasword| -|https://t.me/Yad2Leaks| +|https://t.me/Yad2Leaks| Data Leaks |https://t.me/theofficial0day| |https://t.me/joinchat/AAAAAFGhhcV9p1Rm2f_Emw| |https://t.me/LeaRNEXploIT| From 48fa3baf72cb5931bcaca7c92ec36c631be121f3 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 16 Aug 2021 17:46:03 +0200 Subject: [PATCH 154/180] Update telegram.md --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index 19af738..639cee1 100644 --- a/telegram.md +++ b/telegram.md @@ -62,3 +62,4 @@ |https://t.me/base_brutesu| Combo List |https://t.me/nohidespace| Combo List |https://t.me/spamsmtpcombo| Combo List +|https://t.me/joinchat/AAAAAFNLmVP0ZCy51tNOig| Forum From 5f285b371da524cd26e865ab9c199e1eca42a101 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 16 Aug 2021 17:51:24 +0200 Subject: [PATCH 155/180] Update forum.md --- forum.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/forum.md b/forum.md index b8e148f..c08e968 100644 --- a/forum.md +++ b/forum.md @@ -36,4 +36,6 @@ |LOLZGURU| https://lolz.guru/| |NOHIDESPACE| https://nohide.space/| |LEAKS.SX| https://leak.sx/| -|RAMP| http://ramp4u5iz4xx75vmt6nk5xfrs5mrmtokzszqxhhkjqlk7pbwykaz7zid.onion/login/ +|RAMP| http://ramp4u5iz4xx75vmt6nk5xfrs5mrmtokzszqxhhkjqlk7pbwykaz7zid.onion/login/| +|FORUMTEAM| https://forumteam.top/| +|NIFLHEIM.TOP| https://niflheim.top/| From 081da6ae53f391a3d40be14185d6a436be33205a Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 16 Aug 2021 17:53:59 +0200 Subject: [PATCH 156/180] Add LOLZ TEAM --- discord.md | 1 + 1 file changed, 1 insertion(+) diff --git a/discord.md b/discord.md index 4cbda9a..e485f2e 100644 --- a/discord.md +++ b/discord.md @@ -3,3 +3,4 @@ |_db [breach]| https://discord.gg/j3HmDmhh| valid 7 days from 07/06/21| |OpticalMarket| https://discord.gg/kUyhdgvM| valid 7 days from 07/06/21| |Eros Market| https://discord.gg/YZmJNjcG| valid 7 days from 07/19/21| +|LolzTeam| https://discord.com/invite/lzt| From 4a5e9b69ded0a8d5690a941edc2ff5c76f8db56b Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 16 Aug 2021 21:09:15 +0200 Subject: [PATCH 157/180] Add Venomous --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index 639cee1..a2dca36 100644 --- a/telegram.md +++ b/telegram.md @@ -63,3 +63,4 @@ |https://t.me/nohidespace| Combo List |https://t.me/spamsmtpcombo| Combo List |https://t.me/joinchat/AAAAAFNLmVP0ZCy51tNOig| Forum +|https://t.me/venomous_support| Ransomware gang From b80d3e1b35d7a010f1aef77fc9b4293e1059f72c Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 17 Aug 2021 00:59:21 +0200 Subject: [PATCH 158/180] Add DBLeaks --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index a2dca36..0240bc0 100644 --- a/telegram.md +++ b/telegram.md @@ -64,3 +64,4 @@ |https://t.me/spamsmtpcombo| Combo List |https://t.me/joinchat/AAAAAFNLmVP0ZCy51tNOig| Forum |https://t.me/venomous_support| Ransomware gang +|https://t.me/DBleak| Data Leaks From 06e8fc92e98b5e72c078fb9baac966b776442f77 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 17 Aug 2021 13:17:36 +0200 Subject: [PATCH 159/180] Add Log market place --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index 0240bc0..655a499 100644 --- a/telegram.md +++ b/telegram.md @@ -65,3 +65,4 @@ |https://t.me/joinchat/AAAAAFNLmVP0ZCy51tNOig| Forum |https://t.me/venomous_support| Ransomware gang |https://t.me/DBleak| Data Leaks +|https://t.me/Log_Market_Place| Data Leaks From 25f5f710482d718f75aa9c1a674e90d4bca3c950 Mon Sep 17 00:00:00 2001 From: fastfire Date: Tue, 17 Aug 2021 13:35:50 +0200 Subject: [PATCH 160/180] Add various sources --- telegram.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/telegram.md b/telegram.md index 655a499..6b6bcdb 100644 --- a/telegram.md +++ b/telegram.md @@ -66,3 +66,7 @@ |https://t.me/venomous_support| Ransomware gang |https://t.me/DBleak| Data Leaks |https://t.me/Log_Market_Place| Data Leaks +|https://t.me/joinchat/8IpIg1MaoLs3YjMy| Log Leaks +|https://t.me/cbanke| Data Leaks +|https://t.me/cbanke_logs| Log Leaks +|https://t.me/cbanke_market| Market From 0d3ac806218d004620d2440bcb6626a8fd46a965 Mon Sep 17 00:00:00 2001 From: SimoneCagol <57213014+SimoneCagol@users.noreply.github.com> Date: Wed, 18 Aug 2021 15:41:47 +0200 Subject: [PATCH 161/180] Update https://t.me/s/DarkfeedNews link --- telegram.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/telegram.md b/telegram.md index 6b6bcdb..858c175 100644 --- a/telegram.md +++ b/telegram.md @@ -54,7 +54,7 @@ |https://t.me/breachdetector| |https://t.me/pwnwiki_zhchannel| |https://t.me/blueteamzone| -|https://t.me/s/DarkfeedNews| News +|https://t.me/DarkfeedNews| News |https://t.me/club1337| |https://t.me/itsecalert| News |https://t.me/cveNotify| CVE feed From d5ae69b60631c308f0b39d3e8834c6b4ec68998e Mon Sep 17 00:00:00 2001 From: animoL <19681281+realAnimoL@users.noreply.github.com> Date: Thu, 19 Aug 2021 08:41:39 +0200 Subject: [PATCH 162/180] v3 Hydra Market --- markets.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/markets.md b/markets.md index fd32a4e..79cb1c5 100644 --- a/markets.md +++ b/markets.md @@ -5,7 +5,7 @@ |Russian Market (clear)| https://russianmarket.gs/| |Russian Market (clear)| https://russianmarket.gs/| |Genesis Market (clear)| https://genesis.market/| -|HYDRA|http://hydra3rudf3j4hww.onion/| +|HYDRA (tor)| http://hydraclubbioknikokex7njhwuahc2l67lfiz7z36md2jvopda7nchid.onion/| |MAGBO (tor)| http://magbocc3tco4vmxx.onion/| |MAGBO (clear)| https://magbo.shop| |LOCKDATA AUCTION (probably scam site)| http://wm6mbuzipviusuc42kcggzkdpbhuv45sn7olyamy6mcqqked3waslbqd.onion/| From 44352828f73785d4f7f89a88bd3953a83c4182a5 Mon Sep 17 00:00:00 2001 From: fastfire Date: Thu, 19 Aug 2021 09:07:10 +0200 Subject: [PATCH 163/180] Readd Hydra v2 for historical reasons --- markets.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/markets.md b/markets.md index 2915a96..7632365 100644 --- a/markets.md +++ b/markets.md @@ -5,7 +5,8 @@ |Russian Market (clear)| https://russianmarket.gs/| |Russian Market (clear)| https://russianmarket.gs/| |Genesis Market (clear)| https://genesis.market/| -|HYDRA (tor)| http://hydraclubbioknikokex7njhwuahc2l67lfiz7z36md2jvopda7nchid.onion/| +|HYDRA (tor v2)| http://hydra3rudf3j4hww.onion/| +|HYDRA (tor v3)| http://hydraclubbioknikokex7njhwuahc2l67lfiz7z36md2jvopda7nchid.onion/| |MAGBO (tor)| http://magbocc3tco4vmxx.onion/| |MAGBO (clear)| https://magbo.shop| |LOCKDATA AUCTION (probably scam site)| http://wm6mbuzipviusuc42kcggzkdpbhuv45sn7olyamy6mcqqked3waslbqd.onion/| From f9d09d4070f0f14dc572c3fcb6b408e84944d926 Mon Sep 17 00:00:00 2001 From: Dario Fadda Date: Fri, 20 Aug 2021 14:00:47 +0200 Subject: [PATCH 164/180] Update forum.md Added new source to forums. Its new source, but needs to be monitored. --- forum.md | 1 + 1 file changed, 1 insertion(+) diff --git a/forum.md b/forum.md index c08e968..a690754 100644 --- a/forum.md +++ b/forum.md @@ -39,3 +39,4 @@ |RAMP| http://ramp4u5iz4xx75vmt6nk5xfrs5mrmtokzszqxhhkjqlk7pbwykaz7zid.onion/login/| |FORUMTEAM| https://forumteam.top/| |NIFLHEIM.TOP| https://niflheim.top/| +|EXPLOITS.WS| https://exploits.ws/| From 80f1a2b32ffe73b4a8e9d3bb3d3e4eae7380d69e Mon Sep 17 00:00:00 2001 From: fastfire Date: Fri, 20 Aug 2021 16:48:54 +0200 Subject: [PATCH 165/180] Add 2EASY --- markets.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/markets.md b/markets.md index 7632365..b0e3190 100644 --- a/markets.md +++ b/markets.md @@ -17,5 +17,5 @@ |DAKC0DE| http://darkodemard3wjoe63ld6zebog73ncy77zb2iwjtdjam4xwvpjmjitid.onion/| |WHM market (2)| http://auzbdiguv5qtp37xoma3n4xfch62duxtdiu4cfrrwbxgckipd4aktxid.onion/| |AlphaBay (tor)| http://alphabay522szl32u4ci5e3iokdsyth56ei7rwngr2wm7i5jo54j2eid.onion| -|AlphaBay (i2p)| tnaefzkcnhryeusi7hdpqujqiqmnbtah3dmjcg3gvezohunjuxbq.b32.i2p - +|AlphaBay (i2p)| tnaefzkcnhryeusi7hdpqujqiqmnbtah3dmjcg3gvezohunjuxbq.b32.i2p| +|2EASY| https://2easy.shop/| From abb16b9b78e0e50a7caabac6c9667308c2bc852f Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 21 Aug 2021 00:08:07 +0200 Subject: [PATCH 166/180] Add LOCKFILE --- ransomware_gang.md | 1 + 1 file changed, 1 insertion(+) diff --git a/ransomware_gang.md b/ransomware_gang.md index 8b6e540..2a2783b 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -64,3 +64,4 @@ |VFOKX (2)| http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/||| |VICE SOCIETY |http://4hzyuotli6maqa4u.onion||| |XING LOCKER| http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/||| +|LOCKFILE (victim request id page)| http://zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion/|||B2F873769EB6B508EBC2103DDEB7366CEFB7B09AB8314DAD0C4346169072686690489B47EAEB From 0c93e3181615da6a5ed521ac517c1c91d50160e0 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 21 Aug 2021 08:22:44 +0200 Subject: [PATCH 167/180] Add MBC --- ransomware_gang.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/ransomware_gang.md b/ransomware_gang.md index 2a2783b..26015d7 100644 --- a/ransomware_gang.md +++ b/ransomware_gang.md @@ -32,12 +32,14 @@ |KARMA| http://3nvzqyo6l4wkrzumzu5aod7zbosq4ipgf7ifgj3hsvbcr5vcasordvqd.onion/||| |LOCKBIT |http://lockbitkodidilol.onion/ |(CURRENTLY DOWN)|| |LOCKBIT 2.0 |http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion|||3085B89A0C515D2FB124D645906F5D3DA5CB97CEBEA975959AE4F95302A04E1D709C3C4AE9B7 +|LOCKFILE (victim request id page)| http://zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion/|||B2F873769EB6B508EBC2103DDEB7366CEFB7B09AB8314DAD0C4346169072686690489B47EAEB |LORENZ |http://lorenzmlwpzgxq736jzseuterytjueszsvznuibanxomlpkyxk6ksoyd.onion/||| |LV (1) |http://rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onion||| |LV (2) |http://4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onion/||| |MARKETO (deep)| https://marketo.cloud/||| |MARKETO (dark)| http://g5sbltooh2okkcb2.onion/||| -|MAZE |https://newsmaze.net/ |(CURRENTLY DOWN)|| +|MAZE | https://newsmaze.net/ |(CURRENTLY DOWN)|| +|MBC | http://xembshruusobgbvxg4tcjs3jpdnks6xrr6nbokfxadcnlc53yxir22ad.onion ||| |MOUNT LOCKER |http://mountnewsokhwilx.onion/ |(CURRENTLY DOWN)|| |MYDECRYPTOR |http://58b87e60649ccc808ac8mstiejnj.5s4ixqul2enwxrqv.onion||| |N3TW0RM |http://n3twormruynhn3oetmxvasum2miix2jgg56xskdoyihra4wthvlgyeyd.onion/ |(CURRENTLY DOWN)|| @@ -64,4 +66,3 @@ |VFOKX (2)| http://746pbrxl7acvrlhzshosye3b3udk4plurpxt2pp27pojfhkkaooqiiqd.onion/||| |VICE SOCIETY |http://4hzyuotli6maqa4u.onion||| |XING LOCKER| http://xingnewj6m4qytljhfwemngm7r7rogrindbq7wrfeepejgxc3bwci7qd.onion/||| -|LOCKFILE (victim request id page)| http://zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion/|||B2F873769EB6B508EBC2103DDEB7366CEFB7B09AB8314DAD0C4346169072686690489B47EAEB From 3fde6e1faa750efb514204818e2a7db22caf74b8 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 21 Aug 2021 18:27:00 +0200 Subject: [PATCH 168/180] Add MBC ransomware gang --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index 858c175..0b8dd44 100644 --- a/telegram.md +++ b/telegram.md @@ -70,3 +70,4 @@ |https://t.me/cbanke| Data Leaks |https://t.me/cbanke_logs| Log Leaks |https://t.me/cbanke_market| Market +|https://t.me/MBCRANSOMWARE| Ransomware gang From 53778f53fd69eba0de9e5f40a1d7d3dd8c07839f Mon Sep 17 00:00:00 2001 From: fastfire Date: Sat, 21 Aug 2021 23:18:09 +0200 Subject: [PATCH 169/180] Add Leak Data --- others.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/others.md b/others.md index c1efcfd..99cc16d 100644 --- a/others.md +++ b/others.md @@ -15,5 +15,6 @@ |SAUDI ARAMCO LEAK|http://662m7dfcpfsmeetqucdekz3rn4a6dxsxbdjwd6iz3rwnogjsj7i3hxad.onion/| |BL4CKT0R|http://bl4cktorpms2gybrcyt52aakcxt6yn37byb65uama5cimhifcscnqkid.onion/| |PWNDB|http://pwndb2am4tzkvold.onion/| -|RANSOMWARE PAYMENTS TRACKER| https://ransomwhe.re/||| -|ALL WORLD CARDS| http://awcardsqtyy2nzjz4bqwbccvv6xr4bdcwcgfyewd7gsx5mhh63c2lsad.onion/||| +|RANSOMWARE PAYMENTS TRACKER| https://ransomwhe.re/| +|ALL WORLD CARDS| http://awcardsqtyy2nzjz4bqwbccvv6xr4bdcwcgfyewd7gsx5mhh63c2lsad.onion/| +|LEAK DATA| http://a7fgazjfsn5kwk2psase4oepogihgvb3bm4enomnyfg52dwghdymeyqd.onion/| From d6fca5f68790e43a8c3d1ba7d583b876ec2c5852 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 22 Aug 2021 00:21:02 +0200 Subject: [PATCH 170/180] Add Deep Database Leak Market --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index 0b8dd44..9afbdf0 100644 --- a/telegram.md +++ b/telegram.md @@ -71,3 +71,4 @@ |https://t.me/cbanke_logs| Log Leaks |https://t.me/cbanke_market| Market |https://t.me/MBCRANSOMWARE| Ransomware gang +|https://t.me/deepdatamarket| Data Leaks From b60d2919cfee855ca6bf04e4807288e4fa91a5ad Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 22 Aug 2021 00:21:58 +0200 Subject: [PATCH 171/180] Fix --- others.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/others.md b/others.md index 99cc16d..1abd32e 100644 --- a/others.md +++ b/others.md @@ -17,4 +17,4 @@ |PWNDB|http://pwndb2am4tzkvold.onion/| |RANSOMWARE PAYMENTS TRACKER| https://ransomwhe.re/| |ALL WORLD CARDS| http://awcardsqtyy2nzjz4bqwbccvv6xr4bdcwcgfyewd7gsx5mhh63c2lsad.onion/| -|LEAK DATA| http://a7fgazjfsn5kwk2psase4oepogihgvb3bm4enomnyfg52dwghdymeyqd.onion/| +|DEEP DATABASE LEAK MARKET| http://a7fgazjfsn5kwk2psase4oepogihgvb3bm4enomnyfg52dwghdymeyqd.onion/| From 07e875631d00c3ea6a74abbef72f6d1be7628139 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 22 Aug 2021 13:50:17 +0200 Subject: [PATCH 172/180] Added various channels --- telegram.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/telegram.md b/telegram.md index 9afbdf0..9b1fec9 100644 --- a/telegram.md +++ b/telegram.md @@ -72,3 +72,7 @@ |https://t.me/cbanke_market| Market |https://t.me/MBCRANSOMWARE| Ransomware gang |https://t.me/deepdatamarket| Data Leaks +https://t.me/leaks_db| Data Leaks +https://t.me/latest_leaks| Data Leaks +https://t.me/datamuseum| Data Leaks +https://t.me/Kristina_Pass_RF| Data Leaks From 45a68b7a7836e09e84058c2eecfcf111363229d6 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 22 Aug 2021 13:51:49 +0200 Subject: [PATCH 173/180] Added CSE --- others.md | 1 + 1 file changed, 1 insertion(+) diff --git a/others.md b/others.md index 1abd32e..2b37a30 100644 --- a/others.md +++ b/others.md @@ -18,3 +18,4 @@ |RANSOMWARE PAYMENTS TRACKER| https://ransomwhe.re/| |ALL WORLD CARDS| http://awcardsqtyy2nzjz4bqwbccvv6xr4bdcwcgfyewd7gsx5mhh63c2lsad.onion/| |DEEP DATABASE LEAK MARKET| http://a7fgazjfsn5kwk2psase4oepogihgvb3bm4enomnyfg52dwghdymeyqd.onion/| +|PROGRAMMABLE SEARCH ENGINE| https://t.me/joinchat/L8Io1G7N58g2YWRk| From f63e4bdf66a0a954ce079b5999e5b38fbe353029 Mon Sep 17 00:00:00 2001 From: fastfire Date: Sun, 22 Aug 2021 14:28:35 +0200 Subject: [PATCH 174/180] Add RdpSnitch --- twitter.md | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 twitter.md diff --git a/twitter.md b/twitter.md new file mode 100644 index 0000000..783a7b1 --- /dev/null +++ b/twitter.md @@ -0,0 +1,3 @@ +|Link| +| ------ | +|https://twitter.com/RdpSnitch | From 9bd8c8c17bfaa498123312a532fe215347134095 Mon Sep 17 00:00:00 2001 From: SimoneCagol <57213014+SimoneCagol@users.noreply.github.com> Date: Mon, 23 Aug 2021 00:09:58 +0200 Subject: [PATCH 175/180] Update telegram.md --- telegram.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/telegram.md b/telegram.md index 9b1fec9..10c3c32 100644 --- a/telegram.md +++ b/telegram.md @@ -34,7 +34,7 @@ |https://t.me/fuckeddb| |https://t.me/Blank_Link| |https://t.me/DWI_OFFICIAL| -|https://t.me/joinchat/5wChO8HFwJ43YTVk| +|https://t.me/joinchat/5wChO8HFwJ43YTVk (EXPIRED)| |https://t.me/mailpasword| |https://t.me/Yad2Leaks| Data Leaks |https://t.me/theofficial0day| From 8f28512172e0fe2a0773a387d7862e59506c0f87 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 23 Aug 2021 08:27:17 +0200 Subject: [PATCH 176/180] Fix CSE --- others.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/others.md b/others.md index 2b37a30..7740b51 100644 --- a/others.md +++ b/others.md @@ -18,4 +18,4 @@ |RANSOMWARE PAYMENTS TRACKER| https://ransomwhe.re/| |ALL WORLD CARDS| http://awcardsqtyy2nzjz4bqwbccvv6xr4bdcwcgfyewd7gsx5mhh63c2lsad.onion/| |DEEP DATABASE LEAK MARKET| http://a7fgazjfsn5kwk2psase4oepogihgvb3bm4enomnyfg52dwghdymeyqd.onion/| -|PROGRAMMABLE SEARCH ENGINE| https://t.me/joinchat/L8Io1G7N58g2YWRk| +|PROGRAMMABLE SEARCH ENGINE|https://cse.google.com/cse?&cx=006368593537057042503:efxu7xprihg#gsc.tab=0| From 4ce7f1fcfceb250855c7be6af99e90e857b65a8a Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 23 Aug 2021 08:56:30 +0200 Subject: [PATCH 177/180] Update README.md --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index e1dc428..496025e 100644 --- a/README.md +++ b/README.md @@ -37,5 +37,7 @@ Through this project, which takes into consideration the OSINT sources related t - forums related to cyber criminal activities and data leaks - markets - exploits databases +- Twitter accounts +- RaaS (Ransomware As A Service) sites In addition, within the **methods** file, various techniques for searching and analyzing sources are described. From 9a73cbb03a05ca830e6438b24ce4a14da6b8035e Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 23 Aug 2021 13:57:13 +0200 Subject: [PATCH 178/180] Add description field --- twitter.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/twitter.md b/twitter.md index 783a7b1..e006649 100644 --- a/twitter.md +++ b/twitter.md @@ -1,3 +1,3 @@ -|Link| -| ------ | -|https://twitter.com/RdpSnitch | +|Link| Description | +| ------ | ------ | +|https://twitter.com/RdpSnitch | A bot who snitches on RDP Scanners, sharing IOC | From a618a6afec0caef9cb7d150b3c600216044f1c02 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 23 Aug 2021 21:41:08 +0200 Subject: [PATCH 179/180] Add LeakedSource --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index 10c3c32..eb51915 100644 --- a/telegram.md +++ b/telegram.md @@ -76,3 +76,4 @@ https://t.me/leaks_db| Data Leaks https://t.me/latest_leaks| Data Leaks https://t.me/datamuseum| Data Leaks https://t.me/Kristina_Pass_RF| Data Leaks +https://t.me/LeakedSource| Data Leaks From d2b1e018c6130526c892c7083ab914d053d9ab59 Mon Sep 17 00:00:00 2001 From: fastfire Date: Mon, 23 Aug 2021 22:25:45 +0200 Subject: [PATCH 180/180] Add Exploit DB --- telegram.md | 1 + 1 file changed, 1 insertion(+) diff --git a/telegram.md b/telegram.md index eb51915..6454ef4 100644 --- a/telegram.md +++ b/telegram.md @@ -77,3 +77,4 @@ https://t.me/latest_leaks| Data Leaks https://t.me/datamuseum| Data Leaks https://t.me/Kristina_Pass_RF| Data Leaks https://t.me/LeakedSource| Data Leaks +https://t.me/exploit_db_com| Exploits