Advertisement
Guest User

Untitled

a guest
Jan 17th, 2017
143
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 24.39 KB | None | 0 0
  1. THIS IS A DEAD ACCOUNT. IT WILL NOT BE CHECKED, MESSAGES WILL NOT BE RESPONDED TO. I ONLY REUPLOADED THIS DUE TO POPULAR DEMAND. DO NOT MESSAGE THIS ACCOUNT WITH QUESTIONS, YOU WILL GET NO ANSWERS
  2.  
  3.  
  4.  
  5. The deepweb is probably the best, easiest and safest way of purchasing other things on the internet. You cut out any face to face contact with dodgey dealers, and you're more unlikely to get ripped off if you do everything correctly. Please note that it might take you a while to understand everything I talk about in here, so read carefully and double check things yourself. You are expected to do A LITTLE of your own research as we go, however most things are step by step. I also highly recommend opening this guide on a PC that you're not using TAILS on because restarting your computer all the time might make you lose your place, which is confusing.
  6.  
  7.  
  8.  
  9. What's in this guide?
  10.  
  11. Setting up TAILS on a USB device. (Persistence included!)
  12.  
  13. Setting up Bitcoin wallets for use on the clearnet and TAILS.
  14.  
  15. How to buy Bitcoins and use a tumbling service.
  16.  
  17. Using the inbuilt TAILS programs such as Keepass, Electrum, and GPG Encryption.
  18.  
  19. Accessing .onion sites and staying safe on them.
  20.  
  21. How and where to receive packages.
  22.  
  23.  
  24.  
  25. Who is this guide for?
  26.  
  27. This guide is intended for people with little knowledge about running anonymity tools such as TAILS, you'll need some prior technical knowledge before hand, nobody is going to spoon feed you. I'll try to be as in detail about things as I can as I go, while getting to the point. Again, this is for beginners, and covers the basics of doing your first few purchases, as you make more and more purchases you may find ways of doing things that is different from here, and that's fine. This is not an advanced guide to operational security, but rather just how to get started.
  28.  
  29. Please note that you should put into practice not clicking links that any users give you on here, as they can be disguised as other links. While I will provide links in this guide to most of the things you need, but I still highly recommend you do your own searches and find the links yourself.
  30.  
  31. As a final note before we start, I'm going to HIGHLY advise against ordering anything from places on .onion sites if you still live at home with parents/guardians. Please respect that it is not your house and your actions could end up getting people in trouble. It's more hassle than its worth. Please please please PLEASE heed this advice.
  32.  
  33.  
  34.  
  35. What you're going to need:
  36.  
  37. 1. 2x 4+GB USB sticks. Check here for incompatibility issues: https://tails.boum.org/support/known_issues/ as some USBs won't work with TAILS.
  38.  
  39. 2. A laptop/desktop computer. (preferably your own personal one/a burner one). Again, check for incompatibility issues on the link above.
  40.  
  41. 3. Some technical knowledge.
  42.  
  43. 4. An internet connection. Doesn't matter where. Just not at work/school/networks which are monitored.
  44.  
  45.  
  46.  
  47. With all that said, let's get down to business, shall we?
  48.  
  49.  
  50.  
  51. Installing TAILS with persistence 1.1
  52.  
  53. Go ahead and travel to the official TAILS website, found here: https://tails.boum.org/
  54.  
  55. Click the "INSTALL TAILS X.X.X" button. It'll take you to a download page.
  56.  
  57. At the bottom right of that page there will be a "Download Only" button, we're going to use that. Click it.
  58.  
  59. We're going to use a bit-torrent client (I recommend using Deluge, found here: http://deluge-torrent.org/) to download the TAILS operating system. Click on "download torrent file" it'll download a small file which you need to insert into your bit-torrent client, once you've done this the TAILS ISO will begin to download. Let it finish.
  60.  
  61. While it's downloading, go ahead and also download and install a program called Rufus. Rufus allows you to easily create bootable USB sticks on the fly. Here's the link for Rufus: https://rufus.akeo.ie/
  62.  
  63. Once you've downloaded and installed Rufus, and the TAILS ISO image has finished downloading, go ahead and start up Rufus, the program we've just installed.
  64.  
  65. Plug one of your USB sticks into your computer and ensure it's selected under "Device" in the Rufus settings. Near the bottom of the Rufus application there will be an option saying "Create a bootable disk using" make sure that box is ticked and click on the small CD icon next to it. It'll open up a window, it wants you to select the file that you've just downloaded for TAILS, so go and find it. Once you've done that it's as easy as clicking "start".
  66.  
  67. TAILS INSTALLED SUCCESSFULLY TO FIRST USB STICK! AWESOME!
  68.  
  69.  
  70.  
  71. Installing TAILS with persistence 1.2
  72.  
  73. We're going to boot into the USB stick that you've just installed TAILS to.
  74.  
  75. To do this you're going to leave the USB stick in your computer and restart your computer. While your computer is booting back up (showing the manufacturer logo or BIOS screen) press the F11 key (it's usually F11, it can depend on your manufacturer though so try F8-F12).
  76.  
  77. You'll be prompted with a "boot menu" or a BIOS screen, if it's a BIOS screen then try to look for an option called "boot order" or something similar. We're going to select the USB stick as the computers boot device.
  78.  
  79. TAILS should now be booting up on your computer, to boot back into your normal operating system simply restart your computer and remove the USB stick. However we're going to continue using TAILS for now.
  80.  
  81. Ignore all options it asks you for TAILS for now and just click "Login" or "Forward". It might take some time but it'll boot. Once you're successfully booted into Tails you need to click on "Applications" in the top right, then "Tails", then "Tails Installer". You're going to plug your second USB stick in now, and then click "Clone and Install". Follow the steps in the TAILS installer to do this, it's very simple and does it all for you.
  82.  
  83. We're going to restart the computer again, however this time remove your first USB and leave your second one that we've just installed TAILS onto using the installer, go to the boot menu again and select your second USB this time.
  84.  
  85. Do the same as before and just login, ignoring all options. This time we're going to Applications, and "Configure Persistent Volume". Create a strong password and either write it down somewhere safe or memorise it. Once you've created a password it will ask you what you would like saved to your persistent volume. We're going to choose "Personal Data", "GnuPG/GPG/PGP", "GNOME keyring", "Electrum Wallet", and "Network Connections", you can select more or even all of them if you like. But the ones listed are essential for KEEPING YOUR IMPORTANT DATA AFTER YOU RESTART.
  86.  
  87. Click save when you're done and then reboot your computer again (I know it's annoying, but privacy is worth it). Do the same as last time and boot into your USB stick, this time when you try to log in you'll be asked for a password, enter the password which you set for your persistent volume in the previous step.
  88.  
  89.  
  90.  
  91. And that's it! TAILS installed WITH persistence!
  92.  
  93.  
  94.  
  95. Creating wallets, passwords and identities 2.1
  96.  
  97. We're going to kill a few birds with one stone here and set up your TAILS wallet and your passwords for your username accounts as well as your GPG key (more on that soon) at once.
  98.  
  99.  
  100.  
  101. Using KeepassX
  102.  
  103. Keepass is going to help us store usernames and passwords so that you don't have to! Go to applications and start Keepass, click new and go to new database.
  104.  
  105. Now we're going to need a REALLY strong password for this. Make one and write it down somewhere safe. We're going to use Keepass to store all your accounts and passwords so you don't have to!
  106.  
  107. In your newly created database we're going to create 3 entries. One for your GPG key, one for your markets access, and one for your bitcoin information.
  108.  
  109. Click on new entry, we're going to make your GPG password first. Enter all the information needed in the box that appears when you select "new entry".
  110.  
  111. On "password" click on "gen". We're going to get Keepass to generate us some very strong passwords. You can choose how long and how strong you want your passwords to be.
  112.  
  113. Repeat the above steps for your other information such as your bitcoin wallet, and markets. (More on that later). Ensure the database for your passwords and usernames is saved to your persistent volume.
  114.  
  115.  
  116.  
  117. Bitcoin Wallet
  118.  
  119. Go to applications and load up Electrum and create a new wallet, just follow the steps that it provides and choose "standard wallet" as that is all we need, ENSURE THAT THE WALLET IS SAVED TO YOUR PERSISTENT VOLUME. IF IT IS NOT AND YOU SEND BITCOIN THERE AFTER YOU RESTART YOU WILL LOSE YOUR COIN. Use the password that you generated using KeepassX.
  120.  
  121. Write down your "receive" address for your wallet, please note that these addresses do change every so often so make sure you check it before every transaction.
  122.  
  123.  
  124.  
  125. GnuPG
  126.  
  127. In the top right corner of TAILS you'll see a clipboard. Click it. Then click "Manage Keys". Select new, click "GPG key" and continue, in the boxes where it asks for an email address and a name, enter any random FAKE information. The more random and unlinked to you the better. Click create.
  128.  
  129. It will ask you to create a password. This needs to be REALLY strong password, once you've done that just leave it open for now.
  130.  
  131. There will be a GnuPG tutorial further on in the guide. For now please just keep following the steps!
  132.  
  133.  
  134.  
  135. Using TOR:
  136.  
  137. Go ahead and connect to your internet connection if you haven't already, once TOR says that it is ready to be used you can launch the TOR application.
  138.  
  139. You should keep TOR at the default size that it opens in, as maximising it or making it bigger can open up some security holes. There are "pixel readers" on some sites that can read your resolution and such, making you less anonymous. Make it good practice that you never change the default resolution.
  140.  
  141. MAKE THIS GOOD PRACTICE AS YOU NEED TO DO THIS EVERY TIME YOU RESTART TAILS When you open TOR, click on the "S!" in the top right and click "Forbid Scripts Globally".
  142.  
  143. We do this because javascript is one of the main ways in which people are able to de-anonomise you, and you really do not want that. Make this a habit.
  144.  
  145. Next step is to click on the onion icon in the top right of your TOR browser, and go to "Network and Privacy" and slide the slider to the highest possible settings. (Again you need to do this EVERY time you restart TAILS).
  146.  
  147. You're going to have to do your own research of what .onion sites to use, nobody is going to tell you specifically who to go to or where to go.
  148.  
  149. Go to your selected .onion url and create an account (store the information in Keepass as before) and enable 2-factor authentication by adding your newly created GPG key to your account. You can do this by going to the clipboard in the top right of TAILS and clicking "Manage Keys" then select your GPG key that you created and press CONTROL + C. This will copy your PUBLIC key to your clipboard. This is the same key that you will give to your end user to privately communicate with them.
  150.  
  151. (This step is if you have 2-fa enabled) When you try to log in, it will give you a random jumble of letters that beings with:
  152.  
  153. -----BEGIN PGP PUBLIC KEY BLOCK-----
  154.  
  155. and ends with....
  156.  
  157. -----END PGP PUBLIC KEY BLOCK-----
  158.  
  159. Highlight the ENTIRE thing and press CONTROL + C. In the top right of TAILS we're going to click the clipboard again, however this time we're going to choose "Decrypt/Verify".
  160.  
  161. One you've clicked that it'll ask you for a password. Go to Keepass and highlight the GPG entry and hit CONTROL + C to copy your password to the clipboard. Paste it into the password input box for the message decryption.
  162.  
  163. Your message should now be unscrambled and make sense! You'll want to copy the code it gives you and enter it into the .onion site you're on.
  164.  
  165. This is where you're going to have to do your own research, as I cannot tell you what vendor to go to for which items, the game is always changing.
  166.  
  167. Find a product that you like, and find a REPUTABLE vendor, on your first purchases you should stay away from Finalising Early, however it's required for some vendors. Check reviews on Reddit, or other forum, as well as any other sites about the vendor you're looking into. Something smell fishy? Don't buy. Simple as. Also do not make a purchase on .onion sites unless you're WILLING TO LOSE YOUR COIN, it does happen. A lot more than you think. Don't get scammed. Triple check EVERYTHING.
  168.  
  169. Once you've found a nice vendor, and a product you would like, take note of the price of the product.
  170.  
  171. Once you're there we're pretty much done on this side of the internet now.
  172.  
  173.  
  174.  
  175. Buying bitcoin on the clearnet:
  176.  
  177. We're now going to buy some Bitcoin! There are numerous ways of doing this. Remember that buying bitcoin is COMPLETELY LEGAL, and if any place where you're purchasing it from asks for ID then don't freak out. It's standard procedure at most places, and sometimes all you have to do is provide your mobile number.
  178.  
  179. Once you've bought bitcoin from an online seller, in person or at a bitcoin ATM, you'll then want to send it to a CLEARNET wallet. Go ahead and download Electrum/Mycelium/Other bitcoin wallet on your normal operating system that you use, you'll be sending the coins to this wallet first. You should ALWAYS send your bitcoin to a clearnet wallet after purchasing them online. Sending them directly do a .onion wallet can get your account banned on where you bought your coins from. You don't want that!
  180.  
  181. To clarify on the step above. The order goes like this. 1. Buy bitcoin on clearnet site/in person > 2. Send those coins to an offline wallet stored on your normal operating system > 3. Send those coin from your clearnet offline wallet to a tumbling service using TOR on your normal operating system (don't worry about doing this, nothing illegal about using TOR) > 4. Send the coins from the tumbler to your Electrum wallet on TAILS, and then from the wallet on TAILS to the .onion wallet. You may also send straight from the tumbling service straight to your .onion wallet, as your coin's identity has now been detached to you.
  182.  
  183. Bitcoin transactions take a while to go through, so make sure you've given yourself 5+ hours to do all of this here.
  184.  
  185. Once you've got the coins in your clearnet wallet, its up to you to decided whether you should tumble your coins or not, there's very conflicting opinions out there on this. Go look into it.
  186.  
  187. Tumbling coin is a simple process. Head to the go and search for .onion services such as Helix, and other tumbling services.
  188.  
  189. The tumbling service will ask what bitcoin address you want the coins to be outputted to. We're going to use the TAILS wallet receive address that we wrote down before, it will then give you a receive address which you'll send the coins from your clearnet wallet to.
  190.  
  191. Make sure you send enough coins to cover the transaction fee (usually around 1-3% of the coin) and then wait. Using a delay and multiple transactions can help with your anonymity a bit more, so it is advised.
  192.  
  193. Now its a waiting process, this can take anywhere from 30 mins to a few hours. I've you've done it correctly your coins WILL appear in your TAILS Electrum wallet.
  194.  
  195. We're done on the clearnet again. Boot into TAILS and see if your coins have been sent yet, if so send the coin to your marketplace wallet, by logging into your chosen market account and looking at your "balance" or "receiving coins". Simply load up Electrum in TAILS, enter the receive address give to you by your marketplace and hit send. This again may take some time.
  196.  
  197.  
  198.  
  199. PRE-BUYING CHECKLIST
  200.  
  201. 1. USB encrypted WITH persistence.
  202.  
  203. 2. GPG understood (more on it below) and you know how to encrypt messages.
  204.  
  205. 3. Accounts created with 2-fa.
  206.  
  207. 4. Bitcoin purchased and tumbled.
  208.  
  209. 5. Reviews checked about chosen vendor, and is legit.
  210.  
  211. 6. Chosen where to send product.
  212.  
  213.  
  214.  
  215. How to buy your product:
  216.  
  217. We're almost done here! You're doing awesome if you've got this far. I understand it's daunting and a lot to read, but trust me your privacy and security is worth much more than just using the deepweb.
  218.  
  219. When your coins are visible on the marketplace (usually after around 3 confirmations) you're able to use them!
  220.  
  221. Go to your chosen vendors page and look for his/her "public GPG key", once you've found it highlight it all and hit CONTROL + C and click on the clipboard in the top right of TAILS, go to manage keys and then hit CONTROL + V, this will paste their key into your keychain, just click "ok" when a box pops up asking you if you'd like to add it. Go back to the marketplace and click on the product you would like to buy. If you've got enough coins press the "buy" button, it will take you to another page asking you for "buyer notes" or something similar. This is where you will enter your REAL NAME AND ADDRESS if you're using drops then it's different (more on that later).
  222.  
  223. We're going to use GPG encryption to ensure that nobody else but the seller can read this information.
  224.  
  225. In TAILS open up an application called gedit, this is a basic text editing program that we're going to write your full name and address into. Copy that text you've just wrote down to your clipboard (CONTROL + C) and then in the top right of TAILS click the clipboard, and then go to "Encrypt/Verify message", it will ask you what key you would like to encrypt this message with, you're going to choose the vendors key that you've just imported. Don't click "hide recipients" just go to the next page.
  226.  
  227. Your message will now be encrypted with the vendors public key, and if you try to paste your current clipboard into any text box it will appear as a GPG message, a scrambled one just like before. You're going to put that scrambled message in the "buyer notes" of your purchase, remember don't freak out as only the vendor is able to see the actual message, just like how we did with 2-factor authentication before.
  228.  
  229. Your purchase is now complete! It's all a waiting game from here, your order WILL arrive if you've done everything correctly, provided you haven't been scammed.
  230.  
  231. Relax, thousands of people do this every day, you're a very small fish in a very big pond. Breathe. In. Out. You're alright.
  232.  
  233.  
  234.  
  235. Waiting for your product and receiving it:
  236.  
  237. Distract yourself, take your mind off of it. Keep active until it comes. The more you sit there and think "what if" the worse you're going to feel about it.
  238.  
  239. You shouldn't have to sign for any packages you receive, however this does depend on the vendor, so if you do have any questions then message the vendor. They are usually nice people, just like you and I. They will usually answer promptly and politely.
  240.  
  241. Rip open the package. Weigh it, test it with reagents (recommended. Especially if buying things like Heroin and such, often cut with Fent. Links at the bottom of the page for reagent tests. PLEASE BE SAFE!) and then do as you please!
  242.  
  243.  
  244.  
  245. Remember to leave HONEST feedback about the vendor on the marketplace, Reddit, or other forum. It helps the rest of us decipher who is a scammer and who is legit. As a general rule of thumb in reviews. In your review you should state the weight asked for and weight received, the reagent results if you did any, the price of the product, where you got it from, the vendor you got it from, and the quality of the product, as well as any necessary shipping info.
  246.  
  247.  
  248.  
  249. Extras
  250.  
  251. Bitcoin tumblers usually work in a few different ways, but generally this is how it works. You and many other people are all throwing bitcoin into a metaphorical "pot", all the bitcoins put into this pot are mixed around and shuffled, and you'll be given different bitcoins back (minus a small transaction fee), this basically removes the identity of the bitcoins to you because you no longer have the ones that you purchased, but rather some random ones just given to you by the tumbler.
  252.  
  253. To VPN or to not VPN? This is massively a matter of opinion. Some people will swear by it, others will tell you there's no real point. If you do use a VPN then you need to ensure that the company doesn't keep logs, and if they say they don't you need to really ensure that they don't. Do your own research into this subject and make your own conclusion as there are very different conflicting opinions on this matter.
  254.  
  255. "Drops" are sometimes used instead of sending items to your house, this adds an extra layer of security, but is not 100% necessary.
  256.  
  257. Double check EVERYTHING as you go, one mistake could mean the difference between you losing your bitcoin, and your transaction going successfully.
  258.  
  259. You can NEVER spend enough time reading up on this stuff, the stronger your knowledge is in this field the better. Knowledge is power! Power to stop you from being scammed, phished, caught or otherwise fucked up.
  260.  
  261. Always keep your TAILS OS and TOR browser updated to the latest STABLE version. Running older versions or beta versions opens you up to potential security flaws. YOU HAVE BEEN WARNED!
  262.  
  263. If sending to your home address you must MUST MUST use your real name. You don't want your package being sent away somewhere where you can't receive it because you don't have ID for the fake name you gave. Also take into account that your post-person might get suspicious if they start seeing random names popping up at your address.
  264.  
  265. Finalising early is completely up to you. Make your own informed decision about if you should FE with a vendor, most people will tell you to never ever finalise early, but people who say this don't fully understand it. Of course you shouldn't FE if it's a new vendor or if you've never used the vendor before. If the vendor requires you to finalise early to even purchase the product then you should take a bit more care and do some extra research on the vendor. Once you hit that finalise button, there's no going back. If you get scammed your coins will be gone and nobody will be able to help you.
  266.  
  267. Escrow is a new buyers best friend. Escrow is basically a "holding area" for your bitcoin. Once you pay for the product, if the vendor uses escrow the coins will be stuck in limbo until you release them to the vendor, you should always wait until your product arrives before pressing that finalise button. If the order somehow doesn't arrive and you've finalised, it'll be a pain to either get your coins back (if you get them back at all) or the vendor may offer you a reship.
  268.  
  269. Keep up to date on what markets are doing, who's doing what and what's going down. Being in the know as much as you can is a vital tool in this game. Nobody is going to do the research for you and nobody is going to spoon feed you the information (apart from this guide, because I'm a nice guy).
  270.  
  271. In the event that you do get scammed/phished then come to the forums and NAME AND SHAME the vendor in question, that way other people using the markets know who to avoid, and you help establish the big database of reliable vendors, sure it sucks that it happened to you. You don't want it to happen to anyone else, do you?
  272.  
  273. Remember. These. Words. OPSEC IS A 24/7 JOB the less people you tell about this, and the more strict you are with your privacy rules the easier things will be for you in the long run.
  274.  
  275. You should consider where your packages are coming from, try to look into what countries are "hot" right now as these countries are more likely to have their packages flagged and they may end up not getting to you. Ordering domestic is ALWAYS going to be much safer than international orders. Heed these words and stay domestic until you know what you're doing.
  276.  
  277. Note that the exchange right from real-world bitcoin prices to marketplace prices can be iffy, so always make sure that you send over more than the amount you need (about 3-5% more than the stated amount).
  278.  
  279. You're going to have to do your own research on encryption laws in your country.
  280.  
  281.  
  282.  
  283. EXTERNAL LINKS
  284.  
  285. Reagent testing: http://bunkpolice.com/
  286.  
  287. TOR information: https://www.torproject.org
  288.  
  289. Info on tumbling: https://bitlaunder.com/bitcoin-tumbler
  290.  
  291. Psychedelic harm reduction: https://tripsafe.org/
  292.  
  293. MDMA harm reduction: http://www.rollsafe.org/
  294.  
  295. Darknetmarkets Subreddit: /r/DarkNetMarkets
  296.  
  297. Tripsit chat: http://www.tripsit.me/
  298.  
  299. TAILS website: http://www.tails.boum.org/
  300.  
  301. GPG info: https://www.gnupg.org/documentation/manpage.html
  302.  
  303. KeepassX info: https://www.keepassx.org/
  304.  
  305. Drug combo safety chart: https://wiki.tripsit.me/wiki/Drug_combinations/
  306.  
  307. .onion stats: http://dnstatstzgfcalax.onion/
  308.  
  309.  
  310.  
  311. Bitcoin wallets
  312.  
  313. Electrum: https://electrum.org/#home
  314.  
  315. Mycelium: https://mycelium.com/
  316.  
  317.  
  318.  
  319. Bitcoin purchasing sites
  320.  
  321. Bittylicious: https://bittylicious.com/
  322.  
  323. LocalBitcoins: https://localbitcoins.com/
  324.  
  325. Find a bitcoin ATM near you: https://coinatmradar.com/
  326.  
  327. Bitbargin: https://bitbargain.co.uk/
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement