Advertisement
Guest User

0day.today scam

a guest
Sep 8th, 2016
4,793
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.50 KB | None | 0 0
  1. 2016-08-25 7:57 GMT+03:00 Anthony Wallace<wallace.anthony@yandex.com>:
  2. Dear sir,
  3. I would like to signup for the 0day section of Inj3ct0r.
  4. How could I browse for the current offering ? it is what is listed at http://0day.today/private ?
  5. Thanks,
  6. Anthony
  7.  
  8. 25.08.2016, 11:13, "0day Today Exploit Market"<mr.inj3ct0r@gmail.com>:
  9. You add 1000 gold (1.8 bitcoin ) on your account nd you can see all private list , more information on 0day.today/0day
  10. This category you find most recent and dangerous vulnerabilities such types: Remote / Local Code Execution, Local / Remote Privilege Escalation, Format string, Bypass, etc.
  11. 0day about JAVA Exploit, Adobe Exploit, Microsoft Word Exploit, new zero-day vulnerability about Mozilla, Chrome, Opera, Windows/Linux/Android/Apple Privilege Escalation and etc.
  12. Here you can find private exploits and vulnerabilities, which the author does not want to publish them in open access.
  13. Access to this section can get any user, who complete one of this points:
  14. - Make transactions [refill account / buy explot / sell exploit] in the system in an amount not less than
  15. 1000 Gold and you will get: Full Access to all sections in the site.
  16. - If you add gold on your account and not select exploit - we money back.
  17. - If you buy 2 exploit or more you have good discount and get the customer's card (future
  18. discount on any material 10%)
  19. - All people who buy 0day exploit on 0day.today/0day have 3 mounth support (if exploit
  20. stop work or detect antivirus, we will be crypt/fix or replace about same exploit).
  21. - We sell 0day exploit only once in [0day] section.
  22.  
  23.  
  24. 2016-08-26 2:13 GMT+03:00 Anthony Wallace <wallace.anthony@yandex.com>:
  25. Thank you for the info.
  26. There are several things I would like to understand prior to depositing cash in the site, and I would highly appreciate your assistance.
  27. First, just to get a general feeling of prices – what are prices of current IE11 0day ? how old are those exploits ?
  28. Second, If I don’t find an acceptable exploit – do you refund the 1K deposit ?
  29. Thanks
  30.  
  31. 26.08.2016, 19:35, "0day Today Exploit Market"<mr.inj3ct0r@gmail.com>:
  32. >> what are prices of current IE11 0day ?
  33. 1-3k$
  34. >> how old are those exploits ?
  35. 3-6 mouth
  36. >> Second, If I don’t find an acceptable exploit – do you refund the 1K deposit ?
  37. Yes refund
  38.  
  39. 2016-08-28 5:52 GMT+03:00 Anthony Wallace<wallace.anthony@yandex.com>:
  40. Thank you for the info,
  41. I'll make the deposit soon
  42.  
  43. 28.08.2016, 10:46, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  44. Thanks, Welcome
  45.  
  46. 2016-08-28 12:13 GMT+03:00 Anthony Wallace<wallace.anthony@yandex.com>:
  47. Hi there,
  48. I really wish I wouldn’t have to go through that, but, there are a few posts in a few forums calming some reliability issues with you. I would like to hear your part prior to proceeding and making a deposit.
  49. As I want to believe you, I would appreciate your honest response and point of view of the alleged publications.
  50. Thanks
  51.  
  52. 28.08.2016, 14:25, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  53. Many people write because they want to pick up the material free of charge.
  54. Working with me you will always work. I have quite a lot of followers name and
  55. who love me
  56. 2016-08-30 15:45 GMT+03:00 Anthony Wallace <wallace.anthony@yandex.com>:
  57. Hi there.
  58. I would like to make a deposit to your bitcoin account and view the premium offering.
  59. Could you please share what current 0days you offer (mostly IE11, chrome, win7,8,10, flash, etc’ – not interested in facebook/instagram or web applications )?
  60. In addition – what shellcode is encoded in the exploits ? do you provide a custom shellcode ?
  61. Thanks
  62.  
  63. 30.08.2016, 21:30, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  64. >> Could you please share what current 0days you offer (mostly IE11, chrome, win7,8,10, flash, etc’ – not interested in facebook/instagram or web applications ) ?
  65. Yes correct, more info on 0day.today/0day ok send 1000 gold it's 2btc on (http://0day.today/gold BTC ADDRESS) and report me on mail
  66.  
  67. 2016-08-30 21:57 GMT+03:00 Anthony Wallace <wallace.anthony@yandex.com>:
  68. Would you please be able to share what 0days you currently offer? Directing me to your webpage again and again could raise some doubts
  69.  
  70. august 30, 2016 at 22:00
  71. From: «0day Today Exploit Market» <mr.inj3ct0r@gmail.com>
  72. To: «Anthony Wallace» <wallace.anthony@yandex.com>
  73. Of course no , this exploit list see only people who have 1000 gold and more
  74.  
  75. 2016-08-31 12:33 GMT+03:00 0day Today Exploit Market <mr.inj3ct0r@gmail.com>:
  76. 0day material one page example
  77.  
  78. 2016-08-31 12:41 GMT+03:00 0day Today Exploit Market <mr.inj3ct0r@gmail.com>:
  79. You add 1000 gold or mo and you can see 0day category and all exploits list on site.
  80. You can add any gold and select any material. This category only private mamber who have 1000
  81. gold on account
  82.  
  83. 31.08.2016, 12:50, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  84. I showed you the last page of the private category
  85.  
  86. 2016-08-31 13:25 GMT+03:00 Anthony Wallace <wallace.anthony@yandex.com>:
  87. Thank you, sir. I appreciate it.
  88. I will make a 1K$ deposit in the upcoming days
  89.  
  90. 31.08.2016, 13:26, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  91. Welcome
  92.  
  93. 2016-09-01 14:41 GMT+03:00 Anthony Wallace <wallace.anthony@yandex.com>:
  94. Hi.
  95. I would like to make a deposit with the amount of $1000.
  96. the current exchange rate shows 1K$ is 1.75BTC
  97. Please confirm the receiving address is 1AWqYR4CCP5j9GEqMNk8b3ZNPPfG5Jniu1
  98. Thank you
  99.  
  100. 2016-09-01 15:09 GMT+03:00 0day Today Exploit Market <mr.inj3ct0r@gmail.com>:
  101. confirm
  102.  
  103. 01.09.2016, 15:23, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  104. I see your 1k$ , give me your id on site
  105.  
  106. 2016-09-01 15:24 GMT+03:00 Anthony Wallace <wallace.anthony@yandex.com>:
  107. wallace.anthony
  108.  
  109. 01.09.2016, 15:25, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  110. ok, wait 3 confirm on blockchain and i add gold and open vip access. Agree?
  111.  
  112. 2016-09-01 15:26 GMT+03:00 Anthony Wallace <wallace.anthony@yandex.com>:
  113. 3 what ?
  114.  
  115. 2016-09-01 15:27 GMT+03:00 0dayToday Exploit Market <mr.inj3ct0r@gmail.com>:
  116. https://blockchain.info/ru/address/1AWqYR4CCP5j9GEqMNk8b3ZNPPfG5Jniu1 3 blockchain confirms
  117.  
  118. 01.09.2016, 15:27, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  119. at the moment 1 confirm
  120.  
  121. 2016-09-01 15:45 GMT+03:00 Anthony Wallace <wallace.anthony@yandex.com>:
  122. 3 confirms now
  123.  
  124. 01.09.2016, 15:46, "0day Today ExploitMarket" <mr.inj3ct0r@gmail.com>:
  125. Done! Check balance and access
  126.  
  127. 2016-09-01 15:53 GMT+03:00 AnthonyWallace <wallace.anthony@yandex.com>:
  128. Thank you. I have now access.
  129. Earlier you mentioned IE11 0day priced at 1-3K$ . We did you see those entries ?
  130.  
  131. 2016-09-01 15:58 GMT+03:00 0day Today Exploit Market <mr.inj3ct0r@gmail.com>:
  132. this exploit? http://0day.today/exploit/description/22639
  133.  
  134. 2016-09-01 16:01 GMT+03:00 0day Today Exploit Market <mr.inj3ct0r@gmail.com>:
  135. oh understand, yes we update exploit and republic after 1-2h , exploit cost 2800
  136.  
  137. 01.09.2016, 16:05, "0day Today Exploit Market"<mr.inj3ct0r@gmail.com>:
  138. this material http://0day.today/exploit/description/22639 You can buy it no earlier than 2 hours. Now there is a check and update
  139.  
  140. 2016-09-01 16:10 GMT+03:00 Anthony Wallace<wallace.anthony@yandex.com>:
  141. I must admit I am a bit surprised of the very-high prices of all other exploits
  142.  
  143. 01.09.2016, 16:11, "0day Today Exploit Market"<mr.inj3ct0r@gmail.com>:
  144. tell me what you're interested in and what you are willing to buy at any price? please tell me, maybe i give discount good or use any mounth
  145.  
  146. 2016-09-01 16:24 GMT+03:00 Anthony Wallace<wallace.anthony@yandex.com>:
  147. We’re after something that can allow us RCE from an email – link to website or attachment.
  148. So we’re after IE11, chrome, flash, office, PDF and so on.
  149.  
  150. 2016-09-01 16:38 GMT+03:00 0day Today Exploit Market <mr.inj3ct0r@gmail.com>:
  151. of course link to website
  152.  
  153. 2016-09-01 16:43 GMT+03:00 0day Today Exploit Market <mr.inj3ct0r@gmail.com>:
  154. If you select this exploit - http://0day.today/exploit/description/22639 please wait until the status changes to a yellow triangle tick (40 min) and can add money to the account, after buying the material.
  155.  
  156. 02.09.2016, 22:51, "0day Today Exploit Market"<mr.inj3ct0r@gmail.com>:
  157. Bro are you seelct exploit? Maybe I can help you?
  158.  
  159. 2016-09-03 17:25 GMT+03:00 Anthony Wallace <wallace.anthony@yandex.com>:
  160. As for the PDF exploit (http://0day.today/exploit/description/23929) :
  161. 1. Is the opened PDF crashes, or is it showing a page? if so, could we display any page we want ?
  162. 2. Do you provide a tool that creates the PDF ? what language is it written in ?
  163. 3. What is the default shellcode ?
  164. 4. What privileges do we have after exploiting (user/SYSTEM) ?
  165. Thanks
  166.  
  167. 2016-09-05 10:45 GMT+03:00 0day Today Exploit Market<mr.inj3ct0r@gmail.com>:
  168. yes we can display any page, yes it's Builder , python language , Remote Code Execute
  169.  
  170. 05.09.2016, 10:56, "0day Today Exploit Market"<mr.inj3ct0r@gmail.com>:
  171. we can give you good discount if you want to buy this exploit
  172.  
  173. 2016-09-05 15:29 GMT+03:00 Anthony Wallace
  174. <wallace.anthony@yandex.com>:
  175. In addition to the below :
  176. 1. Do you have a video proof of the exploit in action ?
  177. 2. What kind of vulnerability it is (buffer OF, Use after free,etc’) ?
  178. 3. What is the default payload ?
  179. 4. What privileges do we have after exploiting (user/SYSTEM) ?
  180.  
  181. Thank you
  182.  
  183. 05.09.2016, 20:12, "0day Today Exploit Market"<mr.inj3ct0r@gmail.com>:
  184. Adobe Acrobat Reader
  185. No , if you add gold on your account = cost exploit we use
  186. TEAM Viewer and demonstrate on your computer or any computer
  187. BOF
  188. exe trojan
  189. System
  190.  
  191. 2016-09-05 20:30 GMT+03:00 Anthony Wallace<wallace.anthony@yandex.com>:
  192. Sir, I may be novice, but I know that buffer overflow crashes the program it exploits. you mentioned earlier that the PDF will not crush and display a document.
  193. Kindly clarify
  194.  
  195. 2016-09-06 0:35 GMT+03:00 0day Today Exploit Market<mr.inj3ct0r@gmail.com>:
  196. Bro , PDF document will not crush display a document! If are you intereat yo buy iths exploit we can negotiate a discount
  197.  
  198. 06.09.2016, 01:42, "0day Today Exploit Market"<mr.inj3ct0r@gmail.com>:
  199. Bro , PDF document will not crush display a document! If are you interest to buy this exploit, we can negotiate a discount.
  200.  
  201. 2016-09-06 4:06 GMT+03:00 Anthony Wallace<wallace.anthony@yandex.com>:
  202. Yes, I would like to purchase this exploit.
  203. There are a few things I would like to find out prior to purchasing :
  204. 1. Is “exe trojan” = Download and Execute ? is it http ?
  205. 2. For how long do you guarantee the 0day validity ? what if it gets patched ?
  206. 3. If we agree on a price, and I make a deposit, I would like to see a demo. If the demo is somehow not what I have expected, do you offer a refund ?
  207. Thank you for your attention, I wish we will enjoy a good collaboration.
  208.  
  209. 06.09.2016, 09:07, "0day Today Exploit Market"<mr.inj3ct0r@gmail.com>:
  210. 1) Yes Download and Execute , yes http
  211. 2) 1 year , if patched we update and give you again.
  212. 3) You add money and see button [make test] , you click and we make demo , if you dont like you can money back.
  213. my suggestion for a discount = 5000 $ - your 1000$ balance = 4000
  214. gold your deposite and you can buy it
  215.  
  216. 2016-09-06 17:14 GMT+03:00 Anthony Wallace<wallace.anthony@yandex.com>:
  217. Thank you for the details.
  218. As for the price, I would feel more comfortable to pay total of 4000$, that is a 3000$ deposit+1000$ already deposited (current balance). If you are ok with that, I’ll make a deposit in the upcoming days and we will arrange the demo.
  219. Thank you
  220.  
  221. 06.09.2016, 21:43, "0day Today Exploit Market"<mr.inj3ct0r@gmail.com>:
  222. okay, I am waiting for you
  223.  
  224. 2016-09-08 17:07 GMT+03:00 Anthony Wallace<wallace.anthony@yandex.com>:
  225. Hi.
  226. I would like to proceed with the payment and the demo.
  227.  
  228. Here is what we agreed on:
  229. 1. I will transfer 4.76 bitcoins to your bitcoin address
  230. 2. You will show a demo of the PDF exploit
  231. 3. If the demo is satisfactory, I will ask you for the files that generate
  232. the PDF, if it is not satisfactory, you will return the 4.76 bitcoins back to me.
  233.  
  234. The demo:
  235. Please note that adobe acrobat reader is divided into two products :
  236. Adobe reader XI and Adobe Reader DC.
  237. 1. I would like to see windows7 machine, and you will download from
  238. adobe website the most recent acrobat reader DC - https://get.adobe.com/reader/
  239. 2. I would also like to see downloaded Acrobat XI from
  240. http://trials2.adobe.com/AdobeProducts/ACRO/11/win32/AcrobatStd_11_Web_WWMUI.exe
  241. 3. exploit both installations
  242. 4. I will ask to view the running process of the downloaded file
  243. Thank you
  244.  
  245. 08.09.2016, 19:12, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  246. Yes confirm, agree.
  247.  
  248. 2016-09-08 19:57 GMT+03:00 Anthony Wallace<wallace.anthony@yandex.com>:
  249. For when would you like to schedule the demo ?
  250.  
  251. 08.09.2016, 19:58, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  252. today , 3 confirm on blockchain and we start
  253.  
  254. 2016-09-08 22:45 GMT+03:00 Anthony Wallace<wallace.anthony@yandex.com>:
  255. I am ready to complete the transfer.
  256. Are we doing the demo immediately after ? (once we get 3 confirmations)
  257.  
  258. 08.09.2016, 22:47, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  259. Yes correct.
  260.  
  261. 2016-09-08 22:49 GMT+03:00 Anthony Wallace <wallace.anthony@yandex.com>:
  262. https://blockchain.info
  263. /tx/bceb5cce2a00d31290b3b9cef9e536fe785284252875533020638ac3f18ca0d0
  264.  
  265. 08.09.2016, 22:50, "0day Today Exploit Market" <mr.inj3ct0r@gmail.com>:
  266. wait 3 confirm
  267.  
  268. 08.09.2016, 23:30
  269. Anthony Wallace <wallace.anthony@yandex.com>
  270. done
  271.  
  272. 09.09.2016, 0:15
  273. Anthony Wallace <wallace.anthony@yandex.com>
  274.  
  275. Sir, are we doing a demo ?
  276.  
  277. 09.09.2016, 0:21
  278. Anthony Wallace<wallace.anthony@yandex.com>
  279. It seems that my account was suddenly blocked
  280. Kindly clarify
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement