Guide - Mastiff

Please enable JavaScript to view the full PDF

TABLE OF CONTENTS WELCOME TO CRACKED.TO! REGISTER A NEW ACCOUNT CUSTOMIZE YOUR ACCOUNT WHAT IS CRACKED.TO ABOUT THE HIDDEN CONTENT SYSTEM HOW TO CONTRIBUTE LEECHING REWARDS FOR CONTRIBUTING: AWARDS, USERGROUPS POSTS THREADS THE SHOUTBOX USERS' PROFILES CREDITS GLOSSARY You can move to any chapter of this guide by clicking on the Table of Contents. WELCOME TO CRACKED.TO! Whether or not you are new to Internet forums, it is essential to define Cracked. Cracked.to (alias Cracked or CTO), is an English Internet forum running on MyBB. A forum is an online discussion site where people can hold conversations in the form of posted messages; MyBB is a free and open-source forum software developed by the MyBB Group. Cracked.to has a tree-like structure. The forum contains several subforums, each of which has a different topic. Within a subforum, each new discussion started is called a thread. Threads can be replied to by anyone who has signed up to the forum. REGISTER A NEW ACCOUNT On the top right corner of the site you will find two buttons, Login and Register. If you don't have an account already, either click on Register or just click here. You may be wondering: is having an account on Cracked.to legal? Yes, it is. You don't commit nor facilitate a crime by signing up to a site, and it would be a challenge to indict over 2 Million people, so you can go on and sign up. About your sign up process: Your username is unique, and later in this guide you'll find out how to change it. As on every other site, make sure to use a password that is not easy to guess. Use an email address you own and have access to, you'll receive an email later. Once you've signed up, you should read the Help Documents. You will learn the forum rules that will help you in the long run. CUSTOMIZE YOUR ACCOUNT You can manage everything regarding your account, including your account security, from the User Control Panel (alias UserCP or UCP), that you can find at cracked.to/usercp.php. Alternatively, you can access the UCP by clicking your username on the top right corner, then clicking Settings. The User Control Panel settings. Image slightly edited to make it fit the PDF. (July 2021) Three features are highlighted with different colors, meaning that they are available to upgraded users only. If you don't know what it means, don't worry. This guide will cover the topic later on. Now let's get to the heart of Cracked. WHAT IS CRACKED.TO ABOUT Cracked gets its name from cracking, alias security hacking, which is the practice of defeating computer security. So, not surprisingly, it is one of the key topics on which the forum is based. On the homepage, you will notice several categories under the shoutbox. The categories. The Home category is selected. (July 2021) These categories represent macro topics. By clicking on one category, you will notice that it is divided into micro topics, its subforums, each having a multitude of threads posted by the forum's users. In most subforums, users do not have to log in to read existing messages, unless a specific BBCode, called Hidden Content, is used. The subforums within the Money category. (July 2021) This premise leads us to the next topic: what is the Hidden Content? THE HIDDEN CONTENT SYSTEM At this point, you should have understood that Cracked is a place for discussion, where you can sign up by assigning yourself an anonymous username that allows you to discuss topics within the respective subforums. Cracked has a solid community counting over 2 Million users publishing new content every day. This content ranges from simple chit-chats to hacking resources, from cybersecurity guides to stolen accounts, stolen data and money-making techniques. To prevent all this content from being accessible to anyone, Cracked provides a Hidden Content system, which may sound complicated but is nothing more than a BBCode (just like [b]text[/b], which makes the text bolded). The Hidden Content warning (July 2021). To unlock the Hidden Content (alias the [hide][/hide] tags) you are required to have an account on Cracked.to and reply, with a post, to the thread where you want to unlock the Hidden Content. Additionally, if you are satisfied with the original poster's (alias OP, the member who published the thread) work, you can click the like button to like the thread. The like button looks like this: and you can use it both on threads and posts. Getting the latest content on Cracked is free, it doesn't require more than a post. Unfortunately, the site owner can't pay the host, and its security measures, with a couple of stolen accounts or a cracked Photoshop version. This is the reason Cracked requires its users to contribute to the site. HOW TO CONTRIBUTE There are two ways to contribute to Cracked. ─ You can contribute by purchasing an upgrade: the easiest and fastest way. By buying an upgrade at cracked.to/upgrade.php, you directly help Cracked with its monthly expenses. In addition, you receive significant benefits. You can find out more on the upgrade page. ─ You can also contribute by posting new content on the site. You can show your support for the Cracked community by publishing content. Anything for which there is an appropriate section is welcomed. You do not necessarily have to be the original creator of the content, meaning that you can republish (alias reposting) content from other sites. By doing so, please be aware that: (1) Your content should be safe for the community. If you post malware, you will get a warning, a temporary ban, or a permanent ban depending on your account history. (2) Your content should be free from paywalls (i.e., satoshibox.com), surveys (i.e., linkvertise.com), or sites that pay you based on downloads or advertisements views (i.e., adf.ly). (3) Your content should be related to your thread's title and have a purpose. If you intentionally publish fake accounts, you will get a warning or a ban depending on your account history. LEECHING You may be wondering: what happens if you don't contribute? There's a saying: “you scratch my back and I'll scratch yours”. If you don't repeatedly unlock Hidden Content, then you don't necessarily have to give anything back to the community. It also works the other way around: you can give for the sake of helping others, without taking anything from the site. If you consistently take content from the site without contributing, you will be labelled as a leecher. Cracked has no tolerance for leechers, because people who exclusively come to exploit the work of others, and don't care about giving something in return, do no good to the site and do not deserve to have this privilege. REWARDS FOR CONTRIBUTING: AWARDS, USERGROUPS If you decide to contribute by posting content, you can achieve awards (cracked.to/awards.php) and usergroups (cracked.to/achievements.php). Both make your profile look more unique, and free usergroups have some benefits in common with paid usergroups (that come with the Premium, Infinity, and Supreme upgrades). The first usergroup you can get for free is the Contributor usergroup. It requires 500 likes and with the Contributor usergroup, you are able to post unlimited posts and threads daily, you are able to view all Hidden Contents without replying, you can sell in the Sellers Marketplace, and you can edit and delete your own messages in the shoutbox. It's the equivalent of a Premium upgrade (€10/month), but it's free and lifetime. This should be enough to make you realize that spending some time to give something to the community has undeniable long-term benefits. It just takes more time than instantly upgrading. POSTS Most of the actions you can perform on someone's post (including threads) are available at the bottom right corner of their post. This includes viewing who liked a post, liking a post yourself, replying to a post or multiple posts at the same time, and reporting a post. All possible interactions with a post (July 2021). ─ The green button indicates that at least one person liked the post; the number inside it indicates how many people liked the post, and if you click the button you will be able to see who specifically liked that post. ─ The Like button allows you to like a post. There's a limited number of posts that you can like daily and if you click Like by accident, you can always remove your like by clicking Unlike. ─ The Reply button allows you to directly reply to a post. When you click Reply, you'll be taken to the “Post a New Reply” tab, which is the equivalent of a text editor where you can use all the forum's BBCodes. Talking about BBCodes, here is a list of BBCodes that you can use, with the exception of attachments. Remember that you can concatenate most BBCodes. If you want to add a clickable image to a post, a thread, or even your signature, you can do something like this: [url=https://google.com/][img]https://static.cracked.to/images/logo/logo.png[/img][/url] ─ The Quote button allows you to multi-reply. You can select all posts that you want to reply to by clicking the Quote button, then head over to the bottom right of the thread and click on to load the posts in the New Reply editor. ─ The Report button allows you to report a post if its content is violating the forum rules. Once you click on it, a small window will pop up asking for the report reason. If you can't find the report reason in the drop-down menu, simply click on Other and type your reason there. Staff handles all reports on a daily basis, but depending on the influx of reports it may take some time before your report is looked into. Be patient, don't send a private message to any Staff member. ─ In order to Link, or Direct-Link a post, you have to click on the post number and copy the URL from your browser. You can find such number on the top right corner of each post (i.e., #1, #2, #64, #491). Direct-linking a post can be extremely useful when you want to get someone's attention on a specific post without having to tell them which page the post is. THREADS With the exceptions of read-only subforums like Announcements, restricted categories like Premium, and the Sellers Marketplace subforum, the Member usergroup (default usergroups everyone has) allows you to submit a thread anywhere on the forum. For this reason, you should take some time to familiarize yourself with the forum's structure. The New Thread button, on the top right corner of every subforum. (July 2021) As mentioned before, Cracked.to runs on MyBB, and the codes you use to format (add effects, images, or videos) your posts and threads are called BBCodes. If you have missed it, you can find an extensive list of BBCodes in the previous chapter about interacting with posts. When it comes to threads, besides choosing the correct subforum, you should make sure that your thread's title matches the thread's content; using a misleading title can result in a warning. The content of your thread should be easily readable. Avoid using enormous text sizes or images. This isn't a written rule, it's common sense: if we all started using giant fonts and bright colors, it would be a disaster for threads' readability. THE SHOUTBOX The shoutbox, or chatbox, is Cracked's own public instant-messaging system. Anyone can read messages sent through the shoutbox, except for whispers, but you need an account to send a message. New messages appear on top of the shoutbox, meaning that if you scroll down, you'll be able to read old messages. However, be aware that even the shoutbox has its own set of rules that you can find at Help Documents -> Shoutbox rules, and if you break a rule, you might get temporarily muted. Cracked.to's shoutbox. (July 2021) There are two different chats within the shoutbox: General and Marketplace. ─ The General chat is the equivalent of a regular chatbox; it allows you to discuss with anyone about anything, but you are not allowed to sell, buy or advertise any product, service or website. You can still ask questions about a specific product, or someone's marketplace activity. ─ The Marketplace chat is where you can find anything marketplace-related, like WTB (Want To Buy) and WTS (Want To Sell) offers, occasionally also called LF (Looking For). You should not use the Marketplace chat for casual chit-chats. Despite not being able to submit a thread to sell in the Seller's Marketplace, anyone with the Member usergroup can still advertise in the Marketplace chat. Anyone who sends a message in the Marketplace chat, regardless of their usergroup, will have to wait a set period of time before being able to send a message again. This is to allow everyone to equally advertise their products. Users' profile pictures are displayed immediately on the left of their names. Users' names have a different color and effect based on the usergroup they're currently wearing (i.e., Contributors' names are yellow, Premiums' names are cyan). If you click on (cracked.to/shoutbox.php), you'll open the shoutbox in a new tab; while if you click on Banlist, a window will pop up showing a list of people who are banned from the shoutbox and some details about their ban, like the ban reason, the ban expiration date and the ban enforcer. There are some settings that you can tweak by clicking on Settings. If you want to see who has sent the most messages, click on Leaderboard. A notification is sent to the shoutbox every time a user creates a new thread. An audio notification is played when you mention someone. To quickly mention someone, click on their profile picture within the shoutbox; alternatively, you can write their name next to the @ symbol (i.e., @John). A whisper is a message that only you and your whisper recipient can read. To quickly whisper to someone, right-click on their name within the shoutbox and click the icon; alternatively, you can whisper by typing: /w @John: your message here If you miss the / or the : characters, your message will be sent to the General chat like any regular message. Make sure you're whispering correctly before sending any sensitive information (or just use Private Messages instead). USERS' PROFILES Because every username is unique, you can view anyone's profile either by clicking on their name or by typing their name next to cracked.to/ (i.e., cracked.to/Mastiff). Seven buttons on top of everyone's profile. (July 2021) ─ The Bet and Donate Credits buttons are two features related to Credits, which will be introduced in the next chapter. If you bet with someone, you either win or lose the credits that you've bet with that user. If you donate your credits, you remove credits from your profile to give them to someone else. ─ If you Mute someone, their messages won't appear in the shoutbox. ─ If you Report someone, you can select a report reason (just like posts). ─ If you click on Send Message, you'll be able to send a Private Message. A Private Message is formatted like posts; you can use the same BBCodes. Private Messages are only accessible to you and the other recipient(s): if you leak the link of a Private Message, none will be able to read it anyway. ─ If you Add Reputation, you can give someone positive or negative reputation points. Each user has an individual reputation counter, and the amount of reputation you can give to someone depends on your usergroup (i.e., Supreme users can give more reputation than Premium users). You should always have a proper reason to give reputation to someone. ─ If you Follow someone, your name will be added to their followers list (visible on their profile) and you will receive a notification whenever they submit a post or a thread. It's the best way to keep up with your friends' activities. CREDITS Credits are Cracked's own currency: 1 EUR equals 1000 credits. You can get to the credits page by clicking the forth icon on the header menu. The Header Menu, visible on top of every page. (July 2021) ─ You can purchase credits by clicking on Buy Credits. If you want to purchase credits for a cheaper price, you can use the Credits Trading subforum to find credit offers for gift cards, cryptocurrencies, and real world currencies. ─ You can donate your credits by clicking on Donate. ─ You can change your thread's title style by clicking on Style Thread. This feature is mainly used for marketplace-related threads. It gives your thread an unique style that helps getting more exposure from potential buyers browsing the marketplace, thanks to bright colors and other graphic effects. ─ You can pin your thread on top of a subforum by clicking on Sticky Thread. This feature is mainly used for marketplace-related threads. Having your thread at the top of a subforum makes it more visible to potential buyers. ─ You can purchase a cosmetic item that will appear on the right of your username by clicking on Buy Username Item. All items, except for the items listed in the Special Items category, are purely cosmetic. Special Items allow you to give more reputation points. ─ You can purchase some awards by clicking on Buy Awards. These awards will appear below your profile statistics every time you submit a post or a thread. You can hide an award, or change the awards order, from the User Control Panel. ─ You can automatically bump your thread by clicking on Autobump. By purchasing the autobump feature, you don't need to manually reply to your thread with “bump” to bring it back to the first page. Autobumping helps you save time, and at the same time it gives your thread more exposure. ─ You can purchase awards listed by other members by clicking on Awards Marketplace. Members can put their awards up for sale, and you can use credits to purchase such awards. The purchase process is completely automated, so there is no chance of you getting scammed, or getting the wrong award. ─ You can purchase a member's signature space, or you can put your own signature up for sale, by clicking on Signature Services. Every purchase has an expiration date, so when you purchase someone's signature space, you are actually renting it. One can sell up to two slots of their signature: Top and Bottom. ─ You can gamble your credits against a member (1 vs 1) or the system (Rock, Paper, Scissors) by clicking Gambling. Be aware that you will not get a refund if you gamble your credits and you lose them. GLOSSARY During your stay on Cracked, you will surely come across terms, acronyms, or abbreviations you are unfamiliar with. For this reason, this guide presents a list of frequently used expressions. UHQ/HQ/LQ: Respectively, Ultra High Quality, High Quality, and Low Quality. Standard terms used to describe the quality of something or someone. Example: "HQ tool, works smoothly.", "He's been spamming LQ threads all day." WHITE/GRAY: Terms used to refer to users who don't have an upgrade. Example: "There are so many whites in the shoutbox today." CHECKER/KEKER: A checker is a cracking tool. It's a tool that allows you to perform credential stuffing attacks against one or more online services. A keker is just a less common, funnier way to call a checker. Example: "I bought his Netflix checker.", "I'm releasing a Spotify keker today." CPM: It means Checks Per Minute. It's used when referring to cracking tools' speed. The higher CPM, the faster login credentials are tested against a website. Example: "This Twitch checker can reach 5000 CPM", "On average, 2000-4000 CPM." AIO: It means All In One. An AIO is a cracking tool that can perform credential stuffing attacks against a multitude of different websites. A regular cracking tool usually targets from one to a few websites; an AIO can support even a hundred. In addition, an AIO usually has a module for each target, a specific piece of code designed to perform credential stuffing attacks on that particular service. Example: "I bought his AIO, but the Crunchyroll module is kinda slow." DUMP: A dump usually refers to a database dump. A dumped database is a database that has been stolen. Dumping a database requires an attacker to successfully get around the database's security measures to export the database entries. A dump can happen because of vulnerabilities like SQL Injections. Example: "He decided to shut down his service when he found out the database got dumped." INJECTABLES: Injectables are sites vulnerable to SQL Injections attacks. Example: "I'm selling a list of 5000 injectables.", "He leaked 200 injectables." CAPTURE: Capture is a feature that some cracking tools have to scrape information from successfully brute-forced accounts. Data captured by cracking tools can include details such as the account holder's name, address, subscription type, subscription expiration date, or devices linked to the account. Example: "+200 Cracked Spotify accounts with capture", "This tool captures the owner's address." WTB/WTS: Want To Buy and Want To Sell, marketplace-related tags. Example: "WTS 174 OnlyFans accounts with capture", "WTB JetBrains 1 year keys." SE: Social Engineering is the manipulation of people into performing actions or divulging confidential information. It's often used when exploiting companies' refund policies or support services to get a product twice illegitimately or get a refund, despite not having any real issue with the original product purchased. Example: "I'm selling a SE method for AirPods.", "I managed to SE an iPhone." REFUND: A refund is a fraud where you trick a company into either returning your money or replacing your product (while keeping your item). Refunders are people who know the companies policies that allow you to get a refund safely, so they do it as a service, usually by interacting with the company on your behalf. Example: "I'm looking for someone to refund my laptop.", "His refunding service is the best." AUTOPILOT: When you can automate something, it's called an autopilot. Example: "I found an autopilot method to make ten dollars a day." SN GEN/CHECKER: A Serial Number generator/checker is a tool that generates and checks the validity of a product's serial number en mass. It's often used in social engineering because if you provide a customer's support service with a valid serial number, it's likely that the company will believe you are the legitimate owner of the product with that specific serial number. Example: "I just coded a Logitech G29 SN gen/checker." PROXYLESS: A proxyless application is an application that can perform credential stuffing without the need to use proxies. Example: "Is anyone selling a proxyless League of Legends checker?" HITS: A hit is a successfully brute-forced account. Example: "I got 250 hits on Scribd.", "Are you selling your Google Play Books hits by any chance?" LOGS: Logs refer to credentials that have been stolen from someone's browser. Logs often come with cookies, as stealers (a type of malware) often target them. Example: "He was trying to sell Yahoo logs.", "I got over 250 PayPal logs with my stealer." OB: It's the abbreviation for Open Bullet, a web testing suite that allows to perform requests towards a target and offers many tools to work with the results. Open Bullet is a widespread tool used for credential stuffing attacks. Example: "Does anyone have the latest version of OB?", "My OB just crashed." CFG: A cfg is a config. Configs are instructions that tools like Open Bullet read to target a website's login form and potentially scrape the account details if the login is successful. Example: "I'm looking to buy a Netflix cfg with capture.", "I'm working on a GitHub config." HITLOGGER: A hitlogger is a config file that silently steals every successful hit and sends it to a remote server where stolen hits are gathered. It's called hitlogger because it logs hits. Example: "He got banned because he tried to sell a Grammarly config with a hitlogger." SECURITY LOCK: A security lock is a ban reason used by the site's Staff when they identify an account whose credentials have been stolen or are at risk. Example: "I got security locked because I got infected with a stealer, and they got my account." MULTI/ALT: Both refer to a multi-account, which isn't allowed on Cracked. Example: "His IP matches with that other account, meaning it's his multi." VC: A vouch copy is a free copy given to someone to prove that a product works. When given a vouch copy, one must provide some helpful information regarding the product or service. Example: "Are you giving away any VC?", "I got a VC, and I'll write my feedback soon." MM: A middleman is a mediator designated to secure a deal. A middleman usually holds the buyer's money, delivers the seller's product to the buyer, and releases the money once the deal is over. Middlemen typically come with a minimal tax. Example: "I'm not selling anything without an MM.", "I can MM your deal for 3%." AUTOBUY: Autobuy is a term that indicates that a seller is using an e-commerce platform that allows buyers to purchase a product without any interaction with the seller. Example: "My shop has an autobuy. You can purchase anything while I'm offline." PP: PayPal, online payments system. Example: "Does your shop accept PP?" VM: Virtual Machine, a software used to create a virtualized environment. Virtual machines are extremely useful when you aren't sure if an executable is safe from malware; a virtual machine prevents the potential malware from infecting your host machine. The most common softwares are VMware and Virtual Box. Example: "I haven't checked this tool, please run it in a VM." RDP: Remote Desktop Protocol, a remote Windows instance. Example: "His RDP service is great, it can reach up to 1Gbps." DM: Direct Message, a private conversation between two users. Example: "Send me a DM and I'll read it later." DC: Discord, a VoIP, instant messaging platform designed for communities. Example: "What's your DC? I'll add you."