Anonymous Hacker Simulator

Anonymous Hacker Simulator: Anonymous Hacker Simulator Walkthrough

Posted on

Welcome to our guide for Anonymous Hacker Simulator! In this article, we will be discussing the various gigs that you can take on in the game. Whether you are just starting out or looking to expand your hacking skills, this walkthrough will provide you with all the information you need to navigate through the game successfully. So, let’s dive in and discover the different opportunities that await in Anonymous Hacker Simulator!

Introduction

This is a work in progress (and my first guide!). I had a lot of fun playing Anonymous Hacker Simulator, but most guides were videos so I hope this is more easily accessible. As a disclaimer, I don’t know anything about cyber security or hacking so this is all from within the context of the game.

Quick Command Lookup

You have a few pieces of data and not sure what to do with it? Try this quick lookup below. If you want more information, try the more detailed Terminal Commands section

Nothing
Nothing Else
netdiscover + hydra (-u admin / root / host name from netdiscover): scan for IPs
airodump + airorun + airoplay + airocrack: access wifi

IP Address
Nothing Else
nmap: identify exploit
hydra (-u admin or root): unauthorized access
intruder (-payload 0, 1, 2, or 3): brute force access to allow use of an exploit (nmap will usually tell you when to use intruder)
flood + hping: DDoS then check server state
Email Address
repeater: force a password reset
URL
intercepter + sqlmap + sqldump: intercept data between the IP and the url
Exploit
use: use an exploit to gain access to the IP

Email Address
Nothing Else
Send an email with Credential_harvester: phish for a password
harvester: scan the web
IP Address
repeater: force a password reset

URLs
Nothing Else
openvas: look for vulnerabilities
wget: download files
harvester: scan the web
IP Address
intercepter + sqlmap + sqldump: intercept data between the IP and the url

Miscellaneous
Files
send: send to domain
wget: look for vulnerabilities
harvester: scan the web
hash2john + crack2john: generate a password for a locked file
upload: upload a file. Select the file in the target folder system. In terminal, upload without the filename
Text / Codes / People / Etc.
harvester: scan the web
Search Tweeter and the Archive
Cookie
connect: access a host (will also show the IP during the command execution)
harvester: scan the web
MAC
inject: customize malware for deployment (remember to cook first!). Check malware section for specific purposes

Walkthrough

This walkthrough goes through the gigs / achievements as they become available. It will also highlight key information versus step-by-step.

There are three different paths based on your moral alignment (found in Underground Web -> Alert Status -> Moral Alignment):

  • Positive (Green): White Hat
  • Neutral (Yellow): Grey Hat
  • Negative (Red): Black Hat

The optional choices (e.g., whether to upload a virus or send a file to LAPD vs the syndicate) will affect whether you align positively or negatively.

For common command groupings, they will be represented by the following:

  • nmap / use (exploit, version, ip): nmap + use
  • airo- (bssid, channel): airodump + airorun + airoplay + airocrack
  • hash- (locked file name): hash2john + crack2john
  • net / hydra (username, ip): netdiscover + hydra
  • intercept / sql (ip, url): intercepter + sqlmap + sqldump
  • intruder* (exploit, verison, ip, payload): nmap + intruder + use
  • honey- (port, ip): honeybuild + honeyd

Main Gig: Trial by Wi-Fi (WiFi)

This gig has straightforward directions

Grants Achievement: WiFi


Achievement: Attack on Neighbour

After infiltrating the wi-fi, purchase Nmap and Metasploit for this optional achievement.

Grants Achievement: Attack on Neighbour

  1. net / hydra (admin, 192.168.0.50)
  2. Account file: xbark_saved.txt
  3. Grants Achievement: Attack on Neighbour

Note: Selling this account causes negative alignment

Side Gig: Operation Soundwave (Optional: Party Crasher)

Optional Achievement: Party Crasher

**DO NOT UPLOAD dj_animals.mp3 UNTIL YOU COMPLETE ACHIEVEMENT: PARTY CRASHER**

  1. nmap / use (FTP_Bounce_Attack, 1.0.0, 45.30.76.43)
  2. Account file: spotifly.txt
  3. CC file: cc.txt
Achievement: Party Crasher
  1. Find S400 on the nearby power switch
  2. inject -s S400 -t CircuitControl.exe
  3. upload CircuitControl_Injected_S400.exe
  4. Grants Achievement: Party Crasher

Note: Turning off the power causes negative alignment

Side Gig: Grades of Chaos (Flag: University Shutdown)

Flags Achievement: University Shutdown

Step
Relevant Information
Tweeter: Austin University
James Bellingham
[email protected]
Email: [email protected] + Data Manipulation.js
attachment_austin_grades_1.txt
attachment_austin_grades_2.txt
send
attachment_austin_grades_1.txt = positive alignment
attachment_austin_grades_2.txt = Flags Achievement: University Shutdown + negative alignment

Side Gig: Award Expose

Step
Relevant Information
harvester Etienne_Dubois
17.35.67.43
nmap / use (EternalBlue, 1.0.1, 17.35.67.43)
Top10_Players_Ranking.txt
Account file: Credit_Card.txt

Side Gig: CPU Shutdown

Step
Relevant Information
harvester Randy_Port
harvester Patrick_Simons
SaturnLaptop: 10.37.130.72
nmap / use (DNS_Query, 1.0.1, 10.37.130.72)
Intols_Announcement_18thGen.txt

Side Gig: PhishLink Extraction

Step
Relevant Information
Email TomTheTatDude@gomail(.)com + Credential Harvester.html
TomTheTatDude@gomail(.)com
tommyidiot
75.30.40.35
Access Email: TomTheTatDude@gomail(.)com/tommyidiot
Account info: TomTheTatDude/3uiejdv

Covert Gig: The Emerald Tower (The Emerald Tower & Flag: University Shutdown)

Purchasing Credential Harvester allows you to trigger this questline

Flags Achievement: University Shutdown
Grants Achievement: The Emerald Tower

Step
Relevant Information
Email [email protected] + Credential Harvester.html
Account info: james@austin/shoppingmaster
sell james@austin/shoppingmaster
Triggers Covert Gig: The Emerald Tower
hash- (logged_file.zip)
URL for Shipment ID: 750
wget Shipment ID: 750
Flight_750.pdf
send
DEA.gov = Flags Achievement: University Shutdown + negative alignment
Syndicate1.ms = negative alignment
Grants Achievement: The Emerald Tower

Main Gig: Unveiling the Veil (Unveiling the Veil)

Grants Achievement: Unveiling the Veil

Step
Relevant Information
Tweeter: Edward Oliver
CryptoCon
harvester CryptoCon
52.100.37.40
nmap / use (RDP_Bruteforce , 1.0.1, 52.100.37.40)
EmailTemplate2.html
send
Grants Achievement: Unveiling the Veil

Main Gig: Cyber Espionage (Cyber Espionage)

Grants Achievement: Cyber Espionage

Step
Relevant Information
harvester IMB_PowerEdge_R40.pdf
MAC: 0E:3B:E5:34:A0:30
inject -s 0E:3B:E5:34:A0:30 -t ElecSurge.exe
ElecSurge_Injected_0E:3B:.exe
nmap / use (SSL/TLS, 1.0.0, 10.75.38.52)
upload ElecSurge_Injected_0E:3B:.exe
Grants Achievement: Cyber Espionage

Side Gig: Secret Obliteration

Step
Relevant Information
intruder* (EternalBlue, 1.0.3, 40.34.100.75, 0)
email.txt
Optional: send Vanguard_x1.txt
Negative alignment

Side Gig: Disgrace Unleashed (Optional: Sexy Elan Mask)

Optional Achievement: Sexy Elan Mask

Step
Relevant Information
Email rd@tesla(.)com +Credential Harvester.html
rd@telsa(.)com
EWTGERHB$#
/20 TCP/FTP
Access Email: rd@telsa(.)com
kingx_elanmask@telsa(.)com
Email kingx_elanmask@telsa(.)com + Credential Harvester.html
kingx_elanmask@telsa(.)com
idiotusers
45.10.30.70/445 TCP/SMB
Access Email: kingx_elanmask@telsa(.)com
COOKIE: aG4gRG9lIiwiaWF0Ijox jM5MDIyfQ.SflKxwRJSM eKKF2QT4fwpMeJf3POkJV_adQssw
connect above cookie
SexyElanMask.jpg
send
tattlermagazinezone(.)com = Achievement: Sexy Elan Mask + negative alignment
elanmask(.)com = positive alignment + decrease in heat

Main Gig: Shadows of Power (Shadows of Power)

Grants Achievement: Shadows of Power
Grants Achievement: Medium-Sized Apartment

Step
Relevant Information
hash- (Drifter.zip)
George_Wesley
harvester George_Wesley
35.67.34.73
nmap / use (EternalBlue, 1.0.2, 35.67.34.73)
CC file: cc.txt
Grants Achievement: Shadows of Power
Grants Achievement: Medium-Sized Apartment

Side Gig: A Damsel in Distress (A Damsel in Distress & Trigger: The American Psycho)

Triggers Covert Gig: The American Psycho
Grants Achievement: A Damsel in Distress

Step
Relevant Information
Tweeter: Jessica Davis
Max Austin
harvester Max_Austin
Paul_Allen
Patrick_Bateman
Jakub_Novak
Tweeter: Patrick Bateman
Triggers Covert Gig: The American Psycho
harvester Jakub_Novak
200.220.75.20
nmap / use (SSH_Bruteforce , 1.0.0, 200.220.75.20)
recordingsaudio.wav
CC file: Money_Transfer_Log.txt
Account file: Assets_Transfer_Log.txt
Grants Achievement: A Damsel in Distress

Covert Gig: The American Psycho (The American Psycho)

Grants Achievement: The American Psycho

Step
Relevant Information
Tweeter: Patrick Bateman
BarneysNewYork
harvester BarneysNewYork
54.35.67.30
nmap / use (SSH_Bruteforce, 1.0.0, 54.35.67.30)
paulallen.txt
Account file: extrainfo.txt
send paulallen.txt
Grants Achievement: The American Psycho

Side Gig: No Maidens? (No Maidens?)

Grants Achievement: No Maidens?

Step
Relevant Information
harvester David_Wilson
davidw@gomail(.)com
Email davidw@gomail(.)com + Credential Harvester.html
davidw@gomail(.)com
davidw_sports_000
Access Email: davidw@gomail(.)com + Credential Harvester.html
10.57.30.75
Account info: david_w
nmap / use (EternalBlue, 1.0.0, 10.57.30.75)
Account file: netflings_acc.txt
upload
Grants Achievement: No Maidens?

Side Gig: Austin Again (Flag: University Shutdown)

Flags University Shutdown Achievement

Step
Relevant Information
Tweeter: Austin University
Thomas_Johns
harvester Thomas_Johns
Cookie: se3RhSWEs0
connect se3RhSWEs0
upload
austin_exam_1.txt = positive alignment
austin_exam_2.txt = Flags Achievement: University Shutdown

Main Gig: Red Orbit Revelation

Step
Relevant Information
harvester Red_Orbit
Owen_Stewart
harvester Owen_Stewart
85.35.67.30
Tweeter: Owen Stewart
walmartyr(.)com
intercept / sql (85.35.67.30, walmartyr(.)com)
Cookie: a35fvcde3bware2f0d2c0b0
connect a35fvcde3bware2f0d2c0b0
new_account.txt

Main Gig: Sabotage in the Stars (Sabotage in the Stars)

Grants Achievement: Sabotage in the Stars

  1. Once at the facility, turn left and up the ramp. Try to access the control room
  2. Turn around and head across the bridge to the room
  3. Turn left and grab the credentials from the table in front of the bathroom
  4. Turn left and go through the small door (follow the way mark to the database room)
Step
Relevant Information
Access Terminal
Employee Name: Jeremy Smith
Employee ID: 50000
MAC: 4A:30:0A:5E:03:00
IP: 45.30.50.100
Access Terminal: Restart System
Takes down firewall
nmap / use (Kerberos_Authentication, 1.1.0, 45.30.50.100)
inject -s 4A:30:0A:5E:03:00 -t NetStorm.exe
upload netstorm_Injected_4A:30:.exe
Account file: rocket_materials.txt
Access Terminal: Change Role to Administrator
Privileges Level 2
Access Computer
Change to State 1 or State 2
Grants Achievement: Sabotage in the Stars

Main Gig: SerpentNexus Deep Dive

Step
Relevant Information
Tweeter: SerpentNexus
OpenGPT
Tweeter: OpenGPT
Jonathan_Miller
harvester Jonathan_Miller
43.35.43.47
jonathan@concepts(.)ai
repeater -t jonathan@concepts(.)ai -h 43.35.43.47
Password: vS003
Access Email: jonathan@concepts(.)ai/vS003
rm@serpentnexus(.)com
Password: Transaction Stamp carried by George_Wesley through drifter forum
Access Email: rm@serpentnexus(.)com/RGVS3700XXXX
drifter.zip -> George_Wesley -> transaction stamp

Main Gig: Pentagon Archive Heist (Pentagon Archive Heist)

Grants Achievement: Pentagon Archive Heist

Step
Relevant Information
openvas thewhs.gov
intercept / sql (50.74.30.0, thewhs.gov)
X-Requested =XMLHttpRequest
If-None-Match=W/”45220″
Content-Disposition=archivebackup
Language: en-US
thewhs(.)gov/download/ Archives_00 .zip? Content-Disposition=TEMP &Language=TEMP &X-Requested=TEMP &If-None-Match=W/”TEMP”
wgetthewhs(.)gov/download/ Archives_00 .zip? Content-Disposition=archivebackup &Language=en-US &X-Requested=XMLHttpRequest &If-None-Match=W/”45220″
Archive (icon on desktop
Grants Achievement: Pentagon Archive Heist

Main Gig: Decoy Deception (Decoy Deception)

Grants Achievement: Decoy Deception

Side Gig: S-teamy Heist (S-teamy Heist)

Grants Achievement: S-teamy Heist

Step
Relevant Information
Read S-teamyservices.xml
openvas s-teamyexchange(.)com
wget s-teamyexchange(.)com/server/metadata/metadata.xml
s-teamyexchange_metadata.xml
Read s-teamyexchange_metadata.xml
download s-teamypowered/host/server/s-teamybackdoor.cpp
50.100.50.30
wget s-teamypowered/host/server/s-teamybackdoor.cpp
s-teamybackdoor.cpp
nmap / use (HTTP_DoS, 1.0.0, 50.100.50.30)
s-teamyexchange_metadata.xml
upload s-teamyexchange_metadata.xml
Grants Achievement: S-teamy Heist

Main Gig: Declassified Pursuit (Declassified Pursuit)

Grants Achievement: Declassified Pursuit

Step
Relevant Information
Archive: Edward Oliver
Ghostwalker
Archive: Ghostwalker
George Wesley (alias Patrick_Bale)
harvester Patrick_Bale
30.53.45.75
nmap 30.53.45.75
Grants Achievement: Declassified Pursuit

Achievement: Silence the Noise

Grants Achievement: Silence the Noise

Step
Relevant Information
net/hydra (Cisno, 35.30.40.150)
regarding_that_idiot.txt
Read regarding_that_idiot.txt
Simon Chalmers
Tweeter: Simon Chalmers
Jason Henry
Archive: Jason Henry
17.53.40.35
Send updates to moonnews(.)com
intruder* (HTTP_DoS, 1.0.2, 17.53.40.35, 3)
jason_target.txt
Account file: things.txt
send jason_target.txt to moonnews(.)com
Grants Achievement: Silence the Noise + positive alignment

Side Gig: Trivadontgo (Trividontgo & Trigger: Ghost in the Mainframe)

Triggers Covert Gig: Ghost in the Mainframe
Grants Achievement: Trivadontgo

**DO NOT LEAVE THE HOTEL UNTIL YOU TRIGGER COVERT GIG: GHOST IN THE MAINFRAME**

Step
Relevant Information
net / hydra (admin, 192.168.0.1)
Password: 00EESS0#
MAC: 01:E0:A1:B0:3E:50
morons_in_the_hotel.txt
hydra -u root -smb 192.168.0.50
CC file: transfer.txt
Access Terminal: 00EESS0#
Lock Rooms
upload LoudMusic.wav
Grants Achievement: Trivadontgo

Trigger: Covert Gig: Ghost in the Mainframe

Step
Relevant Information
Read morons_in_the_hotel.txt
R3-EEERR0000
harvester R3-EEERR0000
Robert Lucas
Archive: Robert Lucas
VXXX0003
Access Terminal: Override Password: VXXX0003
inject -s 01:E0:A1:B0:3E:50 -t NetStorm.exe
upload netstorm_Injected_01:E0:.exe
Access Terminal
Unlock Room 8
Investigate: Room 8
Triggers Covert Gig: Ghost in the Mainframe

Covert Gig: Ghost in the Mainframe (Ghost in the Mainframe)

**To trigger, you must investigate Room 8 in Side Gig: Trivadontgo before leaving the hotel**

Triggers Covert Gig: The Golden Serpent
Grants Achievement: Ghost in the Mainframe

Step
Relevant Information
harvester Ronald_East
The Golden Serpent
Archive: The Golden Serpent
BeechcraftX100Golden
harvester BeechcraftX100Golden
34.53.63.46
nmap / use (Kerberos_Authentication, 1.1.0, 34.53.63.46)
registrationinfo.txt
CC File: ccinfo.txt
Triggers Covert Gig: The Golden Serpent
Grants Achievement: Ghost in the Mainframe

Covert Gig: The Golden Serpent (The Golden Serpent)

Grants Achievement: The Golden Serpent

Step
Relevant Information
Read registrationinfo.txt
planes(.)com
4.30.35.30
intercept / sql (4.30.35.30, planes(.)com)
theloneserpent@gomail(.)com
repeater -t theloneserpent@gomail(.)com -h 4.30.35.30
Password: ssss0000
Access Email: theloneserpent@gomail(.)com/ssss0000
Password: ssss0000
send
lapd.gov = positive alignment
Grants Achievement: The Golden Serpent

Side Gig: Blue Mirage (Trigger: Samsingalong Trouble)

Optional triggers Covert Gig: Samsingalong Trouble

Step
Relevant Information
Tweeter: James Rogers
jamesrogers@gomail(.)com
Email jamesrogers@gomail(.)com + Credential Harvester.html
jamesrogers@gomail(.)com
qwerty1000
Access Email: jamesrogers@gomail(.)com/qwerty1000
53.67.30.40
nmap / use (FTP_Bounce_Attack, 1.0.0, 53.67.30.40)
Optional: upload Corruptor.exe.exe = Triggers Covert Gig: Samsingalong Trouble + negative alignment

Covert Gig: Samsingalong Trouble (Samsingalong Trouble)

Grants Achievement: Samsingalong Trouble

Step
Relevant Information
Tweeter: Samsingalong
Cloud_100_Samsingalong
harvester Cloud_100_Samsingalong
10.3.70.0/url?sa=t&rct=j&q=&esrc=s &source=web&cd=&ved=EV003WE &url=%2F%10.3.70.0/samsingalong.zip&usg=WVR3a
wget 10.3.70.0/url?sa=t&rct=j&q=&esrc=s &source=web&cd=&ved=EV003WE &url=%2F%10.3.70.0/samsingalong.zip&usg=WVR3a
samsingalong.zip
hash- samsingalong.zip
Remote Connect: 00xxsaGrdsowkw0000
ID: 30:A0:B0:E0:0B:A0
inject -s 30:A0:B0:E0:0B:A0 -t WannaCry.exe
connect 00xxsaGrdsowkw0000
uploadwannacry_Injected_30:A0:.exe
Grants Achievement: Samsingalong Trouble + negative alignment

Main Gig: Surveillance Breach (Surveillance Breach & Law and Order -OR- Caught in the Shadows & Trigger: Cheating Scandal)

Triggers Covert Gig: Cheating Scandal
Grants Achievement: Law and Order -OR- Caught in the Shadows
Grants Achievement: Surveillance Breach

**DO NOT LEAVE THE PREMISES BEFORE TRIGGERING COVERT GIG: CHEATING SCANDAL AND COMPLETING ACHIEVEMENT: LAW AND ORDER -OR- CAUGHT IN THE SHADOWS**

Step
Relevant Information
airo- (3B:0A:E0:B5:30:0E, 0)
net / hydra (admin, 192.168.0.10)
Account file: server_request.php
net / hydra (root, 192.168.0.5)
Account file: not_a_cop.txt
Flags Achievement: Law and Order -OR- Caught in the Shadows
inject -s 3B:0A:E0:B5:30:0E -t CircuitControl.exe
Find IP on terminal and restart to take down firewall
50.53.175.150
upload CircuitControl_Injected_3B:0A:.exe
Flags Covert Gig: Cheating Scandal
upload Zeus.exe
Grants Achievement: Surveillance Breach

Achievement: Law and Order -OR- Caught in the Shadows
Step
Relevant Information
Read not_a_cop.txt
not_nokyo@gomail(.)com/qwe1000
Access Email: not_nokyo@gomail(.)com/qwe1000
syndicate1_police_uniform.txt
send
lapd.gov = Achievement: Law and Order + positive alignment
syndicate1.ms = Achievement: Caught in the Shadows + negative alignment

Trigger Covert Gig: Cheating Scandal
  1. Inject the Protheus – Guardian 0 MAC ID into Circuit Control to trigger fire alarm (above Flag: Cheating Scandal)
    [*}Go to the dining room that was previously guarded by a staff member
  2. Take the card on the center table to trigger Covert Gig: Cheating Scandal

Covert Gig: Cheating Scandal (Cheating Scandal)

Grants Achievement: Cheating Scandal

**To trigger, you must have set off the fire alarm and grabbed the card in Main Gig: Surveillance Breach before leaving the party**

Step
Relevant Information
Read george_logged.txt
randy.s@alienoverly(.)com
alienoverly(.)com
harvester alienoverly(.)com
r.s 70.35.43.75
intercept / sql (70.35.43.75, alienoverly.()com)
randy.s@alienoverly(.)com / SVVSS000
Access Email: randy.s@alienoverly(.)com / SVVSS000
Divorce_Settlement.txt
Bank Account Number: XRVSX100
CC info: 456347563487536 /10/23 / 573
send
ElizabethAndrews(.)com = Achievement: Cheating Scandal + positive alignment
leaks(.)com = Achievement: Cheating Scandal + negative alignment

Main Gig: Honeypot (Honeypot & Basement Bust -OR- Syndicate Showdown)

Grants Achievement: Basement Bust -OR- Syndicate Showdown
Grants Achievement: Honeypot

**DO NOT FINISH UPLOADING THE HONEYPOT BEFORE COMPLETING ACHIEVEMENT: BASEMENT BUST -OR- SYNDICATE SHOWDOWN**

Step
Relevant Information
Read Monitored_Data_Birthday_Party.txt
NetworkAlphaX0
Password: S#&&^
Archive: NetworkAlphaX0
James Earl
harvester James_Earl
S500000X0
Archive: S500000X0
Cookie: 00000VERsiweiwiisss00
connect 00000VERsiweiwiisss00
Completed_Operations.txt
paris-carrier@gomail(.)com
Flags Achievement: Basement Bust -OR- Syndicate Showdown – EL_1000E
Access Email: paris-carrier@gomail(.)com/S#&&^
Channel Name: R&R
Channel Host: 75.30.40.60
nmap / use (FTP_Bounce_Attack, 1.0.1, 75.30.40.60)
honey- (20, 75.30.40.60)
Grants Achievement: Honeypot

Achievement: Basement Bust -OR- Syndicate Showdown
harvester EL_1000E
Arnold Jesse
Tweeter: Arnold Jesse
InTheFlameWeGo
Tweeter: InTheFlameWeGo
30.76.93.43
Master_Cocaine_XXX
lapd.gov
harvester Master_Cocaine_XXX
MAC: 30:0A:0B:E5:00:B0
inject -s 30:0A:0B:E5:00:B0 -t NetStorm.exe
nmap / use (FTP_Bounce_Attack, 1.0.0, 30.76.93.43)
upload netstorm_Injected_30:0A:.exe
Shipped_Cocaine_Beverly_Hills.csv
send
lapd.gov = Achievement: Basement Bust + positive alignment
syndicate1.ms = Achievement: Syndicate Showdown + negative alignment

Main Gig: Launch Debacle Investigation (Launch Debacle Investigation)

Grants Achievement: Launch Debacle Investigation

Step
Relevant Information
Tweeter: Edward East
Alexander_Roberts
Tweeter: Alexander_Roberts
BladeWhisper
harvester BladeWhisper
X&Xtranscript
Archive: X&Xtranscript
[email protected]/100S##$$##%
Access Email: [email protected]/100S##$$##%
Key_Personnel.txt
Grants Achievement: Launch Debacle Investigation

Main Gig: Exposing the Serpent’s Den (Exposing the Serpent’s Den)

Grants Achievement: Exposing the Serpent’s Den

Step
Relevant Information
Read Key_Personnel.txt
Olivia Hawthorne
James Edwards
Tweeter: Olivia Hawthorne
[email protected]
Tweeter: James Edwards
Dark_DOSE_MASTERS
harvester Dark_DOSE_MASTERS
S_000WE3040503
Archive: S_000WE3040503
logged_file_password_olivia.txt
DigitalF0rtress
Access Email: [email protected]/DigitalF0rtress
court_statment.pdf
Account info: 4576436438753673 / 10/23 / 345
send
Grants Achievement: Exposing the Serpent’s Den

Main Gig: Island Heist (Island Heist & Sports Car)

Grants Achievement: Island Heist
GrantsAchievement: Sports Car

Step
Relevant Information
Read: drifter.zip
Oliver Smith
S20XRQ
Archive: Oliver Smith
46.36.74.38
R_E_I_0_0_1_X
William_Jones
Tweeter: William_Jones
GeorgeW@swillow(.)com
Tweeter: William_Jones
GeorgeW@swillow(.)com
repeater -t GeorgeW@swillow(.)com -h 46.36.74.38
Password: bot_service_george_w
Access Email: GeorgeW@swillow(.)com / bot_service_george_w
https :/ /www(.)swillowrealestate(.)com/ properties/commercial/prime/ GEORGE_REAL_ESTATE.php
wget https :/ /www(.)swillowrealestate(.)com/ properties/commercial/prime/ GEORGE_REAL_ESTATE.php
GEORGE_REAL_ESTATE.php
Access GEORGE_REAL_ESTATE.php: S20XRQ / R_E_I_0_0_1_X
Grants Achievement: Island Heist
Access GEORGE_REAL_ESTATE.php: 10EW0S30XR
Grants Achievement: Sports Car

Achievement: Exec Expose

Available after luxury villa purchase
Grants Achievement: Exec Expose

Step
Relevant Information
net / hydra (root, 192.168.0.1)
visitor.txt
Read visitor.txt
The_Missing_100
lapd.gov
Archive The_Missing_100
The_Missing_100_Archive.txt
send
Grants Achievement: Exec Expose

Main Gig: Cyber Mayhem (Cyber Mayhem)

Grants Achievement: Cyber Mayhem

Step
Relevant Information
Read: GEORGE_REAL_ESTATE.php
10.50.30.150
nmap / use (BadLock, 1.1.1, 10.50.30.150)
C_O_0_10.txt
Archive: C_O_0_10.txt
Server name: Company_Overwatch_01
Server cookie: GGHWRERY_300_VSFKETESSVVE30
connect GGHWRERY_300_VSFKETESSVVE30
Host: 10.50.30.170
Mac: 1A:30:B0:3E:5B:0E
inject -s 1A:30:B0:3E:5B:0E -t NetStorm.exe
upload netstorm_Injected_1A:30:.exe
networks_data_flow.txt
Tweeter: Edward Oliver
#GR #AN #BO #RO #UG #H-
Read: networks_data_flow.txt
43.73.45.30
nmap / use (SSH_Bruteforce, 1.0.1, 43.73.45.30)
C_O_0_10.txt
Delete redirect_traffic.py
Grants Achievement: Cyber Mayhem

Side Gig: Redefining Reality A (Flag: Redefining Reality)

Flags Achievement: Redefining Reality

Step
Relevant Information
Tweeter: Fiddle Dexterity
36.40.30.43
Tweeter: Chuck Schwabble Trading
Jeremy Williams
harvester Jeremy_Williams
jeremy_muffin@muffinstanley(.)com
Email jeremy_muffin@muffinstanley(.)com + Credential Harvester.html
jeremy_muffin@muffinstanley(.)com
qw_we_rt_y0
45.36.63.43/20 TCP/FTP
Account info: jeremy_muffin/masterdriver
nmap / use (FTP_Bounce_Attack, 1.0.1, 45.36.63.43)
jeremy_muffin@muffinstanley(.)com
Use Eclipse to leave a backdoor
Access Email: jeremy_muffin@muffinstanley(.)com / qw_we_rt_y0
45.36.63.43
Send email
Flags Achievement: Redefining Reality

Cyber Gig: Digital Footprints (Digital Footprints)

Note: Cyber gigs trigger with high heat. All other gigs halt when cyber gigs are active

Action
Relevant Information
Read digital_footprints.xml
https://torhost.com/registered/network/network_activity_report.txt
wget above URL
IP Address: 10.70.30.50
nmap / use FTP_Bounce_Attack, 1.0.0, 10.70.30.50)
dump_network_log.txt
upload Corruptor.exe.exe
Grants Achievement: Digital Footprints

Cyber Gig: Haunted Past

Step
Relevant Information
Tweeter: DONK MASTER
Cookie: 0dsf@#dsfsdqwq3000
connect 0dsf@#dsfsdqwq3000
Account file & CC file: browser_log_dj.txt

Cyber Gig: Lamas

Step
Relevant Information
Tweeter: Jason Leonardo
CyberLamas
harvester CyberLamas
[email protected]
Email [email protected] + Credential Harvester.html
[email protected]
jasoncyberlama_1X#
Access Email [email protected]/jasoncyberlama_1X#
50.60.30.40
Account info: Jasoncyber/1VXXX_0
intruder* (EternalBlue, 1.0.3, 50.60.30.40, 1)
compiled_log_data.txt
upload Corruptor.exe.exe

Miscellaneous Gigs

Frank Campbell

Available after Main Gig: Declassified Pursuit

Step
Relevant Information
Tweeter: LAPD
Frank Campbell
HCK_CIV_3
Archive: HCK_CIV_3
HAX100CAMP
30.70.50.80
harvester HAX100CAMP
404chan(.)com
intercept / sql (30.70.50.80, 404chan(.)com)
https://404chan/forum/uploads/directory/10X0SV/ important_file_for_archive.txt
wget https://404chan/forum/uploads/directory/10X0SV/ important_file_for_archive.txt
important_file_for_archive.txt
send to lapd.gov
Positive alignment

Accounts for Sale

Gig
Method
File Name
Account Details
Achievement: Attack on Neighbour
hydra -u admin -smb 192.168.0.50
xbark_saved.txt
xwsuperwi/123super
Side Gig: Operation Soundwave
use -x ftp_bounce_attack -version 1.0.0 -ip 45.30.76.43
spotifly.txt
djparty/music
Covert Gig: The Emerald Tower
Email [email protected] with Credential Harvester
email
james@austin/shoppingmaster
Covert Gig: The American Psycho
use -x ssh_bruteforce -version 1.0.0 -ip 54.35.67.30
extrainfo.txt
patrick_b/americanpsycho
Side Gig: No Maidens?
Access Email: davidw@gomail(.)com / davidw_sports_000
use -x EternalBlue-version 1.0.0 -ip 10.57.30.75
netflings_acc.txt
david_w/david000
Main Gig: Sabotage in the Stars
Access Email: davidw@gomail(.)com / davidw_sports_000
use -x Kerberos_Authentication -version 1.1.0 -ip 45.30.50.100
upload NetStorm_Injected_4A:30:.exe
rocket_materials.txt
materials_redorbit/g#@$@#E
Main Gig: Surveillance Breach
hydra -u admin -smb 192.168.0.10
server_request.php
W_W_pizza/ewSDFEWRSEFDS
Side Gig: Redefining Reality A
Email jeremy_muffin@muffinstanley(.)com + Credential Harvester.html
email
jeremy_muffin/masterdriver
Cyber Gig: Haunted Past
connect browser_log_dj.txt
browser_log_dj.txt
DONKMAST/qwerty
Cyber Gig: Lamas
Access Email: jason@cyberlamas(.)com / jasoncyberlama_1X#
email
Jasoncyber/1VXXX_0

Credit Cards for Sale

Gig
Method
File Name
Account Details
Side Gig: Operation Soundwave
use -x ftp_bounce_attack -version 1.0.0 -ip 45.30.76.43
cc.txt
4502431587832963
10/23
453
Side Gig: Award Expose
use -x eternalblue -version 1.0.1 -ip 17.35.67.43
Credit_Card.txt
4573543674387345
01/25
357
Main Gig: Shadows of Power
use-x EternalBlue -version 1.0.2 -ip 35.67.34.73
cc.txt
4536738734536743
01/25
472
Covert Gig: Cheating Scandal
intercept / sql (70.35.43.75, alienoverly.()com
Server.Content
456347563487536
10/23
573
Side Gig: Trivadontgo
hydra -u root -smb 192.168.0.50
transfer.txt
45438536734673
12/23
500
Covert Gig: Ghost in the Mainframe
use -x Kerberos_Authentication -version 1.1.0 -ip 34.53.63.46
ccinfo.txt
434764875364387
11/23
430
Main Gig: Exposing the Serpent’s Den
Access Email: olivia.h@opengpt(.)com/DigitalF0rtress
email
4576436438753673
10/23
345
Cyber Gig: Haunted Past
connect browser_log_dj.txt
browser_log_dj.txt
4573463747634375
10/23
435

Notable People

James Bellingham
Gig
Relevant Information
Side Gig: Grades of Chaos
James Bellingham (Tweeter: Austin University)
[email protected] (Tweeter: Austin University)
Covert Gig: The Emerald Tower
Account information: james@austin / shoppingmaster (email Credential Harvester)
Flight_750.pdf (wget Shipment ID: 750 from logged_file.zip)

Edward Oliver
Gig
Relevant Information
Main Gig: Unveiling the Veil
CryptoCon (Tweeter: Edward Oliver)
#GR #AN #BO #RO #UG #H- (Tweeter: Edward Oliver)
52.100.37.40 (harvester CryptoCon)
Main Gig: Declassified Pursuit
Ghostwalker (Archive: Edward Oliver)
30.53.45.75 (harvester Ghostwalker)

Oliver Smith
Gig
Relevant Information
Main Gig: Shadows of Power
Transaction Stamp: S20XRQ (Drifter.zip)
100.30.73.150 (harvester Oliver_Smith)
Main Gig: Island Heist
<Operation_Code>: R_E_I_0_0_1_X (Archive: Oliver Smith)
46.36.74.38 (Archive: Oliver Smith)

George Wesley
Gig
Relevant Information
Main Gig: Shadows of Power
35.67.34.73 (harvester George_Wesley)
Transaction Stamp: RGVS3700XXXX (Drifter.zip)
Vehicle Registration License: 10EW0S30XR (harvester David_James)
Main Gig: Declassified Pursuit
Alias Patrick_Bale (Archive: George_Wesley)
Company Overwatch (Archive: George_Wesley)
Covert Gig: Cheating Scandal
Bank Account Number: XRVSX100 (Divorce_Settlement.txt)
Main Gig: Honeypot
Cookie: 00000VERsiweiwiisss00 (Archive: S500000X0)
75.30.40.60 (Email: paris-carrier@gomail(.)com/S#&&^)

System Data

Gig
IP
Cookie
Host Status
Associated Items
Main Gig: Trial by Wi-Fi
192.168.0.10
MAC: 9E:4B:0A:A0:0D:3E
HostName: Vavoo Mirage 0
Main Gig: Trial by Wi-Fi
192.168.0.50
MAC: 0A:0E:1A:B0:A0:E0
Host Name: Microsloth Surfbook 100
Username: admin
Achievement: Attack on Neighbour
xbark_saved.txt
Side Gig: Operation Soundwave
45.30.76.43
Achievement: Party Crasher
spotifly.txt
cc.txt
Side Gig: Award Expose
17.35.67.43
OPEN
EternalBlue 1.0.1
Credit_Card.txt
Side Gig: CPU Shutdown
10.37.130.72
OPEN
DNS_Query 1.0.1
Side Gig: PhishLink Extraction
75.30.40.35
OPEN
EternalBlue 1.0.2
Main Gig: Unveiling the Veil
52.100.37.40
OPEN
RDP_Bruteforce 1.0.1
Achievement: Unveiling the Veil
Main Gig: Cyber Espionage
10.75.38.52
OPEN
SSL/TLS 1.0.0
Achievement: Cyber Espionage
Side Gig: Secret Obliteration
40.34.100.75
PROTECTED
-payload 0
EternalBlue 1.0.3
Use Eclipse to leave a backdoor
Side Gig: Disgrace Unleashed
45.10.30.70
aG4gRG9lIiwiaWF0Ijox jM5MDIyfQ.SflKxwRJSM eKKF2QT4fwpMeJf3POkJV_adQssw
CLOSED
Use Eclipse to leave a backdoor
BadLock 1.1.1
Achievement: Sexy Elan Mask
Main Gig: Shadows of Power
35.67.34.73
OPEN
EternalBlue 1.0.2
Achievement: Shadows of Power
cc.txt
Side Gig: A Damsel in Distress
200.220.75.20
OPEN
SSH_Bruteforce 1.0.0
Achievement: A Damsel in Distress
Covert Gig: The American Psycho
54.35.67.30
OPEN
SSH_Bruteforce 1.0.0
Achievement: The American Psycho
extrainfo.txt
Side Gig: No Maidens?
10.57.30.75
OPEN
EternalBlue1.0.0
Achievement: No Maidens?
netflings_acc.txt
Side Gig: Austin Again
35.73.85.30
se3RhSWEs0
OPEN
Kerberos_Authentication 1.0.0
Achievement: University Shutdown
Main Gig: Red Orbit Revelation
85.35.67.30
a35fvcde3bware2f0d2c0b0
CLOSED
BadLock 1.0.1
Main Gig: Sabotage in the Stars
45.30.50.100
PROTECTED
MAC: 4A:30:0A:5E:03:00
Kerberos_Authentication 1.1.0
Use Eclipse to leave a backdoor
Achievement: Sabotage in the Stars
rocket_materials.txt
Main Gig: Pentagon Archive Heist
50.74.30.0
OPEN
Kerberos_Authentication 2.0.0
Achievement: Pentagon Archive Heist
Achievement: Decoy Deception
Side Gig: S-teamy Heist
50.100.50.30
OPEN
HTTP_DoS 1.0.0
Achievement: S-teamy Heist
Main Gig: Declassified Pursuit
30.53.45.75
PROTECTED
SSH_Bruteforce 1.0.0
Achievement: Declassified Pursuit
Achievement: Silence the Noise
192.168.0.1
OPEN
MAC: 0A:B0:10:0E:00:E0
Host Name: Cisno
Username: Cisno
FTP_Bounce_Attack 1.0.0
Achievement: Silence the Noise
Achievement: Silence the Noise
17.53.40.35
PROTECTED
-payload 3
HTTP_DoS 1.0.2
Use Eclipse to leave a backdoor
Achievement: Silence the Noise
things.txt
Side Gig: Trivadontgo
192.168.0.50
MAC: E0:0E:1A:B1:A1:E0
Host Name: Penovo IdiotPad 100
Username: root
transfer.txt
Side Gig: Trivadontgo
192.168.0.1
MAC: 01:E0:A1:B0:3E:50
Host Name: Assos Stream 1000
Username: admin
Achievement: Ghost in the Mainframe
Covert Gig: Ghost in the Mainframe
34.53.63.46
OPEN
Kerberos_Authentication 1.1.0
Achievement: Ghost in the Mainframe
ccinfo.txt
Covert Gig: Samsingalong Trouble
100.1.3.0
00xxsaGrdsowkw0000
OPEN
FTP_Bounce_Attack 1.0.0
Achievement: Samsingalong Trouble
Main Gig: Surveillance Breach
192.168.0.10
MAC: 4A:1D:B0:1F:1E:B0
Host Name: Samsingalong Phone
Username: admin
server_request.php
Main Gig: Surveillance Breach
192.168.0.5
MAC: 3E:35:3F:3A:0E:3B
Host Name: Nokyo – Lumix
Username: root
Achievement: Law and Order -OR- Caught in the Shadows
Main Gig: Surveillance Breach
192.168.0.3
MAC: 3B:0A:E0:B5:30:0E
Host Name: Protheus – Guardian 0
Achievement: Cheating Scandal
Main Gig: Surveillance Breach
50.53.175.150
PROTECTED
EternalBlue 1.0.3
Achievement: Surveillance Breach
Main Gig: Honeypot
100.37.35.30
00000VERsiweiwiisss00
CLOSED
EternalBlue 1.0.1
Achievement: Honeypot
Main Gig: Honeypot
75.30.40.60
OPEN
FTP_Bounce_Attack 1.0.1
Achievement: Honeypot
Achievement: Basement Bust -OR- Syndicate Showdown
30.76.93.43
OPEN
MAC: 30:0A:0B:E5:00:B0
FTP_Bounce_Attack 1.0.0
Achievement: Basement Bust -OR- Syndicate Showdown
Main Gig: Island Heist
46.36.74.38
OPEN
FTP_Bounce_Attack 1.0.0
Achievement: Island Heist
Achievement: Sports Car
Achievement: Exec Expose
35.40.30.43
OPEN
IP: 192.168.0.1
MAC: E0:01:1B:0A:00:0E
Host Name: Assos Stream Master
Username: root
FTP_Bounce_Attack 1.0.0
Achievement: Exec Expose
Main Gig: Cyber Mayhem
10.50.30.150
OPEN
MAC: 1A:30:B0:3E:5B:0E
BadLock 1.1.1
Achievement: Cyber Mayhem
Main Gig: Cyber Mayhem
10.50.30.170
GGHWRERY_300_VSFKETESSVVE30
CLOSED
FTP_Bounce_Attack 1.0.0
Achievement: Cyber Mayhem
Main Gig: Cyber Mayhem
43.73.45.30
OPEN
SSH_Bruteforce 1.0.1
Achievement: Cyber Mayhem
Side Gig: Redefining Reality A
45.36.63.43
OPEN
FTP_Bounce_Attack 1.0.1
Use Eclipse to leave a backdoor
Achievement: Redefining Reality
Cyber Gig: Digital Footprints
10.70.30.50
OPEN
FTP_Bounce_Attack 1.0.0
Achievement: Digital Footprints
Cyber Gig: Haunted Past
45.30.76.43
0dsf@#dsfsdqwq3000
CLOSED
Use Eclipse to leave a backdoor
FTP_Bounce_Attack 1.0.0
browser_log_dj.txt
Cyber Gig: Lamas
50.60.30.40
PROTECTED
-payload 1
EternalBlue 1.0.3

Terminal Commands

The “Help” icon on the desktop is extremely thorough and helpful. This is for ease of access as well as personal notes that I found helpful.

Help
help
lists all commands
search-exploit
lists all available exploits
ls
lists all files and directories in the current system.
TIP: Use if connected to a different device and accidentally close the folder system
setoolkit
lists all available malware

General
send
send a file. Common domains used:

  • lapd.gov
  • syndicate1.ms
  • moonnews[.com]
  • leaks[.com]
wget
download a file from a url
flood + hping (from Hping)
DDoS an IP and then check status

Information Gathering

Don’t forget to check Tweeter, the Archive, and the News.

harvester (from Harvester)
scans the web for information (can be used on people, companies, files, codes, etc.)
TIP: Replace any space with _
nmap (from Nmap)
takes an IP and returns:

  • Host Port
  • Host State
  • Exploit Vulnerability
  • Whether to use intruder

If Host State is:

  • OPEN: use exploit
  • PROTECTED: use intruder (from Burp), then use exploit
    • intruder: brute force access to a protected IP (-payload = 0, 1, 2, or 3) (nmap will say to use intruder)
  • CLOSED: will need another way in
  • FIREWALL: restart something external (e.g., terminal) then use exploit or will need another way in

TIP: If you get in to a non-open IP, remember to use Eclipse (malware) to leave a backdoor!

netdiscover + hydra
scans for IPs to access
-u = admin, root or host name (from netdiscover usually)
-smb = IP
openvas
takes a url and looks for vulnerabilities
TIP: Will normally either (1) wget a file or (2) nmap -> use exploit for IP

Gaining Access (Metasploit)
use
take the exploit from nmap to access an IP
TIP: Pay attention to version and spelling
netdiscover + hydra
scans for IPs to access
-u = admin, root or host name (from netdiscover usually)
-smb = IP
connect
use a cookie to connect to an IP
TIP: In URL gibberish, look for COOKIE_ to find the cookie
repeater
takes an email address and associated IP to initiate password reset. Check your email for the password reset
intercepter + sqlmap + sqldump
intercepter: takes an IP and a host domain (e.g., url from a store / purchase history) (saves log file in logs)
sqlmap: takes the log file name and returns the data tables inside
sqldump: takes the log file name + the name of the data table from sqlmap and returns the actual data

Cracking File Passwords (from John)
hash2john
generates a hashed file for the encrypted target file (saved in the hashes directory)
crack2john
takes the hash file (output from hash2john) and creates the password (saved in the password directory)

Accessing Wifi
airodump
scans surrounding wifi
airorun
takes BSSID and channel from airodump and establishes a connection
airoplay
takes BSSID and ends targeted deauth to force a reconnect and capture handshake
airocrack
takes handshake from airoplay and cracks the targeted wifi using wordlists

Malware

Terminal Commands
  • cook: malware need to be compiled once (and only once unless file is deleted) before use
  • inject: some malware needs a value so it knows what to target. Values can include:
    • MAC: found in netdiscover; otherwise, will need to hunt for it
    • External Values: in the rooftop party main gig, check the S400 on the voltage box to inject into CircuitControl.exe
Malware

Requires Injection

  • NetStorm: elevates privileges (very commonly used!)
  • NexoGuard: performs unauthorized activities (e.g., geolocation)
  • ElecSurge: emulates a power surge
  • WannaCry: ransomware
  • CircuitControl: initiates power shutdown

Does Not Require Injection

  • Corruptor: data corruption / system instability
  • Zeus: spyware
  • Eclipse: backdoor

And that wraps up our share on Anonymous Hacker Simulator: Anonymous Hacker Simulator Walkthrough. If you have any additional insights or tips to contribute, don’t hesitate to drop a comment below. For a more in-depth read, you can refer to the original article here by Darkreverie, who deserves all the credit. Happy gaming!

Tags: ,

Leave a Reply

Your email address will not be published. Required fields are marked *