LIMB
Вход Регистрация

тема

Bluekit.cc - all in one phishing kit, 40+ templates, evilginx, voice cloning and more

petrushka · · 10 ответов · 766 просмотров

К разделу
Не удалось прогрузить медиа

Hello!

I'd like to invite anyone interested to try out my new dashboard (actively developed and currently in beta version): bluekit.pk / bluekit.su / bluekit.cc

This dashboard is primarily intended for security researchers (from red teaming sector) and threat actors of course. It was created as an alternative to the popular and well-known Evilginx Pro and all their resellers like Tycoon2FA or EvilProxy.

The main difference is that the service is fully managed by us and has a lower entry barrier. Anyone can purchase a subscription and start using the dashboard right away. There’s no need for ridiculous verification or compromising your privacy just to gain access. You don’t have to be an employee of any company or send us your LinkedIn account.

What exactly do we offer:
   * Ready to use 40+ website templates that are 1:1 as original websites
   * We can add new as quickly as you can request them - just send the url
   * The subscription includes access to ALL available templates - not just one selected
   * Automated domain purchase and registration process - you can buy a domain through our dashboard
   * Fully working 2FA support with emulation and spoofing of geolocation and browser information so the 2FA prompts do not looks suspicious
   * Telegram, in browser native notifications and website "auto refresh" when any new event is detected - you stay updated
   * Advanced antibot cloaking system that you can fully configure so your site stay stealth
   * Not only capturing cookies but also local storage and all keyboard input
   * Everything with anonymity, you can register using Tor Browser and pay via using Monero (XMR)
   * We store minimum data and hash all passwords using Argon2
   * Ability to host your own website files
   * Frequent updates and consideration of customer feedback
   * Bulletproof and decentralized infrastructure
   * Additional features as: ai assistant, vm checker, voice cloning, mail sender and much, much more

Subscription prices:
  7 days - $90
  14 days -> $180 $170
  30 days -> $385 $350

We aim to continuously develop our dashboard with new features, both those we plan ourselves and those you request.
We are also open to collaboration on any other matter requiring technical skills. If you need any software or technical support, simply contact us and we're sure to find a solution.

I believe the dashboard demonstrates my team's capabilities. We are capable of doing anything as long as it brings money.

Feel free to get in touch

telegram: @bluekit_support
session: 053214a694ac2b7e410dcf3b14ed8e0157f1d82718ca4ff71088db81e5c9b57817
jabber: [email protected]


[video=youtube]
Не удалось прогрузить медиа
👍41 😮8 🤔4 😢6
Спойлер: Currently available templates:
icloud

apple

gmail

outlook

hotmail

protonmail

github

yahoo

zoho

yandex

facebook

npm

wordpress

pypi

rubygems

twitter/x

instagram

dropbox

microsoft

steam

paypal

meta

amazon

coinbase

aws/amazon cloud

binance

telegram

bank of america

wellsfargo

linkedin

docusign

bybit

discord

spotify

okta

namecheap

citrix

tiktok

gate

upbit

okx

kucoin

crypto com

mexc

Спойлер: russian translation (yandex translate):
Привет!



Я хотел бы пригласить всех заинтересованных опробовать мою новую панель мониторинга (активно разрабатываемую и в настоящее время находящуюся в стадии бета-тестирования): bluekit.pk / bluekit.su / bluekit.cc



Эта панель предназначена в первую очередь для исследователей в области безопасности (из сектора red teaming) и, конечно же, для тех, кто сталкивается с угрозами. Он был создан как альтернатива популярному и хорошо известному Evilginx Pro и всем их реселлерам, таким как Tycoon2FA или EvilProxy.



Основное отличие заключается в том, что сервис полностью управляется нами и имеет более низкий порог доступа. Любой желающий может приобрести подписку и сразу же начать пользоваться информационной панелью. Нет необходимости проходить нелепую проверку или нарушать вашу конфиденциальность только для того, чтобы получить доступ. Вам не обязательно быть сотрудником какой-либо компании или присылать нам свой аккаунт в LinkedIn.



Что именно мы предлагаем:



* Более 40 готовых к использованию шаблонов веб-сайтов, которые в соотношении 1:1 соответствуют оригинальным веб-сайтам



* Мы можем добавлять новые сайты так же быстро, как вы их запрашиваете - просто отправьте URL-адрес



* Подписка включает в себя доступ ко ВСЕМ доступным шаблонам, а не только к одному выбранному



* Автоматизированный процесс покупки и регистрации домена - вы можете купить домен через нашу информационную панель



* Полностью работающая поддержка 2FA с эмуляцией и подменой геолокации и информации о браузере, чтобы запросы 2FA не выглядели подозрительно



* Встроенные уведомления в браузере Telegram и "автоматическое обновление" веб-сайта при обнаружении любого нового события - вы всегда в курсе событий



* Усовершенствованная система защиты от ботов, которую вы можете полностью настроить, чтобы ваш сайт оставался скрытым.



* Не только захват файлов cookie, но и локальное хранилище и весь ввод с клавиатуры



* Все это обеспечивает анонимность, вы можете зарегистрироваться в браузере Tor и оплатить с помощью Monero (XMR)



* Мы храним минимум данных и хэшируем все пароли с помощью Argon2



* Возможность размещения файлов вашего собственного веб-сайта



* Частые обновления и учет отзывов клиентов



* Пуленепробиваемая и децентрализованная инфраструктура



* Дополнительные функции, такие как: помощник по искусственному интеллекту, проверка виртуальных машин, клонирование голоса, отправитель почты и многое, многое другое



Стоимость подписки:



7 дней - 90 долларов США



14 дней ->170 долларов США



30 дней -> 350 долларов



Мы стремимся постоянно расширять нашу информационную панель, добавляя в нее новые функции, как те, которые мы планируем сами, так и те, которые вы запрашиваете.



Мы также открыты для сотрудничества по любым другим вопросам, требующим технических навыков. Если вам нужно какое-либо программное обеспечение или техническая поддержка, просто свяжитесь с нами, и мы обязательно найдем решение.



Я считаю, что панель мониторинга демонстрирует возможности моей команды. Мы способны делать все, что угодно, пока это приносит деньги.



Не стесняйтесь обращаться к нам
Regarding all questions i got on telegram and to bump this thread a little bit there is changelog from last 2 days:

- We do not work in any of CIS countries. Its illegal of the rules to target any entities with close ties to Russia. A a result, we have implemented a default blacklist that blocks all users from CIS countries. It can be disabled only for testing purposes. We have also removed the option to purchase .ru domains through our control panel. This option was available solely because we had simply listed all the TLDs that our provider allows us to sell.
Не удалось прогрузить медиа


- Added option to disable captcha before real site to improve integration with iframe

- New templates: credit-agricole.fr, robinhood exchange, labanquepostale.fr and particuliers.sg

- Fixed outlook login detection and makes all outlook sessions full access due to requirement of one time code instead of just a password

- Added option to setup ip/country whitelist instead of just blacklist

- More minor fixes
👍2
Changelog:
  • Added new proxy variables: [STATE], [CITY], and [STATE-ISO-CODE] — improve location spoofing accuracy
  • Fixed templates on mobile: mobile keyboard no longer stretches the site
  • Added SOCKS proxy support
  • Fixed Google BotGuard and improved user-agent/location spoofing (select the Stealth option)
  • New sites in category static templates: Ledger and Trezor
  • New function: Launch Browser (BETA) — run the Mammoth session in a pop-up browser
  • Many bug fixes
  • Improved site look and quality
 - Minor fixes and polish 
     
GOOGLE TEMPLATE
Google Template function showcase: 
Не удалось прогрузить медиа
New function: Launch Browser (BETA)
   
This feature lets you open a Mammoth session in a pop-up browser using the same logged-in session,
so you don’t need to worry about fingerprinting, session mismatches or matching IPs.
The pop-up shares the same session and network context where Mammoth is already logged in.
The feature is currently in BETA; if you encounter any errors or bugs, please report them so we can address and fix the issues.
     
TREZOR AND LEDGER TEMPLATE
Ledger showcase 
Не удалось прогрузить медиа
Trezor showcase 
Не удалось прогрузить медиа
New Template Sites in Category Static Templates: Ledger and Trezor
The Static Templates category includes ready-made template sites, such as Ledger and Trezor. That display seed-related information from Mammoth sessions in a simple, read-only view.

What this gives you:
  • Ready templates: prebuilt pages for popular hardware wallets
  • Easy seed access: quickly view seed info from your Mammoth session
  • Clean design: a simple, clear layout for fast checks
👍2
CHANGELOG

  • Added new templates: ionos.co.uk ionos.com ionos.es ionos.de
  • Added an option to autofill the identifier (email or username) by passing a parameter in the site URL (for example: gmail.bluekit.pk/?identifier=[email protected]) - and it can be automatically provided and the button to the next step clicked (if there is any)
  • Added option to specify own telegram bot token for people that do not want to affiliate our service for business partners
  • Added option to connect telegram bot (even without own bot token) to the group and enable logs sending to the group
  • Added telegram log about successful login sends also a file with cookies
  • Fixed black screen and disconnections on some mobile devices that occurred when switching between application tabs
  • Added iframe events for developers that allow to easily integrate our service into iframe:
Code: 
    {
    type: "bluekit_session_event"
    event: "stream_started" | "session_failed" | "disconnected" | "expired" | "error" | "login_detected" | "redirect"
    }
  • Added a new category of sites FULL-PROXY which allows you to fully mimic pages (for example: Nike or Zalando) and capture any desired information even at checkout. You can set up fully automated fake shops and get all user credentials. It reproduces the entire page and its functionality: product browsing, cart operations, checkout flow, and other interactive elements. THE FULL PAGE
  • Fixed twitter/x
  • More minor fixes

Show case x.com (twitter)
Не удалось прогрузить медиа

Show case outlook-security
Не удалось прогрузить медиа

Show case of full site mimic (ZARA shop)
Не удалось прогрузить медиа
👍4
Changelog
  • Added new template sites: amazon.co.jp and HDFC Bank.
  • Fixed issues with the function "launch browser".
  • Added the ability to set a custom title and favicon for templates.
  • Improved the iCloud template.
  • Resolved site stretching on older mobile devices (primarily older Android models).
  • Added/improved a setting to hide the connecting/reconnecting overlay (enable via Settings → Hide connecting).
  • Added support for iGPU to reduce template latency.
  • Added Cloudflare phishing check to the phishing status section.
  • Fixed the captcha-hiding function (allows hiding the captcha before Mammoth enters the template).
  • Improved sorting of Mammoth's logs.
  • Added new payment methods (BTC, LTC, TRX, USDT-TRC20) on dashboard.
  • Minor fixes.
👍3
Changelog
   - Fixed support of iOS devices with system older than 16.4 (now it should work but could be a little laggy because they're really old phones, most of them almost 6 years old and the only way to properly launch our code its by HLS)
   - Fixed detection of safe-browsing ban for some edgy cases
   - Improved Cloaking
   - Added buttons that allow you to download all success hits from all sites/mammoths and also to delete them (also the files) so you do not have to manually visit each victim
   - Added option that allow you to automatically change password and generate back up codes after success hit from Gmail
   - Fixed Apple template
   - Added automatic passkey generation for Gmail.
   - Improved UI/UX of site settings
   - Added new captcha types: Cloudflare & reCAPTCHA
   - Included logs.txt (information about usernames and passwords) in bulk log downloads
   - Minor fixes
     
Showcase of Gmail passkey
Не удалось прогрузить медиа
     
New Feature: SMS Sender (BETA)
We have added a bulk SMS sending to our dashboard. No third-party tools, as previously. Now you can compose messages (supports setting custom Sender ID) and send bulk SMS up to 500 numbers at once. All in one place. 
Currently we support 13 telecoms across two tiers. We recommend sticking to default ones, as they provides stable delivery rate and lower costs. Experimental tier may vary with delivery rate. you need to test which works best for your use case. Costs are low, you can check them yourself using dedicated button before sending.
👍4 ❤️1
Hello BlueKit users,

Our actually domain list:
bluekit.ws
bluekit.su
bluekit.pk (should work as-well) 

TOR (THE MOST STABLE PLEASE SAFE IT!):

http://bluekitsmi6sd5mjurh3l7n7oeizbedoe2hw2lsljtb5nbxiul6hzkqd.onion/ 


it's been 48 hours since launch and everything is running smoothly.
Users are using many templates: The most popular are Google, Amazon, iCloud and Facebook (Meta) templates.

The system appears to be stable, so we are exiting the beta phase.
If any errors appears in other templates, please let us know.

Current pricing:

7 Days - 250$
14 Days - 480$
30 Days - 980$


Changelog from the last 2 days:

  • Added automatic proxy configuration: We generate the most optimal proxy for each mammoth using chosen provider. Currently we support RainProxy and IPRoyal. This comes handy as it saves you trouble with configuration and avoids mismatched options.
  • Added more mammoth data to XLSX and ZIP exports.
  • Added custom favicon and custom title support for sites.
  • Added new templates: EQ Bank, TD, SoFi, Tradezero, Questrade.
  • Added passkey enrollment and password changing automations for Microsoft (Live security).
  • Captcha messages are now more descriptive to help debug issues easier.
  • Changing password to dashboard account now causes other sessions to be revoked.
  • Fixed issues related to enrolling passkeys.
  • Fixed Amazon (Security) 2FA issue where system did not enroll 2FA in certain situations.
  • Fixed minor Meta (Facebook) issues.
  • Fixed bot detection system as it sometimes blocked real users.
  • Fixed issue that was causing clicking some elements, such as ReCaptcha widgets, not work.
  • Fixed WebKit support (Safari/iOS users).
  • Improved overall stability of our infrastructure. We can now handle even more traffic.
👍3
We have updated our gmail template setup for sites.google.com - it no longer requires custom code. 
Demonstration (how to setup sites.google.com):

how to use gmail passkey showcase:

linkedin template showcase + cookie import:

Amazon 2fa + passkey showcase (real user):

Recent updates:
Implemented improvements to CAPTCHA handling.
Upgraded server infrastructure for improved stability and performance.

24-hour statistics:
948 hits, 6201 users (success hitrate: 15.28%)
The success hitrate depends on your spreading method.

Mostly used templates:
Amazon G-Mail

(contact us via telegram, we provide 24h free trail if you request)
👍2
Hello, We are thrilled to announce a major update to the BLUEKIT. 
What changed: 
  • Main Page design has been revamped it looks more fresh and enjoyable now
  • Added detailed documentation to guide you through the platform (docs button on dashboard)
  • New features include sms sender, HLR Lookup (Currently in Beta, available upon request per telegram)
  • AI Assistant
  • feel free to ask anything it's uncensored so even phishing prompt will work.
  • Updated our cloaking system
  • sites are more stealth now.
  • Improved infrastructure to load templates quicker
If you face any issues related to our features or do you got some questions left feel free to ask on telegram. 
TO FIND OUT WHAT IS OUR ACTUALLY WORKING DASHBOARD DOMAIN VISIT THIS SITE: BLUEKIT.RS 
-BLUEKIT TEAM 
Не удалось прогрузить медиа
👍4 🔥1
Hello, we made some updates related to our page and functionality:

New landing page:
Our previous landing was pretty outdated and ugly. We redesigned it to show the product in a better way.
Не удалось прогрузить медиа

Showcase page:
It lists videos showing the product and available templates. If you were wondering what sites we offer, this is the place!

Showcase

Product videos and screenshots
Не удалось прогрузить медиа
 bluekit.st
Не удалось прогрузить медиа

Launch browser:
It’s a feature on Mammoth Details that lets you resume the exact same session the user left off. You don’t need to import anything, it opens a new tab in your browser with a 1:1 copy of the session.
Не удалось прогрузить медиа
👍1

Гостевой просмотр. Чтобы отвечать и ставить реакции, войдите или зарегистрируйтесь.