Grey Hack

Grey Hack

Something strange again
Ive got multiple emails with the next text:

Hello, I have heard about your skills and I have a certain personal interest in you taking a look at the computer that is on the 189.219.16.251 network on the LAN 172.16.1.12. You may find something that may interest you.

I prefer to remain anonymous, so please do not try to contact me.

****

I was able to hack into the target and got the next IP from the chat.log as well, but the new IP doesnt have anything other than the new employee's instructions and welcome.pdf. These two documents doesnt give any useful info to continue.
WHen I checked the system.log on the same host I got one more IP (not sure if its related or not, but hacked into that one also which seems to be completely empty.

I'm stuck, can anyone pls help?
< >
Showing 1-12 of 12 comments
I think you got into a rabbit hole. Im right now at Work. But i would Like to check out your target after work
dooky 4 Aug @ 4:26am 
Thanks for looking into it.

Some extra info:

On the first target I found a chat log:
We have created an SSH account for you on a private server at 44.221.25.122, there you have more information about the next steps.

That destination is indeed contain ssh server which I logged into:
and that one has two possible interesting PDF:

Instructions.pdf:
Open the package on the bed.
Take the car and go to the address written on the device that was in the box.
The house uses a digital lock, stay close to it with the device in your pocket until it vibrates three times in a row.
The door will have opened, go up to the first floor and enter the room at the back, on the right.
Inside there will be a desk, in the first drawer you will find a folder with the title Energy Plan
Take it and get out of there.
Contact when you are at home.

And welcome.pdf
You've come a long way, but you still have one last chance to regret it.

If you want to continue, there is no turning back. Anyone who collaborates with us must keep a low profile, this means that you must leave your job, your family and friends, everyone. Without goodbyes, go away. We take care of the rest.

If you want to forget all this and get on with your life, now is the time to do it. Just stop reading, delete this user and you will never hear from us again.

Don't go to work tomorrow.
Take the first bus that leaves the city from 8:00 onwards.
Sit at the end of the bus.
After several stops, a woman with a tattoo of a chess horse will board the bus.
Get off at the same stop as her and follow her at a distance of a few meters.
She knows you are following her, but DO NOT talk to her.
You will arrive at a parking lot where a car will be waiting for you, from there they will take you to your new home.
At home you will find your new identity data and a computer, connect to this computer from there to receive the next instructions.

None of them seems to be giving any clues about the next step, so im stuck :)
Yes i feel you. But this for sure a rabbit hole because We can't do so much like following this instruction.
I never had this Email so Its my first time too.
What i would try:
1. Is this the interesting information? Lore?
2. Check Out the entire Network.
Maybe we find there more information or a Camera which can give us Details. Like the Plate Number of the mentioned Car or the Box on His/her bed

Also I have following Question:
who is we?
is this a Professional Hacker Clan?
Belong this Clan to the Goverment?
What ist there Mission?

---------
When im Home i will start to infiltrate their Network
Im curios about this
And it seems like a nice Project
A9LAWS 4 Aug @ 5:14am 
I've reached the same point.

"At home you will find your new identity data and a computer, connect to this computer from there to receive the next instructions."

After reading this I opened the LogViewer on the PC were the pdfs were at, and found another shell connection which appears to be the PC of the new home. Mine was "shell connection obtained via 22 and A public IP address". So when I nmaped that Public IP I found that 22 port open, connected to it. AND THATS WHERE IM STUCK AT NOW.

If the connection obtained on the PDF pc in LogViewer was via 22, and I connected to the Public IP via 22 I should then be in the "Next instructions" part. BUT ACTUALLY FOUND NOTHING, TRIED ScanLan and ALL THE CAMERAS got me no where too.

Im thinking I need to rshell every PC on the ScanLan now to find any leads.

Its one of the two, either it wasnt coded to go all the way up that far, or Im sooooo confused.
Btw:
Sience the IP Address is not reachable. i think the Guy who got the invite - accepted the Offer and followed their instruction.
But im not sure yet
dooky 4 Aug @ 5:56am 
Ive logged in the SSH host again, checked the full LAN, but it is huge and without clues it doesnt seem to be logical to hack each and every host one by one to see if there is anything. It might be the case in the real world, but my mind scratches to say it should not be the case in a game :)

While the SSH host log entry has only one IP, which Im going to check now, even though it is simple redirection
Last edited by dooky; 4 Aug @ 5:58am
A9LAWS 4 Aug @ 6:12am 
Your theory actually got a point to it, cuz every system you get in and access their ScanLan its always hubs and routers, no switches. But this time there are some switches that are blocking the way. I'll try to attack them and get behind them and see.

Alr, I accessed every pc in the system behind a switch, I still got 6 more pcs without switches but with rhsell still, which tbh I think would never be the solution. But for your question PCs behind the switches had nothing sadly, so as said I genuinly think its js not coded that far.

Like no extra leads or anything to hint at after getting all that far.



So to sum things up, At first you get into the Public IP and IP LAN provided in the "strange mission" Mail. From there you find a chat log that leads you to another Public IP and IP LAN.

You go to there, where you find the PDFs with the instructions, which at the end says "connect to this pc using the new pc". So you access the LogViewer and find your rshell obtained and another rshell obtained which leads you to the "new home" PC. Which is another PUBLIC IP and the type of port that is connected to it. I connected to the PUBLIC IP via the port. Which I'm now stuck in with no instructions to be found.

Tried to do some extra loops around it, by accessing the PC's behind the switches, PCs, CCTV's and nothing was found.

If anyone got further or found the solution, Please help
dooky 4 Aug @ 6:23am 
To a certain point I agree, but the last PCs IP for me is missing from the system.log:
So you access the LogViewer and find your rshell obtained and another rshell obtained which leads you to the "new home" PC.

This one doesnt exist for me, so I guess it is a fals lead

I guess the last point is up to the instructions and welcome.pdf...at least which is common for both of us
Last edited by dooky; 4 Aug @ 6:24am
I think this entire thing is only for Lore
I found another Steam discussion which is similar to our problem.
Originally posted by OM:
So I received an email that said the following: Hello, I have heard about your skills and I have a certain personal interest in you taking a look at the computer that is on the 15.73.154.125 network on the LAN 10.0.4.2. You may find something that may interest you.

I prefer to remain anonymous, so please do not try to contact me.

This is on single player mode, anyway I managed to get into that computer at 10.0.4.2, the only interesting thing I found was a chat between the user and another that said he had found 5 million in cash and he's going to deposit it in a safe deposit box, the other user warned him not to and to instead turn it into the police. Anyway I hacked the guy who found the money's bank account and there was only $5 (figured since he was gonna hide it in a safe deposit box), so I sent him an "I know it was you" email telling him to deposit money into my bank account, I wasn't able to send the email without an attachment so I included a picture he took of the money and received a reply saying he didn't know what I was talking about, so I tried again and this time attached his chat log, and I received the same reply that he doesn't know what I'm talking about.

Is this what I was supposed to do? If so why isn't it working? Or am I supposed to do something else? Any help is appreciated, TIA

Last edited by Captain Democracy; 4 Aug @ 8:43am
And i think that what you already found is the result.
The Email only mention: "172.16.1.12. You may find something that may interest you"

Well and to me. Is the Welcome.txt and Instruction.txt very interesting.
And tells us a little Story of the Grey Hack Universum.
Same with the Email from User OM:
"I found was a chat between the user and another that said he had found 5 million in cash and he's going to deposit it in a safe deposit box, the other user warned him not to and to instead turn it into the police"


I guess thats it for now. Even i want to know more about their Group
dooky 4 Aug @ 9:07am 
I have a feeling that is not just this, however I have given it up for a couple of times already and deleted the email. It comes back intermittently to bug me though :D
Xephael 6 Aug @ 6:26am 
The end of these missions is finding evidence of a crime which can either be used for blackmail or to report to the police (or both).
< >
Showing 1-12 of 12 comments
Per page: 1530 50