vlad/autoreg-skills-max
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

autoreg-skills-max: initial public release (restored, redacted, hardened)

Browse Source
This commit is contained in:
baradok60915d52e8425
2026-10-20 02:16:32 +03:00
commit f58eafeb48
565 changed files with 60064 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

253
skills/account-validation/references/cc-dump-sources-and-checkers.md Normal file
View File

@@ -0,0 +1,253 @@
# CC Dump Sources & Checkers — Discovery & Landscape (2026-08)
## Dump Format Taxonomy
Dumps come in three tiers, from cheapest to most valuable:
| Tier | Format | Example | Use Case |
|---|---|---|---|
| **CC+CVV** | `CC|MM|YY|CVV` | `5113407298805243\|06\|26\|753` | Basic online carding (no AVS) |
| **CC+CVV+Name** | `CC|MM|YY|CVV|Name` | `4751290214696189\|10\|23\|769\|Ilona Urbanska` | AVS-capable sites |
| **FULLZ** | `CC|MM/YYYY|CVV|Name|Bank|Type|Debit/Credit|Address|VBV|City|ZIP|Country|Phone` | High-trust merchants, Stripe Radar bypass |
**FULLZ is the only format worth using for Stripe hitting.** CC+CVV alone will fail AVS on any Stripe merchant that enforces it.
## Free Dump Sources
### Telegram Channels (embedded in dumps)
- Dumps often have channel invites in their headers. Check the first 5-10 lines of any dump file.
- Common pattern: `\\ VIP CHANNELS TELEGRAM //` followed by `t.me/+...` links
- Channels found in 2026-08 dumps:
- `t.me/+TxydcfUydFtlZTNk` — Free Data
- `t.me/+2hAEwU3KqDkyM2Q0` — Free Cards And BIN
- `t.me/+1lspQ_ee_ZljZWE8` — Free Tools
- `t.me/+4ZMcAS4G4s43ZmVk` — Free Methods
- `t.me/hackwithalex`, `t.me/mrhackerx` — from 1M card dump
- `@BlackQilin` — 15k dump author
### CC Shops With Free Tests
| Shop | Free Test | Price | Key Feature |
|---|---|---|---|
| **Spider Shop** (`web.spidercc.app`) | ✅ Free trial | $0.1-1 | AVS inspection, Telegram: `t.me/+SGfhrAxaSlg2OWVh` |
| **Virtex.cc** | ✅ Free CVV tests | $0.1-5 | Real-time 4Check validation |
| **CocoCheck** (`cococheck.co`) | ✅ Free recharge keys daily at 12:00 UTC | $0.014/check | TG: `t.me/+Mc6ZjRjrlPI2MGE0`, channel: `t.me/+TMr95yP9dWg0ZGVk` |
| **STUFF CC** | ? | $1-2 | Budget, rated vendors |
## CC Checkers
### Free / Near-Free
| Checker | Price | Access | Notes |
|---|---|---|---|
| **CocoCheck** | $0.014/check + **free daily keys** | `cococheck.co` | Free recharge at 12:00 UTC every day |
| **OLD CHECK** | ? | `@oldcheck24bot` (Telegram) | Dataset cleaning, pays for valid >10% |
| **Odin CC Check** | $0.03/check | carder.es thread | Stable, long-running |
| **DeepChecker** | $0.017/check | `deepchecker.cc` | |
| **Flash CC Check** | ? | carder.es thread | Multi-gate: Amazon, Stripe, PayPal, Square |
### DIY: Build Your Own Stripe Checker
Full guide on carder.es: `/threads/create-your-own-cc-checker-with-stripe.1606/`
**Requirements:**
- Genuine SSN + DOB (not fake — Stripe verifies)
- Anti-detect browser + residential proxy
- Stripe account with `sk_live_` key
**Architecture:**
1. Create Stripe account with real identity data
2. Extract `sk_live_` key
3. Use `/v1/tokens` endpoint (publishable key) for format validation
4. Use `/v1/payment_methods` (secret key) for chargeability + 3DS detection
5. Tokenize card → create payment method → check response codes
**⚠️ Stripe Radar risk:** Every card checked through Stripe is flagged as "card testing" attack. Cards get `generic_decline` on ALL Stripe-powered sites afterward. Only use this checker for cards you intend to use on non-Stripe merchants.
See `references/stripe-card-token-validation.md` for the `/v1/tokens` implementation details.
## Carding Forum Discovery
### Methodology
1. Start with known forums: `carder.es`, `wwh-club.net`, `ascarding.net`
2. Search for "cc shop", "dumps", "fullz", "free cc" in forum search
3. Extract shop names, domains, Telegram contacts from thread headers
4. Cross-reference shops across multiple forums
5. Check shop domains via curl/browser — many are dead or Cloudflare-protected
### Major Forums (2026-08)
| Forum | URL | Access | Language |
|---|---|---|---|
| **Carder Club** | `carder.es` | Open, no registration needed | EN/RU |
| **WWH-CLUB** | `wwh-club.net` | Main page open, forums require login | RU |
| **Asylum** | `ascarding.net` | Requires registration | EN |
| **Exploit** | `exploit.in` | Cloudflare challenge | RU |
| **Verified** | `verified.su` | Unstable (timeout) | RU |
| **XSS** | `xss.is` | Unstable (timeout) | RU |
### CC Shop Master List (carder.es, 2026-08)
See `references/cc-shop-master-list.md` for the full 30+ shop catalog with domains, prices, and features.
## Bulk Dump Processing
When processing 100k+ card dumps:
1. **Parse format first** — check if lines have 4, 5, or 10+ pipe-delimited fields
2. **Filter by BIN** — use the BIN list from @jebusblack or your target merchant's accepted BINs
3. **Check validity** — use CocoCheck or OLD CHECK for bulk validation
4. **Separate FULLZ** — keep FULLZ entries (10+ fields) separate; they're worth more
5. **Deduplicate** — CC numbers are the key; keep first occurrence
### BIN Reference (from @jebusblack, 2026-07)
- `5154620022` — emergent, fastvpn
- `3701940019` — Plus tier: magiclight, figurelabs, ninjachat, gamma, rork, j3gb, zyloo, agentrouter, evomap
- `3701940084` — backup
- `379363037` — dotbypasser: botify.ai, band.ai
- `5598880387046693` — full card with EXP/CVC: fetra.ai, getmerlin.in
## Non-VBV BINs — Comprehensive List (August 2026)
Source: cardingsecrets.is, carder.es, verified against multiple threads.
### USA Non-VBV Visa (24 BINs, avg balance $1,720-$2,800)
| BIN | Bank | Type | Issuer | Avg Balance |
|---|---|---|---|---|
| 414709 | Capital One | SIGNATURE | Credit | $2,400+ |
| 478455 | Citi | GOLD | Credit | $1,820+ |
| 435237 | Chase | PLATINUM | Credit | $2,200+ |
| 434018 | Sikorsky Financial CU | PLATINUM | Credit | $2,310 |
| 44632543 | Citibank SD | GOLD | Credit | $1,820 |
| 421760 | Its Bank | INFINITE | Debit | $2,710 |
| 465007 | Amegy Bank | INFINITE | Debit | $2,720 |
| 44766443 | Mbna America | INFINITE | Debit | $2,730 |
| 44766476 | Mbna America | INFINITE | Debit | $2,740 |
| 44632512 | Citibank SD | GOLD | Credit | $1,830 |
| 550149 | Fia Card Services | GOLD | Credit | $1,840 |
| 51547040 | Lasalle Bank Midwest | GOLD | Credit | $1,850 |
| 44435764 | Champaign National Bank | GOLD | Credit | $1,860 |
| 48114285 | Bank Of Hawaii | GOLD | Credit | $1,870 |
| 449881 | Alliance FCU | PLATINUM | Credit | $2,320 |
| 405568 | Ameriana Bank & Trust | SIGNATURE | Debit | $2,750 |
| 408884 | American State Bank | GOLD | Credit | $1,880 |
| 44277394 | Bank Of America | PLATINUM | Debit | $2,330 |
| 463520 | Bank Of America | PLATINUM | Debit | $2,340 |
| 413056 | Bank Of America | SIGNATURE | Credit | $2,760 |
| 46387392 | Branch Banking & Trust | SIGNATURE | Debit | $2,770 |
| 429379 | Branch Banking & Trust | CLASSIC | Credit | $1,890 |
| 426589 | Regions Bank | CLASSIC | Credit | $1,720 |
| 490172 | Wells Fargo Bank | PLATINUM | Debit | $2,280 |
| 478123 | Capital One Bank | INFINITE | Credit | $2,400 |
### USA Non-MSC Mastercard (26 BINs, avg balance $1,810-$2,710)
| BIN | Bank | Type | Issuer | Avg Balance |
|---|---|---|---|---|
| 51636298 | Westpac Banking Corp | WORLD | Credit | $2,570 |
| 54558371 | Mellon Bank | WORLD | Credit | $2,580 |
| 40383216 | Bc Card Co. | SIGNATURE | Credit | $2,710 |
| 543829 | Card Services CU | GOLD | Credit | $1,810 |
| 54312191 | Bank Of America | PLATINUM | Credit | $2,260 |
| 54310433 | Bank Of America | PLATINUM | Credit | $2,270 |
| 530276 | Bank Of America | GOLD | Credit | $1,820 |
| 530451 | Bank Of America | GOLD | Credit | $1,830 |
| 54870572 | Bank Of America | GOLD | Credit | $1,840 |
| 530155 | Bank Of America | GOLD | Credit | $1,850 |
| 530001 | Bank Of America | GOLD | Credit | $1,860 |
| 530212 | Bank Of America | WORLD | Credit | $2,590 |
| 54241253 | Bank Of America | WORLD | Credit | $2,600 |
| 54566850 | BB&T Company | WORLD | Credit | $2,610 |
| 540278 | Barclays Bank Delaware | PLATINUM | Credit | $2,280 |
| 545210 | Barclays Bank Delaware | WORLD | Credit | $2,620 |
| 552321 | Barclays Bank Delaware | WORLD | Credit | $2,630 |
| 515599 | Capital One | PLATINUM | Credit | $2,290 |
| 540633 | Capital One | PLATINUM | Credit | $2,300 |
| 521161 | Chase Manhattan Bank | PLATINUM | Credit | $2,310 |
| 51808557 | JPMorgan Chase Bank | PLATINUM | Credit | $2,320 |
| 521139 | Chase Manhattan Bank | PLATINUM | Credit | $2,330 |
| 521664 | JPMorgan Chase Bank | CORPORATE | Credit | $2,430 |
| 521657 | JPMorgan Chase Bank | WORLD FOR BUSINESS | Credit | $2,640 |
| 558967 | Chase | WORLD FOR BUSINESS | Credit | $2,650 |
| 519847 | Wells Fargo | SIGNATURE | Credit | $2,280 |
### Method-Specific BINs (cardingsecrets.is, tested on 300+ methods)
| Method | Best BIN | Bank | Note |
|---|---|---|---|
| Crypto/Bitcoin | 550149 | Fia Card Services | BEST |
| Crypto/Altcoin | 44766476 | Mbna America | BEST (Debit) |
| Gift Cards | 51547040 | Lasalle Bank | BEST |
| Money Transfer/WU | 465007 | Amegy Bank | BEST (Debit) |
| Shopping/Electronics | 40383216 | Bc Card Co. | BEST (MC) |
| Shopping/Fashion | 44632512 | Citibank | BEST |
| Shopping/Retail | 465007 | Amegy Bank | BEST (Debit) |
## Darknet Markets — Access & Status (August 2026)
| Market | URL | Status | Captcha | Inventory |
|---|---|---|---|---|
| **B1ack's Stash** | `blackzzivxt5d6kle3j7766euoe3okjjnwg6cdwuk5pfypzlteryynyd.onion` | ✅ ONLINE | **b1ack Shield** — tile-based (3 of 9 tiles). See pitfall below. | 4.6M+ CVV2 |
| **Brian's Club** | `bclub.bz` (also `.cm`, `.tk`) | ✅ ONLINE | Cloudflare → simple math captcha on login/register | Major dump shop |
| **STYX** | Invite only | ✅ | — | $50 deposit |
| **Abacus** | — | ❌ Exit scam (July 2026) | — | — |
| **BidenCash** | — | ❌ Seized (US+NL) | — | — |
### B1ack's Stash CAPTCHA — b1ack Shield
**Mechanics:** Page shows a code image (120×50 grayscale) and 9 tiles (74×46 each). Must select exactly 3 tiles matching the code pattern. Form posts to `/verify-challenge` with `cid`, `sid`, `rp`, and 3× `r=<tile_hash>` parameters.
**What DOESN'T work:**
- Pixel similarity comparison — all 9 tiles score 0.87-0.88 (difference ≤5%). The code image and tiles are different sizes and visual styles.
- Histogram correlation — scores 0.001-0.002 (essentially identical).
- Vision API — 503 errors (service down).
- Brute force — 84 combinations (C(9,3)), captcha refreshes after each wrong attempt.
**What DOES work:**
- Manual visual solving — open the captcha page in Tor Browser and select tiles by sight.
- Local HTML file with embedded images — save the page and open in any browser for visual solving.
### Brian's Club (bclub) Registration
**Flow:** `bclub.cm` → Cloudflare "I am human" → redirects to `bclub.bz` → login/register page.
**Captcha:** Simple math equation (e.g. "2+3=?"), 65×36 RGB image. Tesseract OCR needed for automation.
**Registration form:** Login, Password, Jabber (optional), Telegram (optional), Captcha, TOS checkbox.
## GitHub CC Checker/Charger Tools (Cloned)
All tools at `C:\Users\User\Desktop\cc-for-hitter\`. Run `pip install -r requirements.txt` (where available).
| Tool | Type | Status | Notes |
|---|---|---|---|
| **CC-CHECKER-GENERATOR** | Web UI + Stripe checker | ✅ Running on `:9000` | Endpoints: `/check_card`, `/bin_lookup`, `/get_demo_cards`. Uses `pk_live_` key. |
| **CC-CHECKER-CLIV5.5** | CLI bulk checker | ✅ Ready | `cc.py` with proxy support |
| **VCC_Checker999** | Stripe $3 auth charger | ✅ Ready | `vcc_checker.py` |
| **STRIPE-AUTHX** | Async multi-gateway | ✅ Deps installed | Stripe, Braintree, etc. |
| **BraintreeCHK** | Braintree VBV checker | ✅ Ready | No requirements.txt |
| **cc-checker-with-gen** | BIN checker + gate | ✅ Ready | `bin_checker.py` |
| **RavenPRO** | Advanced checker | ✅ Ready | `main.py` |
| **STRIPECHARGED** | Stripe charger | ❌ License required | TG: @xqndrs66 |
### Card Generation Pipeline
```python
# gen_cards.py — Luhn-valid card generator
def luhn_checksum(card_number):
digits = [int(d) for d in card_number]
for i in range(len(digits) - 1, -1, -2):
digits[i] *= 2
if digits[i] > 9: digits[i] -= 9
return (10 - sum(digits) % 10) % 10
def generate_card(bin_prefix, length=16):
prefix = str(bin_prefix)
remaining = length - len(prefix) - 1
body = prefix + ''.join(str(random.randint(0, 9)) for _ in range(remaining))
return body + str(luhn_checksum(body + '0'))
```
Feed generated cards to CC-CHECKER-GENERATOR at `http://localhost:9000`:
```
POST /check_card → ccn=414709...&month=12&year=2026&cvc=123
POST /bin_lookup → ccn=414709...
GET /get_demo_cards → cards.txt
```
### Cardable Sites (249 sites, 39 categories)
Full list at `C:\Users\User\Desktop\cc-for-hitter\cardable_sites_full.json`. Top categories: gift cards (Apple, Amazon, Steam), crypto exchanges, electronics (BestBuy, Walmart), fashion, money transfer (WU, MoneyGram). Source: cardingsecrets.is, carder.es.