· last year · Oct 20, 2023, 04:30 AM
1PRACTICAL CRYPTOJACKING TUTORIAL
2Environment used in creating this tutorial:
3
4Linux Mint 20 Cinnamon
5Kernel: 5.4.0
6HOSTING A CRYPTOJACKING ON THE WEB SERVER
7For your cryptojacking to work, you must disable your browser's cryptominer blocker.
8
9It has been tested on the following browsers:
10
11Mozilla Firefox 88.0
12The first step is to fork this repository, so you have a copy of the repository;
13
14Create an account on WebMinePool , choose the become a provider mode;
15
16Then log in;
17
18Go to Api Keys and copy the SiteKey key;
19
20Paste it into the siteKey variable in the index.html file available in your copy of the repository;
21
22Create an account on Heroku , after creating the account check your email;
23
24Click on Create a new app, give the app a name and a region;
25
26After that you must choose the Deploy method, connect your GitHub, and choose the copy of the repository;
27
28To finish, click on Deploy Branch;
29
30Okay, the page already has the cryptojacking attack working, now we just have to wait for the victims.
31
32Note: Disabling browser cryptominer blocking
33
34Preferences -> Privacy and Security -> Custom -> Uncheck "Cryptominers"
35HOSTING CRYPTOJACKING ON YOUR MACHINE
36For your cryptojacking to work, you must disable your browser's cryptominer blocker.
37
38This part of the tutorial was tested in the following environment:
39
40Máquina Virtual - VMware Workstation 16
41Mozilla Firefox 78.10esr
42Kali Linux 20.04 Kernel: 5.9.0
43Apache/2.4.46
44Before starting, it is recommended to have a Provider account on the WebMinePool website .
45
46First of all, let's install our server.
47
48To do this, open a terminal and type the commands below:
49
50Update the repository list.
51
52$ sudo apt update
53Install the apache2 package, which will be our server.
54$ sudo apt install apache2
55We must start the process from our web server.
56$ sudo service apache2 restart
57To test your server, open your browser and type localhostin the address bar.
58
59You should see an Apache server welcome page.
60
61Now clone this repository.
62
63Open a terminal and type the following command:
64
65$ cd /var/www/html && sudo git clone https://github.com/ecorreas/Cryptojacking.git
66
67Now we have to change the index.html file and add our siteKey .
68$ sudo nano /var/www/html/Cryptojacking/index.html
69Change the siteKey variable on line 9 by replacing it with the siteKey obtained from the API Keys tab on the WebMinePool website .
70
71If everything has gone well so far, your cryptojacking is ready to mine.
72
73Just open your browser and access the URL: localhost/Cryptojacking/index.php.
74
75When typing top in your terminal, notice the process called Web Content, it should appear at the top of the list consuming a lot of CPU.