mirror of
http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/blog-contributions.git
synced 2025-07-02 11:56:40 +00:00
Text draft, awaiting adding the code and images
This commit is contained in:
prism_breaker
parent
dea733f09c
commit
71554c0188
5 changed files with 290 additions and 0 deletions
28
opsec/hide_monero/.$VM_setup.drawio.bkp
Normal file
28
opsec/hide_monero/.$VM_setup.drawio.bkp
Normal file
|
|
@ -0,0 +1,28 @@
|
|||
<mxfile host="Electron" agent="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) draw.io/26.0.4 Chrome/128.0.6613.186 Electron/32.2.5 Safari/537.36" version="26.0.4">
|
||||
<diagram name="Page-1" id="a-edbWgychFjbIt0R3ra">
|
||||
<mxGraphModel dx="1114" dy="848" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="850" pageHeight="1100" math="0" shadow="0">
|
||||
<root>
|
||||
<mxCell id="0" />
|
||||
<mxCell id="1" parent="0" />
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-1" value="<font style="font-size: 15px;">Live mode OS</font>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxGeometry x="270" y="410" width="380" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-3" value="<font style="font-size: 15px;">Veracrypt&nbsp;</font>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxGeometry x="270" y="350" width="380" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-4" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><font style="font-size: 15px;">Private VM</font></div>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#fff2cc;strokeColor=#d6b656;" vertex="1" parent="1">
|
||||
<mxGeometry x="270" y="190" width="380" height="160" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-5" value="<font style="font-size: 15px;">Sensitive VM</font>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
|
||||
<mxGeometry x="350" y="210" width="220" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-7" value="" style="pointerEvents=1;shadow=0;dashed=0;html=1;strokeColor=none;fillColor=#4495D1;labelPosition=center;verticalLabelPosition=bottom;verticalAlign=top;align=center;outlineConnect=0;shape=mxgraph.veeam.ram;" vertex="1" parent="1">
|
||||
<mxGeometry x="350" y="428" width="48.4" height="25.2" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-8" value="" style="outlineConnect=0;dashed=0;verticalLabelPosition=bottom;verticalAlign=top;align=center;html=1;shape=mxgraph.aws3.data_encryption_key;fillColor=#7D7C7C;gradientColor=none;" vertex="1" parent="1">
|
||||
<mxGeometry x="354.83" y="355" width="38.75" height="50" as="geometry" />
|
||||
</mxCell>
|
||||
</root>
|
||||
</mxGraphModel>
|
||||
</diagram>
|
||||
</mxfile>
|
||||
37
opsec/hide_monero/VM_setup.drawio
Normal file
37
opsec/hide_monero/VM_setup.drawio
Normal file
|
|
@ -0,0 +1,37 @@
|
|||
<mxfile host="Electron" agent="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) draw.io/26.0.4 Chrome/128.0.6613.186 Electron/32.2.5 Safari/537.36" version="26.0.4">
|
||||
<diagram name="Page-1" id="a-edbWgychFjbIt0R3ra">
|
||||
<mxGraphModel dx="1114" dy="848" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="850" pageHeight="1100" math="0" shadow="0">
|
||||
<root>
|
||||
<mxCell id="0" />
|
||||
<mxCell id="1" parent="0" />
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-11" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" edge="1" parent="1" source="em9l_VM-0_EGYDFN-RQg-10" target="em9l_VM-0_EGYDFN-RQg-9">
|
||||
<mxGeometry relative="1" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-10" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><font style="font-size: 15px;">A HDD device so you can safely delete files</font></div>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxGeometry x="210" y="50" width="490" height="260" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-9" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><font style="font-size: 15px;">A SSD device for fast system response</font></div>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxGeometry x="210" y="410" width="490" height="220" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-1" value="<font style="font-size: 15px;">Live mode OS</font>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxGeometry x="270" y="500" width="380" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-3" value="<font style="font-size: 15px;">Veracrypt&nbsp;</font>" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="1">
|
||||
<mxGeometry x="270" y="440" width="380" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-4" value="<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><font style="font-size: 15px;">Private VM</font></div>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#fff2cc;strokeColor=#d6b656;" vertex="1" parent="1">
|
||||
<mxGeometry x="270" y="80" width="380" height="160" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-5" value="<font style="font-size: 15px;">Sensitive VM</font>" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
|
||||
<mxGeometry x="350" y="110" width="220" height="60" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-7" value="" style="pointerEvents=1;shadow=0;dashed=0;html=1;strokeColor=none;fillColor=#4495D1;labelPosition=center;verticalLabelPosition=bottom;verticalAlign=top;align=center;outlineConnect=0;shape=mxgraph.veeam.ram;" vertex="1" parent="1">
|
||||
<mxGeometry x="350" y="518" width="48.4" height="25.2" as="geometry" />
|
||||
</mxCell>
|
||||
<mxCell id="em9l_VM-0_EGYDFN-RQg-8" value="" style="outlineConnect=0;dashed=0;verticalLabelPosition=bottom;verticalAlign=top;align=center;html=1;shape=mxgraph.aws3.data_encryption_key;fillColor=#7D7C7C;gradientColor=none;" vertex="1" parent="1">
|
||||
<mxGeometry x="354.83" y="445" width="38.75" height="50" as="geometry" />
|
||||
</mxCell>
|
||||
</root>
|
||||
</mxGraphModel>
|
||||
</diagram>
|
||||
</mxfile>
|
||||
BIN
opsec/hide_monero/VM_setup.png
Normal file
BIN
opsec/hide_monero/VM_setup.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 33 KiB |
BIN
opsec/hide_monero/Whonix_vm_ready.png
Normal file
BIN
opsec/hide_monero/Whonix_vm_ready.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 26 KiB |
225
opsec/hide_monero/index.html
Normal file
225
opsec/hide_monero/index.html
Normal file
|
|
@ -0,0 +1,225 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<meta name="description" content="">
|
||||
<meta name="author" content="">
|
||||
<link rel="shortcut icon" href="../../../../../../assets/img/favicon.png">
|
||||
|
||||
<title>How to hide your monero wealth</title>
|
||||
|
||||
<!-- Bootstrap core CSS -->
|
||||
<link href="../../assets/css/bootstrap.css" rel="stylesheet">
|
||||
<link href="../../assets/css/xt256.css" rel="stylesheet">
|
||||
|
||||
|
||||
|
||||
<!-- Custom styles for this template -->
|
||||
<link href="../../assets/css/main.css" rel="stylesheet">
|
||||
|
||||
|
||||
|
||||
<!-- HTML5 shim and Respond.js IE8 support of HTML5 elements and media queries -->
|
||||
<!--[if lt IE 9]>
|
||||
<script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
|
||||
<script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
|
||||
<![endif]-->
|
||||
</head>
|
||||
|
||||
<body>
|
||||
|
||||
<!-- Static navbar -->
|
||||
<div class="navbar navbar-inverse-anon navbar-static-top">
|
||||
<div class="container">
|
||||
<div class="navbar-header">
|
||||
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
|
||||
<span class="icon-bar"></span>
|
||||
<span class="icon-bar"></span>
|
||||
<span class="icon-bar"></span>
|
||||
</button>
|
||||
<a class="navbar-brand-anon" href="\index.html">The Nihilism Blog</a>
|
||||
</div>
|
||||
<div class="navbar-collapse collapse">
|
||||
<ul class="nav navbar-nav navbar-right">
|
||||
|
||||
<li><a href="/about.html">About</a></li>
|
||||
<li><a href="/blog.html">Categories</a></li>
|
||||
<li><a href="https://blog.nowhere.moe/donate.html">Donate</a></li>
|
||||
<li><a href="/contact.html">Contact</a></li>
|
||||
</ul>
|
||||
</div><!--/.nav-collapse -->
|
||||
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- +++++ Posts Lists +++++ -->
|
||||
<!-- +++++ First Post +++++ -->
|
||||
<div id="anon2">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<a href="../index.html">Previous Page</a></br></br><p><img src="../../assets/img/user.png" width="50px" height="50px"> <ba>nihilist - 00 / 00 / 00</ba></p>
|
||||
<h1>Hide your monero wealth </h1>
|
||||
<p>In this tutorial I will show an setup how to hide your monero wealth, with plausible deniability provided by veracrypt </p>
|
||||
<p>We need a environment very similar to Nihilism's private + sensitive vm setup, so be familiar with it before continuing. Some details mentioned in the previously tutorial will be omitted here.</p>
|
||||
<p><a href="../sensitivevm/index.html">Sensitive VM setup</a></p>
|
||||
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /grey -->
|
||||
|
||||
<!-- +++++ Second Post +++++ -->
|
||||
<div id="anon3">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Initial Setup </b></h2>
|
||||
<p>According to the nihilism's tutorial, first install your kicksecure or debian <b>host OS</b>. Once you have done installing your host OS, start it in persistent mode first for setting up qemu/kvm</p>
|
||||
<p>First install all the necessary software</p>
|
||||
<pre><code class="nim">
|
||||
$sudo apt-get update; sudo apt install --no-install-recommends qemu-kvm qemu-system-x86 libvirt-daemon-system libvirt-clients virt-manager gir1.2-spiceclientgtk-3.0 dnsmasq-base qemu-utils iptables safe-rm xz-utils
|
||||
</code></pre>
|
||||
<p>Next run some necessary configuration</p>
|
||||
<pre>
|
||||
<code class="nim">
|
||||
$sudo adduser "$(whoami)" libvirt
|
||||
$sudo adduser "$(whoami)" kvm
|
||||
$sudo systemctl restart libvirtd
|
||||
$sudo virsh -c qemu:///system net-autostart default
|
||||
$sudo virsh -c qemu:///system net-start default
|
||||
</code>
|
||||
</pre>
|
||||
<p>Next create a veracrypt container on another storage device, with a big enough hidden volume according to the nihilism's tutorial</p>
|
||||
<p>Reboot your host OS into live mode, <b>live mode</b> prevents any log or other traces be written to disk. This makes sure digital forensic cannot find out the existence of our private vm</p>
|
||||
<p>In theory if you have done everything correctly according to previous tutorial, we should have a plausible deniability setup available. The <b>private</b> VM will store our decoy monero wallet. The <b>sensitive</b> VM will store our real monero wallet, which contains a lot of $$$ and might be legally questionable.</p>
|
||||
<img src="VM_setup.png" class="imgRz">
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /white -->
|
||||
|
||||
<div id="anon2">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Sensitive VM setup</b></h2> </br> </br>
|
||||
<p>First decrypt and mount your hidden veracrypt volume. Next setup Whonix gateway and workstation according to nihilism's tutorial.</p>
|
||||
<p>Once you have done setup the Whonix vms inside the sensitive VM, copy this script so you do not need to manually define the VMs everytime rebooted.</p>
|
||||
<pre><code class="nim">
|
||||
#!/bin/bash
|
||||
|
||||
if [ $(virsh -c qemu:///system list --all | grep Whonix | wc -l) -ne 0 ];
|
||||
then
|
||||
|
||||
# if the VMs are imported, remove them:
|
||||
|
||||
virsh -c qemu:///system destroy Whonix-Gateway
|
||||
virsh -c qemu:///system destroy Whonix-Workstation
|
||||
virsh -c qemu:///system undefine Whonix-Gateway
|
||||
virsh -c qemu:///system undefine Whonix-Workstation
|
||||
virsh -c qemu:///system net-destroy Whonix-External
|
||||
virsh -c qemu:///system net-destroy Whonix-Internal
|
||||
virsh -c qemu:///system net-undefine Whonix-External
|
||||
virsh -c qemu:///system net-undefine Whonix-Internal
|
||||
else
|
||||
|
||||
|
||||
# if the VMs are not imported, import them:
|
||||
|
||||
virsh -c qemu:///system net-define /mnt/veracrypt1/Whonix-external.xml
|
||||
virsh -c qemu:///system net-define /mnt/veracrypt1/Whonix-internal.xml
|
||||
virsh -c qemu:///system net-autostart Whonix-External
|
||||
virsh -c qemu:///system net-start Whonix-External
|
||||
virsh -c qemu:///system net-autostart Whonix-Internal
|
||||
virsh -c qemu:///system net-start Whonix-Internal
|
||||
virsh -c qemu:///system define /mnt/veracrypt1/Whonix-Gateway.xml
|
||||
virsh -c qemu:///system define /mnt/veracrypt1/Whonix-Workstation.xml
|
||||
fi
|
||||
</code></pre>
|
||||
|
||||
<p>Now we are supposed to have our sensitive whonix gateway and workstaiton ready, open them and upgrade the system</p>
|
||||
<img src="Whonix_vm_ready.png" class="imgRz">
|
||||
<p>Next access monero website to get the official wallet, or use any wallet you like</p>
|
||||
<p>Create a new wallet inside the sensitive workstation vm, and store the seed into the keepassx vault, remember to safely back up this VM.</p>
|
||||
<p>The setup of sensitive VM is now done, use this VM <b>only</b> for sensitive monero transactions, if you want to have other darknet activities create another dedicated workstation.</p>
|
||||
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /white -->
|
||||
|
||||
|
||||
<!-- +++++ Second Post +++++ -->
|
||||
<div id="anon1">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Private VM setup</b></h2> </br> </br>
|
||||
<p>Now we are going to set up our private VM, this part is going to differ from nihilism's tutorial. We are going to replicate <b>another</b> group of whonix workstation and gateway inside the outer veracrypt volume</p>
|
||||
<p>We are going to have a decoy monero wallet, this wallet will have much less money in it, and all the transactions are charity related.</p>
|
||||
<p>Mount the veracrypt outer volume, remember also to input the <b>hidden volume</b> password, since you <b>do not</b> want your hidden volume get destroyed!</p>
|
||||
<p>Repeat exactly what you have done in the previous section, import and setup the whonix VMs, and copy the management script to it.</p>
|
||||
<p>Once done open up the workstation VM, download a monero wallet, and create a new wallet, save the seed to the local keepass database.</p>
|
||||
<p>Occasionally open this private VM, and make some donations to open source project you like, so this VM is going to look like a legit active daily VM.</p>
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /white -->
|
||||
|
||||
<div id="anon1">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-8 col-lg-offset-2">
|
||||
<h2><b>Emergency</b></h2> </br> </br>
|
||||
<p>Now we have come to the <b>most important</b> part, which is how to handle the situation when someone has raided your house</p>
|
||||
<p><b>Situation one</b>: Your computer is not power up, you can simply give adversary the outer volume password and deny the presence of hidden volume, and your sensitive activities will be safe</p>
|
||||
<p><b>Situation two</b>: Someone kicks the door when you are using the sensitive VM, you have to setup the emergency script and shortcut mentioned in nihilism's tutorial, test it <b>multiple times</b> to make sure it works!</p>
|
||||
<p>You have to make sure your computer can be shutdown properly. I personally prefer a PC than a laptop, since directly unplug the power is always more reliable than a software implementation.</p>
|
||||
</div>
|
||||
</div><!-- /row -->
|
||||
</div> <!-- /container -->
|
||||
</div><!-- /white -->
|
||||
|
||||
|
||||
<!-- +++++ Footer Section +++++ -->
|
||||
|
||||
<div id="anonb">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-lg-4">
|
||||
<h4>Nihilism</h4>
|
||||
<p>
|
||||
Until there is Nothing left.</p></br></br><p>Creative Commons Zero: <a href="../../../../opsec/runtheblog/index.html">No Rights Reserved</a></br><img src="\CC0.png">
|
||||
|
||||
</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
<div class="col-lg-4">
|
||||
<h4>My Links</h4>
|
||||
<p>
|
||||
|
||||
<a target="_blank" rel="noopener noreferrer" href="http://blog.nowhere.moe/rss/feed.xml">RSS Feed</a><br/><a target="_blank" rel="noopener noreferrer" href="https://simplex.chat/contact#/?v=2-7&smp=smp%3A%2F%2FL5jrGV2L_Bb20Oj0aE4Gn-m5AHet9XdpYDotiqpcpGc%3D%40nowhere.moe%2FH4g7zPbitSLV5tDQ51Yz-R6RgOkMEeCc%23%2F%3Fv%3D1-3%26dh%3DMCowBQYDK2VuAyEAkts5T5AMxHGrZCCg12aeKxWcpXaxbB_XqjrXmcFYlDQ%253D&data=%7B%22type%22%3A%22group%22%2C%22groupLinkId%22%3A%22c3Y-iDaoDCFm6RhptSDOaw%3D%3D%22%7D">SimpleX Chat</a><br/>
|
||||
|
||||
</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
<div class="col-lg-4">
|
||||
<h4>About nihilist</h4>
|
||||
<p style="word-wrap: break-word;"><u>Donate XMR:</u> 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8</p></br><p><u>Contact:</u> nihilist@contact.nowhere.moe (<a href="https://nowhere.moe/nihilist.pubkey">PGP</a>)</p>
|
||||
</div><!-- /col-lg-4 -->
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
<!-- Bootstrap core JavaScript
|
||||
================================================== -->
|
||||
<!-- Placed at the end of the document so the pages load faster -->
|
||||
|
||||
</body>
|
||||
</html>
|
||||
Loading…
Add table
Add a link
Reference in a new issue