Terminal Contract Uplink Guides

Technical Exploit Flow

This module details the cycle of targeting, port scanning, scanning service databases, and initiating weaponized exploits to bypass authorization boundaries.

01. Reconnaissance

Gather targets using the broad netscan sweep. This returns a snapshot of active hosts and organizations.

02. Port Scanning

Query specific hosts using nmap <target> to analyze running services and determine which ports are open or closed.

03. Vulnerability Discovery

Run metasploit <target> to trigger the local scan database, highlighting outdated service configurations or unpatched buffer flaws.

04. Execution

Execute the weaponized payload via exploit <vuln_id> <target>. Once penetration completes, root access is granted, allowing persistent shell pivots.

Lateral Movement & Pivoting

Pivot your command terminal sessions through compromised machines to hide your origin and access internal company networks.

01. Building the Connection Chain

Establish a multi-device connection chain using the ssh <target> command. Each hop forwards your shell traffic, extending your reach to networks that are not publicly visible.

02. Managing the Pivot Shell

Verify your connection topology using the pivot command. This lists the sequence of machines (nodes) your traffic is currently routed through. To backtrack one node, type exit or disconnect.

03. Credential Registry

Type credentials to view all usernames and passwords siphoned or cracked during operations. When you establish a connection to a host whose credentials are known, the system will attempt an auto-login.

Phishing Campaigns

Orchestrate social-vector traps targeting network users to extract authorization codes or route bank credentials.

01. OSINT Harvesting

Collect target email addresses using OSINT search options in Doxxter. Mailings to unverified addresses fail SMTP checks.

02. Selecting Decoys

Assign pretexts to campaigns (e.g. security_update or invoice_overdue) to maximize credibility.

03. Sending the Payload

Initiate using phish send <email> <decoy> --motivation <intel|financial>. Financial campaigns bypass database steps to siphon funds directly to your wallet.

Social Engineering

Engage direct target voice calls (vishing) to trick employees into resetting database credentials or authenticating compromised nodes.

01. Phone Trailing

Use OSINT to harvest NPC phone numbers. Connections are rejected unless target routes are cached in your knowledge pool.

02. Establishing the Link

Run social-eng call <name> <pretext>. Immersive sound feeds ring target lines automatically.

03. Pretext Selection

Formulate pretexts (e.g. tech_support or billing_dispute) to lower the target awareness tier and trigger resets.

Password Cracking

Deploy wordlists and brute force attacks to compromise SSH logins, harvest local credentials, and manage trace heat.

01. Service Enumeration

Analyze target devices with nmap <target> to ensure login services (e.g. SSH port 22) are open and responsive.

02. Deploying the Cracker

Run cracker <target> (or aliases bruteforce / crack) to automatically trigger and focus the graphic Password Cracker Panel on the host.

03. Dictionary & Mode Selection

Choose your attack mode (DICT, BRUTE, or HYBRID). Cycle through your owned wordlists in the options bar (such as the standard Common Passwords list, or elite purchased leaks like RockYou 2024).

04. Cracking & Log Insertion

Launch the attack. Once cracked, credentials automatically store in your local system registry (viewable via credentials) and fill connected login panels, granting access while generating incremental network trace heat.

Malware & Botnet C&C

Deploy background agents, construct persistent C&C networks, and launch massive coordinated operations.

01. Payload Deployment

Deploy agents via infect <target> <malware_type> or open the visual console using infect <target>.

02. C&C Enrollment

Trojans and Worms auto-enroll infected targets. Upgrade maximum fleet capacity via the Botnet Upgrade Manager.

03. Coordinated Strikes

Dispatch fleet tasks like CryptoMine (passive income), DataExfil, or Overwhelm (saturating firewalls to force vulnerability state decay).

Bank Hacking & Money Laundering

Target financial institutions, query account logs, route wire transfers, and scrub transaction trails.

01. Accessing the Database

Compromise bank database hosts and run the bank command to load the Bank Hacking Panel.

02. Account Queries

Search account logs to trace checking/savings balances, transaction history details, and customer information.

03. SQLi & Transfers

Deploy SQL Injection modules to alter balances or route wire transfers directly to your shadow wallet.

Records Database Queries

Route remote database access, query citizens/students records, and extract high-value research assets.

01. Auto-Routing Connections

Logging into a compromised database server (running SQL or educational services) automatically opens specialized visual panels (e.g. Criminal Records, Student Transcripts).

02. Executing Queries

Query record tables for identity hashes, warrants, or educational files.

03. Exfiltrating Data

Harvest research data or PII records to sell to darknet data brokers for credit paydays.

Utility & Smart Grid Control

Lookup, monitor, and manipulate industrial smart meters and electrical utility grids to fulfill contracts or disable firewalls.

01. Infrastructure Lookup

Scan for utility devices and smart meters on a network using util-lookup. This identifies sub-stations and grid IDs.

02. Checking Utility Status

Check the active load and service status of a sub-station using util-status <grid_id>. This reveals transformer temperatures and power grid telemetry.

03. Suspending Grid Nodes

Distract security personnel or fulfill sabotage contracts by shutting down specific sectors with util-suspend <grid_id>. To restore power and normalize trace metrics, run util-restore <grid_id>.

Cyber-deck Upgrades & Diagnostics

Manage your hardware rig's technical specifications to optimize hacking efficiency and decrease network exposure.

01. Running Diagnostics

Type deck (or click the start menu launcher icon) to load the **Cyber-deck Diagnostics Panel**. This displays your CPU clock speed, RAM usage, storage capacity, and active trace risk multipliers.

02. Upgrading Core Hardware

Spend your siphoned crypto in the upgrades section of the Shadow Market to level up your rig:

• CPU (Processor): Multiplies password cracking calculation speed.
• RAM (Memory): Increases the maximum concurrent active nodes in your SSH pivot chains.
• NIC (Network Card): Accelerates data exfiltration download and upload speeds.
• HDD (Storage): Increases capacity for download payloads. Use rm to free up space.

Contracts & Operator Progression

Manage active mission objectives, claim monetary rewards, track operator statistics, and review your history log.

01. Contract Hub (GigHub)

Type contracts (or missions / hub) to open the GigHub panel. Review available operations, track/untrack specific targets, and review objectives. Active contracts dynamically stream storyline background music.

02. Operator Progression

Run the progression (or stats) command to view your operator level, current experience points (XP), and global reputation scores. The UI displays your level milestones and progress bars.

03. Persistent Reward Log

Click the **REWARDS** tab in the progression panel to browse a persistent, timestamped transaction ledger showing all earnings, bonuses, and stipends credited to your bank account with explicit descriptions.

Mail & Chirp Feed Clients

Read encrypted shadowmail messages, receive real-time mentor instructions, and monitor social feeds for OSINT clues.

01. Secure Mail (Shadowmail)

Type mail (or email) to access your secure client. Read incoming briefs, accept mission contract attachments, and click the **MANAGER** button on contracts to navigate directly to their GigHub details.

02. ECHO Messenger

ECHO acts as your real-time secure communication link with mentors and handlers (e.g. Admin). It automatically slides up to display staggered context notifications and narrative direction during operations.

03. Chirp Feed

Launch the social media client using chirp (or feed). Monitor social network updates to collect personal details, employee titles, and security credentials for targeted vishing pretexts.

Shadow Marketplace

Spend cryptocurrency to purchase exploit scripts, custom dictionaries, and hardware modules from underground vendors.

01. Accessing the Market

Type market to view available wares. Listings are divided between software acquisitions, information data feeds, and hardware enhancements.

02. Purchasing Applications

Buy premium command line tools like nmap, cracker upgrades, or custom dictionaries. Purchased tools are added to your local applications registry and can be installed on remote machines using install <tool>.

Forensics & Log Management

Monitor security track alerts, trace connection logs, and perform selective record scrubbing to maintain stealth.

01. Connection Footprints

Exploits and SSH events write audit trails to target logs. Left uncleaned, investigators will trace IPs back to your gateway.

02. Viewing Logs

Execute viewlog to load the Log Viewer Panel, which automatically updates to follow your active pivot server.

03. Selective Shredding

Select target logs and run clearlog <log_id> to trigger the visual secure shredder, removing traces without raising system alerts.