Terminal Contract Uplink Guides

Interface Modes (CLI vs GUI)

Terminal Contract supports dual playstyles, allowing you to operate via traditional terminal commands or interact visually with the cinematic desktop.

01. CLI vs GUI Playstyles

Select the control style that fits your operation:

• Command Line Interface (CLI): Run raw commands in the terminal window to scan, exploit, and pivot. Many tools support command aliases for speed (e.g. metascan for metasploit).
• Graphical User Interface (GUI): Open visual applications (such as the Netscan Map, Doxxter, or PhishTank) to perform visual hacks and monitor status.

02. Right-Click Radial Menu

Right-click anywhere on the desktop background to open the Radial Menu. From this circular HUD, you can access your core offensive tools:

• CRACKER: Launches the Password Cracker.
• MALWARE: Opens a sub-menu to select malware payloads (Keylogger, Ransomware, Trojan, Rootkit, Spyware, Worm).
• REPORTS: Opens scanner reports.
• TERMINAL: Opens a new terminal session.

03. Pull-and-Snap Tool Dragging

Many radial menu tools are deployed via drag-and-drop:

• Deploying Cracker: Drag the CRACKER icon from the radial menu and drop it onto an active SSH Login Panel to target that host.
• Deploying Malware: Select a payload from the MALWARE sub-menu, drag it, and drop it onto the Device Inspection Panel of a compromised node.
• Deploying Terminal: Drag the TERMINAL icon and drop it directly onto any clickable CLI badge to instantly launch the terminal and pre-fill that command.

04. Clickable CLI Badges

Mission steps in the GigHub contract manager display dual tips labeled [CLI] and [GUI]. Click on any [CLI] badge to open a quick-action popup:

• INSERT: Plays a digital particle animation as the command is sent directly into your terminal prompt.
• COPY: Copies the command text directly to your clipboard.

Technical Exploit Flow

This module details the cycle of targeting, port scanning, scanning service databases, and initiating weaponized exploits to bypass authorization boundaries.

01. Reconnaissance

Gather targets using the broad netscan sweep. This returns a snapshot of active hosts and organizations.

02. Port Scanning

Query specific hosts using nmap <target> to analyze running services and determine which ports are open or closed.

03. Vulnerability Discovery

Run metasploit <target> (alias: metascan) to trigger the local scan database, highlighting outdated service configurations or unpatched buffer flaws.

04. Execution

Execute the weaponized payload via exploit <vuln_id> <target>. Once penetration completes, root access is granted, allowing persistent shell pivots.

Lateral Movement & Pivoting

Pivot your command terminal sessions through compromised machines to hide your origin and access internal company networks.

01. Building the Connection Chain

Establish a multi-device connection chain using the ssh <target> command. Each hop forwards your shell traffic, extending your reach to networks that are not publicly visible.

02. Managing the Pivot Shell

Verify your connection topology using the pivot command. This lists the sequence of machines (nodes) your traffic is currently routed through. To backtrack one node in your chain, type exit. To close the entire chain and return to your local machine instantly, type disconnect.

03. Credential Registry

Type credentials to view all usernames and passwords siphoned or cracked during operations. When you establish a connection to a host whose credentials are known, the system will attempt an auto-login.

Phishing Campaigns

Orchestrate social-vector traps targeting network users via email and SMS to extract authorization codes or route bank credentials.

01. OSINT Harvesting

Collect target email addresses and phone numbers using OSINT search options in the Doxxter panel (or via osint <name> / social-search). Campaign deliveries to unverified targets will fail trust verification checks.

02. Sending the Payload (Email Phishing)

Initiate email campaigns using phish send <email> <decoy> [--motivation <intel|financial>] [--target <goal>]. You can also orchestrate campaigns graphically inside the PhishTank (or via the phish command).

03. Smishing (SMS Phishing)

Launch targeted SMS campaigns via sms-phish send <name> <bait> [--motivation <intel|financial>] [--target <goal>]. This allows routing mobile wallets or pulling target intelligence direct to your terminal.

04. Burner Identities & Domain Blocks

If a phishing or smishing campaign is ignored or detected, target firewalls may burn your sending domain or SMS gateway number. Buy fresh spoofed domains or smishing gateways from the BURNER LINES tab in the Shadow Market to clear blocks and try again.

Social Engineering & Deepfake Voice Vishing

Engage direct target voice calls (vishing) to trick employees into resetting database credentials, revealing access keys, or authenticating compromised nodes.

01. Harvesting Voice Samples

Before targeting high-security employees, you must harvest their voice audio. Run dial <name_or_number> [--pretext <wrong_number|survey|silent|support>] to launch the Phone Dialer (Voice Harvester GUI) and record their speech pattern during brief VoIP dialog calls.

02. AI Deepfake Synthesis

Once you acquire sufficient raw samples (100% progress), execute voice-synth train <target_name> to render a cloned deepfake model in the Voice Synth Studio. List active deepfakes with voice-synth list.

03. Vishing Campaigns

Execute voice spoofing via social-eng call <name> <pretext> [--motivation <type>]. Pretexts include tech_support, billing_dispute, or survey. High-Security targets will reject calls unless you have a compiled deepfake model of their identity to pass biometric voice authentication.

04. Burner Phone Lines

If a target hangs up or flags your call as suspicious, your active line will be burned. Purchase a fresh disposable burner phone line in the Shadow Market to restore outbound vishing capability.

Password Cracking

Deploy wordlists and brute force attacks to compromise SSH logins, harvest local credentials, and manage trace heat.

01. Service Enumeration

Analyze target devices with nmap <target> to ensure login services (e.g. SSH port 22) are open and responsive.

02. Deploying the Cracker

Run cracker <target> (or aliases bruteforce / crack) to automatically trigger and focus the graphic Password Cracker Panel on the host.

03. Dictionary & Mode Selection

Choose your attack mode (DICT, BRUTE, or HYBRID). Cycle through your owned wordlists in the options bar (such as the standard Common Passwords list, or elite purchased leaks like RockYou 2024).

04. Cracking & Log Insertion

Launch the attack. Once cracked, credentials automatically store in your local system registry (viewable via credentials) and fill connected login panels, granting access while generating incremental network trace heat.

Malware & Botnet C&C

Deploy background agents, construct persistent C&C networks, and launch massive coordinated operations.

01. Payload Deployment

Deploy agents via infect <target> <malware_type> (or aliases: deploy, botcommander, botcmd) or drag-and-drop a payload from the right-click radial menu directly onto the Target Inspection panel of a compromised node.

02. Malware Types & Unlocks

Select your malware payload based on mission goals:

• Rootkit: Compromises the system kernel, granting Root (Admin) privilege and unlocking forensic log manipulation commands (scrub, clearlog, editlog, logtool) on the host.
• Trojan / Worm: Establishes C&C backlinks and auto-enrolls the target in your botnet fleet.
• Keylogger / Spyware: Captures credentials and exfiltrates target data.
• Ransomware: Encrypts local files to disrupt operations.

03. Coordinated Strikes

Dispatch botnet fleet tasks like CryptoMine (passive income), DataExfil, or Overwhelm (saturating firewalls to force vulnerability state decay) from the Botnet Attack Panel (command: botattack).

Bank Hacking & Money Laundering

Target financial institutions, query account logs, route wire transfers, and scrub transaction trails.

01. Accessing the Database

To load the visual Financial Database (Bank Hacking Panel), establish an active SSH connection to a compromised bank database server. Alternatively, run the bank (alias: financial-records) command from the terminal, or click the FINANCIAL DATABASE context button in the Device Inspection Panel.

02. Account Queries

Search account logs to trace checking/savings balances, transaction history details, and customer information.

03. SQLi & Transfers

Deploy SQL Injection modules to alter balances or route wire transfers directly to your shadow wallet.

Records Database Queries

Route remote database access, query citizens/students records, and extract high-value research assets.

01. Auto-Routing Connections

Logging into a compromised database server (via SSH) automatically routes you to the matching visual database panel:

• Criminal Records Database: Launches on criminal records servers. CLI: record-search <name> (aliases: db-query, db-search).
• Education Records Database: Launches on university records servers. CLI: edu (alias: university-records).
• Corporate Research Database: Launches on corporate espionage/research servers. CLI: corpespionage (alias: org-view).
• Financial Database: Launches on banking database servers. CLI: bank (alias: financial-records).
• Utility Control System: Launches on smart grid database servers. CLI: util-lookup.

02. Executing Queries

Query record tables for identity hashes, warrants, or educational files.

03. Exfiltrating Data

Harvest research data or PII records to sell to darknet data brokers for credit paydays.

Utility & Smart Grid Control

Lookup, monitor, and manipulate industrial smart meters and electrical utility grids to fulfill contracts or disable firewalls.

01. Infrastructure Lookup

Scan for utility devices and smart meters on a network using util-lookup <address>. This identifies account numbers and service zones. Executing util-lookup with no arguments opens the visual Infrastructure Control Panel.

02. Checking Utility Status

Check the active load and service status of a sub-station or smart meter using util-status <account-number>. This reveals transformer temperatures and power grid telemetry.

03. Suspending Grid Nodes

Distract security personnel or fulfill sabotage contracts by shutting down specific sectors with util-suspend <account-number>. To restore power and normalize trace metrics, run util-restore <account-number>.

Cyber-deck Upgrades & Diagnostics

Manage your hardware rig's technical specifications to optimize hacking efficiency and decrease network exposure.

01. Running Diagnostics

Type deck (or click the start menu launcher icon) to load the **Cyber-deck Diagnostics Panel**. This displays your CPU clock speed, RAM usage, storage capacity, and active trace risk multipliers.

02. Upgrading Core Hardware

Spend your siphoned crypto in the upgrades section of the Shadow Market to level up your rig:

• CPU (Processor): Multiplies password cracking calculation speed.
• RAM (Memory): Increases the maximum concurrent active nodes in your SSH pivot chains.
• NIC (Network Card): Accelerates data exfiltration download and upload speeds.
• HDD (Storage): Increases capacity for download payloads. Use rm to free up space.

Contracts & Operator Progression

Manage active mission objectives, claim monetary rewards, track operator statistics, and review your history log.

01. Contract Hub (GigHub)

Type contracts (or aliases: missions / hub) to open the GigHub panel. Review available operations, track/untrack specific targets, and review objectives. Active contracts dynamically stream storyline background music.

02. Operator Progression

Run the progression (or alias: stats) command to view your operator level, current experience points (XP), and global reputation scores. The UI displays your level milestones and progress bars.

03. Persistent Reward Log

Click the **REWARDS** tab in the progression panel to browse a persistent, timestamped transaction ledger showing all earnings, bonuses, and stipends credited to your bank account with explicit descriptions.

Mail & Chirp Feed Clients

Read encrypted shadowmail messages, receive real-time mentor instructions, and monitor social feeds for OSINT clues.

01. Secure Mail (Shadowmail)

Type mail (or alias: email) to access your secure client. Read incoming briefs, accept mission contract attachments, and click the **MANAGER** button on contracts to navigate directly to their GigHub details.

02. ECHO Messenger

ECHO acts as your real-time secure communication link with mentors and handlers (e.g. Admin). It automatically slides up to display staggered context notifications and narrative direction during operations.

03. Chirp Feed

Launch the social media client using chirp (or alias: feed). Monitor social network updates to collect personal details, employee titles, and security credentials for targeted vishing pretexts.

Shadow Marketplace

Spend cryptocurrency to purchase exploit scripts, custom dictionaries, burner lines, and hardware modules from underground vendors, or sell stolen data.

01. Accessing the Market

Type market to view available wares. Listings are divided between software acquisitions, hardware enhancements, and burner lines. Use market sell_all to instantly bulk-sell all gathered intel to data brokers.

02. Purchasing Applications

Buy premium command line tools like nmap, cracker upgrades, or custom dictionaries. Purchased tools are added to your local applications registry and can be installed on remote machines using install <tool>.

03. Burner Lines & Gateways

Navigate to the BURNER LINES tab to provision fresh spoofed email domains (for phishing), disposable phone lines (for vishing), or SMS GSM gateways (for smishing) when your current lines become burned by targets.

Forensics & Log Management

Monitor security track alerts, trace connection logs, and perform selective record scrubbing to maintain stealth.

01. Connection Footprints

Exploits and SSH events write audit trails to target logs. Left uncleaned, investigators will trace IPs back to your gateway.

02. Viewing Logs

Execute viewlog (alias: logtool) to load the Log Viewer Panel, which automatically updates to follow your active pivot server.

03. Privilege Requirements

You cannot manipulate logs on a device unless you have **Root** (Admin) credentials. If root credentials are unknown, deploy a **Rootkit** malware payload onto the compromised device to force privilege escalation and unlock log features.

04. Automated & Manual Scrubbing

To remove log entries:

• Intelligent Sweep (scrub): Execute scrub to automatically identify and wipe all log entries containing your connection chain's IPs or hostnames.
• Targeted Overwrite (clearlog): Select a target log ID and run clearlog <log_id> to trigger the visual secure shredder, removing traces without raising alerts. Use clearlog --all [--stealth] to wipe everything.