+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: OpSec and OSINT (https://hackforums.net/forumdisplay.php?fid=322)
+---- Thread: [MEGA] How to prevent yourself from getting DOX'ed, Simple steps that can make you completely anonymous online[MEGA-TUT] (/showthread.php?tid=1479245)
[MEGA] How to prevent yourself from getting DOX'ed, Simple steps that can make you completely anonymous online[MEGA-TUT] - Sweat Heart - Jul 13, 2011
![[Image: uQSyy.jpg]](https://i.imgur.com/uQSyy.jpg)
***This thread will be updated from time to time (if I find new ways to get traced)***
Hello, well after releasing some basic things in my e-book I thought well let me write a little piece on it.
DISCLAIMER:
Because this knowledge can be used to protect yourself and to DOX others, I (Sweat Heart)
do not take any responsibly for the info I provide. By using this tutorial and knowledge you
have the ability to do illegal activities. May I remind you that SWAT'ing is highly illegal,
and several arrest have been after calling in a SWAT. Don't use this the wrong way
but secure yourself from getting SWAT'ed or DOX'ed.
If you don't know what DOXing is, please read this (Click to View)
Credits to Cubical
Or read this to understand what DOXing is. By Cubical
Intro
What do you don't want to get found online? Your bank and your Facebook. So make sure you use other info for those two. Facebook and other sites have many privacy settings. Customize them to your stealth level :D
- http://www.facebook.com/settings/?tab=privacy
- https://hackforums.net/usercp.php?action=options (click on 'hide my email')
- https://www.paypal.com/webapps/customerprofile/summary.view (change personal details)
- http://twitter.com/settings/account ("Let other find my by my email")
Paypal tip suggest by Baker
Do not have your address or very personal Information on Ur Paypal . This is because it is a very sneaky but cunning way of getting information . To do this . Sign in on your Paypal and go to Request money . Then type in the email you want aand select 1$ and set money request to goods . Then when the request is sent the person can click on the request tab thing and can see such things as Address , name . Easy way of getting dox .
We will talk later in this tut about private information, thanks for adding baker
Usage of emails
The usage of e-mails, everyone has their official e-mail. Usually their full name, so make another account for all your other shit! It's not that hard, a gmail account is easy made!
email for hacking suggested by agentannon
Well, I asume this goes without saying, but use a different email for your Haxoring activities than your private life. I have my hacking email as the email of my alias so that if anyone finds it, it might send them in the wrong direction. I also hate signing into different email accounts so I never log into my hacking account, I just set up a filter (it's a Gmail) so that it forwards ALL my mail to my normal email account.
Ten minutes mail!
I like this one allot, I got it from a friend.
You can use this Spoiler (Click to View) as a mail to register. Works really good!
![[Image: a3yx5.png]](https://i.imgur.com/a3yx5.png)
Tracing IP's from Emails
Yes this is possible, when you send an email your IP will be send within. Let me show you;
Pics are a bit fucked up sorry
I will use this mail that is fake
![[Image: D70ql.png]](https://i.imgur.com/D70ql.png)
The source
![[Image: vyid7.png]](https://i.imgur.com/vyid7.png)
This doesn't work when send trough VPN/Proxy/VPS crap like that. This also can be send by a site, you can do a WHOIS on the IP or check if it's blacklisted by Google'ing the IP.
This message is send encrypted (base 64)
Just to show you how that looks:
![[Image: sfZM3.jpg]](https://i.imgur.com/sfZM3.jpg)
Encoding this message (don't do anything this says)
If you encode this message on http://crypo.com/eng_base64c.php you get this This isn't very much related to DOX'ing (the encryption part) but it's just interesting :D
Posting real info
Never post your real info online! I haven't filled a register seriously since 2001 something. The simplest things might scare you. Example I needed to register for some booter, and it asked for my HF username. Then I figured once I connect to the site he has my IP and when I give him my HF username he can link the two. What gives him a massive database of HF IP adresses. Always think with caution.
Online Register
Online register. I suggest to take a BS name for only, I use the name John Travolta. Why? This name seems to be normal so auto-correction wont go crying and well yeah you can't get traced
Fake name generator suggested by 0dium
Make a full name with address and things on:
http://www.fakenamegenerator.com/
Pretty handy
Computer name and Meta Data
Your computer name! When you make an office file your name gets binded to that file. So when your computer name has your full name and you share a .DOC file everyone can simply check out your full name
SKYPE!
Using skype is the easiest way to get IP's. Be extremely cautions with that. I never give out Skype to people I don't know. I suggest using MSN or chat apps for chatting with unknown people.
Links given by other
IP trackers are good these days, someone says check this thread and uses a bitly to redirect to a fake page. And they have your IP.
[img=150x150]http://www.moviefilmreview.com/wp-content/uploads/2010/05/important.png[/img]
If you're afraid to open a link, use a proxy. I have set up a simple proxy PM me for it. It's fast and used by 5 people at the moment, or use my e-book to setup TOR browser or use Hotspot Shield VPN which I can recommend.
PHP image trackers
These are the hardest, there is a way to track IP's using a image. Just try to remember most uploading sites and maybe even ask if the person can upload the file to there
How to notice
Usually they are like this
Code
www.domain.com/awesometits.jpg/Noticed the / after the .jpg? That means it's a directory, not a picture.
When you connect to a site
Be aware that the site will store your IP, and is visible in a log view-able by the owner
When they got your IP
Don't worry he wont h4x0rrRz you, but he is in most cases able to find out where you live. (the town) When you are a SE legend you may find out the address but nothing more. Only when you have a computer from 1800 he's able to hack you trough IP. Just make sure to have proper AV's installed. (Not saying you can't get hacked trough IP, but it's extremely hard.)
I'm getting (D)DOS'ed, now what
When this is a DOS attack I suggest downloading WireShark and getting the IP of the person attacking you.
When this is a DDOS, and you're getting attacked regular. Call your ISP (Internet Service Provider) and tell them, they will change your IP.
(You can't know when you're getting attacked so running a live capture in WireShark never hurts :D)
If you have a dynamic IP
Unplug your router, wait some time and restart
Linking to accounts
When you have your mail on your youtube and you link someone your account they can see your email and they can try to trace that.
Tracing back using Facebook pictures (tutorial of Captain Awesome!, full credits to him!)
His tutorial (will look like this one ;) CLICK ME
NOTE: This happens when you upload this to a FTP or a website (I think Photobucket does it as well), because this will keep the file-name is it is. Let's say you have puppy.png it would be www.domain.com/puppy.png (if uploaded in root). If it's uploaded to let's say minus it will become minus.com/(random_numbers). In that case download the file and check the name using 'properties'
Example Image
[img]http://profile.ak.fbcdn.net/hprofile-ak-snc4/195292_10738811_1141178_n.jpg[/img]
Now as you can see the name of this picture is .profile.ak.fbcdn.net/hprofile-ak-snc4/195292_10738811_1141178_n.jpg
Now using the middle numbers 195292_10738811_1141178_n.jpg (this can change in length, this is the userID)
Now put that number after the 'id='
Code
http://www.facebook.com/profile.php?id=becomes
Code
http://www.facebook.com/profile.php?id=10738811Prevent this from happening
Simply change the file-name before uploading online.
OR, use another suggestion by Baker
If anyone seems to find your facebook a thing you can do to stop it is this .
Go to http://www.facebook.com/username/
Then you can type what ever you want and it will change ur URL .
So from like : http://www.facebook.com/profile.php?id=100153119193
To like : http://www.facebook.com/Bakeriscool
Great security tip . Then change ur profile pic and add a symbol in ur name so they dont find you again .
Trying out your own DOX
Check one of these sites:
- www.pipl.com (recommended best one)
- www.wink.com
- www.123people.com
- www.zabasearch.com
And these for your address (mostly US)
Try out your full name, emails and game tags. Try finding info you don't want showing up!
Family on Facebook
When you link your account to someone that's your family think about the consequences that may have!
PHOTO INFO!
Important one! When you make a photo with your smartphone TURN OFF GPS! When you make a photo while having GPS on everyone is able to see the exact location of that photo. Example you upload a photo saying just chilling on FB and your girlfriends see that the picture is shot a girls house.
Photo tip by Crash-Override
Whenever you post a image in forum, just don't upload the real image. Its way safer to snapshot the real image using snipping tool and then uploading it to image-servers.
By doing this all image data's like geo tagging, etc can be hidden.
Uploading photo's on multiple places
Let's say I have a blog of my family, I upload photos of my girlfriend the dog and other things. And now I want to share a picture on HF.
What I always do is cover up the eyes of my GF, I don't need people fapping on my girl. But what you don't think of is that this picture can be search even when it's censored.
Example
![[Image: yI0U4.jpg]](https://i.imgur.com/yI0U4.jpg)
You think it's all good you covered the eyes and. But now I do this
![[Image: o2zQX.png]](https://i.imgur.com/o2zQX.png)
And what do I find?
![[Image: l2NUL.png]](https://i.imgur.com/l2NUL.png)
All the places this picture is uploaded, without the censored things.
This does not work for Facebook, since the crawlers of the site can't acces
WHOIS Scan
For the site owners, be aware that a person always can do a WHOIS scan on your site.
WHOIS of Google (Example)
http://networktools.nl/whois/www.google.com
Code
google.com
Registrar Name: Markmonitor.com
Registrar Whois: whois.markmonitor.com
Registrar Homepage: http://www.markmonitor.com
Administrative Contact:
DNS Admin
Google Inc.
1600 Amphitheatre Parkway
Mountain View CA 94043
US
[email protected] +1.6506234000 Fax:
+1.6506188571
Technical Contact, Zone Contact:
DNS Admin
Google Inc.
2400 E. Bayshore Pkwy
Mountain View CA 94043
US
[email protected] +1.6503300100 Fax:
+1.6506181499
Created on..: 1997-09-15.
Expires on..: 2011-09-13.
Record last updated on..: 2011-02-05.
Domain servers in listed order:
ns1.google.com
ns3.google.com
ns4.google.com
ns2.google.comYour server.exe
Oke this one goes a little bit far, but you can infect a computer and see the connection of the .exe
This will be to the attackers IP, unless you use a VPN to connect.
Think of programs like, Spoiler (Click to View)
Sending data
When you think you're fully anon (You're on a VPN without logs, and you bought the VPN with fake info etc. etc.) your ISP (Internet Service Provider) can always see what you're doing. unless you encrypt your data using a SSL connection to sites.
Don't think you can distribute CP (example of something highly illegal, don't freak out) because your IP can't be back traced.
Think!
Think smartly where to put what info, this can help you allot
A SWAT
This is only in US.
I'm not trying to scare people, but this is a video of a SWAT.
video (Click to View)
Do you have ways of getting traced and know how to solve them? Please post or PM them and I will put them in the thread. (With the full credits and your name)
Try to make yourself save online. It's simple.
Be safe on the internet, Sweat
DISCLAIMER:
Because this knowledge can be used to protect yourself and to DOX others, I (Sweat Heart)
do not take any responsibly for the info I provide. By using this tutorial and knowledge you
have the ability to do illegal activities. May I remind you that SWAT'ing is highly illegal,
and several arrest have been after calling in a SWAT. Don't use this the wrong way
but secure yourself from getting SWAT'ed or DOX'ed.
Please say thanks, so more people can enjoy this ;)
©Written by Sweat Heart (Credits given where needed)
* - 934891234031412343 - Jul 13, 2011
Nice tut. rated 5 Stars. I don't care if someone is Doxing me tbh. If it doesn't happends today. It will happen any other day :)
Take care
* - Sweat Heart - Jul 13, 2011
(Jul 13, 2011 12:45 PM)AlpaslanJackMemo Wrote: Nice tut. rated 5 Stars. I don't care if someone is Doxing me tbh. If it doesn't happends today. It will happen any other day :)
Take care
Hey thanks buddy! Hah well yeah I'm trying to let it never happen. :D
* - Sonic - Jul 13, 2011
Why do you spell "So" "Sow", it's pretty annoying.
* - Sweat Heart - Jul 13, 2011
(Jul 13, 2011 12:46 PM)Sonic Wrote: Why do you spell "So" "Sow", it's pretty annoying.
Don't know, let me change that.
* - Evil. - Jul 13, 2011
Great tutorial, will help alot of people out, keep the HQ work up!
* - creepycreeper - Jul 13, 2011
good one... actually i'm quite surprised that I can't think of nothing to add...
* - King James - Jul 13, 2011
Very nice guide dude. I haven't been doing stuff like that for 2 years, heh.
* - Nullusia - Jul 13, 2011
Nice guide, taught me a thing or two I never actually knew like the .DOC thing :P
* - Sweat Heart - Jul 13, 2011
(Jul 13, 2011 01:29 PM)Richie Wrote: Very nice guide dude. I haven't been doing stuff like that for 2 years, heh.
I think DOXing is childish but you need to prepare for it :D
* - Joey Tribbiani - Jul 13, 2011
Though I consider this as common sense, some people lack that as well. So, good job explain everything. And yeah, it is extremely easy to get anyone's IP on HF.
* - ⚖️ Lollipop ⚖️ - Jul 13, 2011
Amazing tutorial 5 star well done.
* - Sweat Heart - Jul 13, 2011
(Jul 13, 2011 01:42 PM)Joey Tribbiani Wrote: Though I consider this as common sense, some people lack that as well. So, good job explain everything. And yeah, it is extremely easy to get anyone's IP on HF.
Best cure to not getting DOXed is common sense :D
* - Αlpha - Jul 13, 2011
How can i find someones Ip trough skype?
* - Sweat Heart - Jul 13, 2011
(Jul 13, 2011 02:06 PM)chukko1 Wrote: How can i find someones Ip trough skype?
http://www.net-peeker.com/
There are some tuts on it.