+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Covering Your Tracks (/showthread.php?tid=2101222)
Covering Your Tracks - LK) - Jan 11, 2012
[IMG]http://img600.imageshack.us/img600/1035/bourned.png[/IMG]
1) VPNRussian Server – IP Address
http://nvpn.net/
2) Tor Tunnel
No individual relay ever knows the complete path that a data packet has taken.
www.torproject.org
3) A busy Public Wifi
use a disguise and use cash only
Or
3a) Use long range wireless adapter
Several Blocks away
2000mW 2W 802.11 G / N High-Gain USB Wireless Long-Rang WiFi Network Adapter 9dBi Rubber Antenna
WEP is still used and easy to crack
WPA/WPA2 is cracked with Reaver and will recover the target AP's plain text passphrase in 4-10 hours (linux only)
[IMG]http://imageshack.us/a/img842/8572/alfap.png[/IMG]
4) Spoof Your Mac Address
http://www.technitium.com/
5) Encrypt Hard Drive or keep your hard drive wiped so that no information exists on your computer
When traveling through borders its better have a clean system than an encrypted drive because known hackers get searched
www.steganos.com
Many Linux distros have full disk encryption
6) The Amnesic Incognito Live System (TAILS)
Tails is configured with a special care to not use the computer's hard-disks, even if there is some swap space on it. The only storage space used by Tails is the RAM memory, which is automatically erased when the computer shuts down. So you won't leave any trace neither of the Tails system nor of what you did on the computer.
https://tails.boum.org/
Also use for a more secure messaging:
https://crypto.cat/
7) Cell phones can determine your location even when off.
Either take the battery out of your cell or place in a different location.
Smart phone pictures have geo tags and can determine your location
In addition to carrierIQ collects info
http://arstechnica.com/apple/news/2011/04/how-apple-tracks-your-location-without-your-consent-and-why-it-matters.ars
8) Use https://startpage.com no logs
Google keeps logs and your searches can be used against you.
http://donttrack.us/
"The U.S. government asked Google for data on its users more than 31,000 times in 2012 alone, for example. And the government rarely obtained a search warrant first, Google recently revealed; in nearly all cases, the company ended up turning over at least some data."
Additional Notes:
Evidence that can be taken in a warrant: Plan as though you were going to be raided
[IMG]http://imageshack.us/a/img685/9518/searchrj.png[/IMG]
Never have anti forensics tools on your computer or on digital media ex. CD, DVD, USB in plain sight.
Investigators have to establish a link between the IP address, computer and the person causing the activity. These steps minimise that link.
Absolutely never user your real IP and physical address.
"the Rapid Information Overlay Technology (Riot) software uses photographs on social networks. These images sometimes contain latitude and longitude details – automatically embedded by smartphones within so-called 'header data'. Riot pulls out this information, analysing not only the photographs posted by individuals, but also the location where these images were taken" source from http://www.guardian.co.uk/
[IMG]http://img9.imageshack.us/img9/8208/locqc.png[/IMG]
Microsoft seeks patent for spy tech on [IMG]http://img541.imageshack.us/img541/8168/13702359.png[/IMG] Most likely they are already doing this.
[IMG]http://imageshack.us/a/img27/4880/skypeusq.th.jpg[/IMG]
'Legal Intercept' would allow it to silently record VoIP communications.
US gov't has a Internet scouring program, code-named PRISM, that records Internet activities:
Lots of internet traffic from the west passes through the US because the destination servers are there, or connect there. Encrypting email using PGP is one possibility, though it is not easy to set up. Systems such as Tor, together with a virtual private network (VPN) connection, can cloak your location, though your identity might still be inferred from the sites you connect to.
[IMG]http://img197.imageshack.us/img197/2458/oqw9.jpg[/IMG]
www.guardian.co.uk
If you done everything correctly: Microsoft Watched but couldn't catch a hacker.
"Va.-based computer security firm Global Integrity, said Microsoft’s failure to catch the hacker is not surprising."
http://abcnews.go.com/Technology/story?id=119324&page=1
[IMG]http://imageshack.us/a/img607/3086/catchw.jpg[/IMG]
The US Supreme Court has held that "a witness may have a reasonable fear of prosecution and yet be innocent of any wrongdoing. The privilege serves to protect the innocent who otherwise might be ensnared by ambiguous circumstances."
"...any lawyer worth his salt will tell the suspect in no uncertain terms to make no statement to the police under any circumstances."
R.I.P. Aaron H. Swartz (November 8, 1986 – January 11, 2013)
[IMG]http://imageshack.us/a/img585/6549/aaronswartz791n.jpg[/IMG]
[IMG]http://imageshack.us/a/img585/6549/aaronswartz791n.jpg[/IMG]
* - prasad - Feb 11, 2012
Hii..valuable info bro.. keep going..
* - triqih - Feb 11, 2012
thx bro just what I needed 😉
this will help me alot
* - xswrain - Feb 11, 2012
6) The Amnesic Incognito Live System (TAILS)
Wouldn't the removal of swap space dramatically reduce the amount of memory that can be used?
* - Romanov - Dec 20, 2012
helpful...nice...tnx for this very much m8:)
* - LK) - Feb 13, 2013
I have updated some of the information.
* - 4RG0S - Feb 13, 2013
This is a great Thread and also great Info, but i think it is too late now. What can i do ? :)
* - Jay - Feb 13, 2013
(Feb 13, 2013 03:18 PM)4RG0S Wrote: This is a great Thread and also great Info, but i think it is too late now. What can i do ? :)
Smash your HDD and hope for the best?
* - Diаmond - Feb 13, 2013
Glad this was posted this will help people when wanting to be anonymous when doing something.
* - trinkkits - Feb 13, 2013
This is awesome. Thank you for sharing :)
* - LK) - Feb 13, 2013
(Feb 13, 2013 03:18 PM)4RG0S Wrote: This is a great Thread and also great Info, but i think it is too late now. What can i do ? :)That would be part 2. "How to protect yourself if your in panic mode"
* - Isidar - Feb 16, 2013
LK) is an awesome member!
Good luck with getting awesome reviews as this is an awesome tutorial.
* - DaFreak - Feb 16, 2013
Great information.. Thanks for Cryptocat ;)
* - LK) - Feb 16, 2013
(Feb 16, 2013 04:53 AM)DaFreak Wrote: Great information.. Thanks for Cryptocat ;)Skype you can sniff the user's IP and also with the skype resolver. (without the patch if it works).
* - SIM-1589588 - Feb 16, 2013
(Feb 13, 2013 03:27 PM)Remorse Wrote: Smash your HDD and hope for the best?
Or just drop it into sea....
@LK Nice guide mate :)