[Lemonadeisprettydamngood]

how can I find an cloudflare IP? it wont work when I use CloudFlare Resolver.

[#BORNE]

Try a calculator or an rpg game they can be a good challenge

Appreciate you getting back to me so quickly, will keep these projects in mind.

[Th3PonyWizard]

how can I find an cloudflare IP? it wont work when I use CloudFlare Resolver.

Use your mind. Whether it's pinging out common subdomains or abuse the activation SMTP method, it's about getting the system puke out the IP for you by using one of it's services.

[Komodo]

Not being a mandatory assignment for the sake of doing "my" part, it's for the sake of the community as a whole because they're more than "just" need it.

This was not the reason I closed the old thread.
Even after it stopped being a Mandatory Assignment, I kept it alive.
Members stopped posting in it.

[Brule]

I'm neither a member of The Empire, but I'll be more than happy to serve some help & knowledge.🤝

[King Cin]

This is the hacking helpdesk of The Empire, not to be rude but outsiders shouldn't post anwers here. If you really want to help people that post here and you're not a member of The Empire, please PM them.

[Th3PonyWizard]

This is the hacking helpdesk of The Empire, not to be rude but outsiders shouldn't post anwers here. If you really want to help people that post here and you're not a member of The Empire, please PM them.

I don't care who helps here as long as he knows his shit

[King Cin]

I don't care who helps here as long as he knows his shit

Oh well, if it's okay with you--disregard what I said.

[ѕнα∂σω]

Hi. I'm currently trying to "learn" networking.

I understand what an IP is, but it seems that there is more to it than I understand. There seem to be a few different types. For example, what is the difference between a 192.168.x.x and your normal 74.x.x.x? Is the first reserved for use in LANs? Meh - haven't found a definitive answer that I understand. For example: the result of the 'route' command in Linux.

Code

Kernel IP routing table
Destination     Gateway      Genmask      Flags Metric Ref    Use Iface
default      192.168.8.1     0.0.0.0      UG    0      0      0 wlan0
link-local      *      255.255.0.0     U     1000   0      0 wlan0
192.168.8.0     *      255.255.255.0   U     9      0      0 wlan0

What do the 192.168.8.1 and the 192.168.8.0 mean? Why is one under Destination and the other under Gateway? If I'm not mistaken, the gateway address is the router IP - it connects me to the internet and is what I would use if I were to access the router control panel.

Sorry if I'm spewing shit - I haven't wrapped my head around this yet, and you seem quite knowledgeable with this.

[cyberducky]

Hi. I'm currently trying to "learn" networking.

I understand what an IP is, but it seems that there is more to it than I understand. There seem to be a few different types. For example, what is the difference between a 192.168.x.x and your normal 74.x.x.x? Is the first reserved for use in LANs? Meh - haven't found a definitive answer that I understand. For example: the result of the 'route' command in Linux.

Code

Kernel IP routing table
Destination     Gateway      Genmask      Flags Metric Ref    Use Iface
default      192.168.8.1     0.0.0.0      UG    0      0      0 wlan0
link-local      *      255.255.0.0     U     1000   0      0 wlan0
192.168.8.0     *      255.255.255.0   U     9      0      0 wlan0

What do the 192.168.8.1 and the 192.168.8.0 mean? Why is one under Destination and the other under Gateway? If I'm not mistaken, the gateway address is the router IP - it connects me to the internet and is what I would use if I were to access the router control panel.

Sorry if I'm spewing shit - I haven't wrapped my head around this yet, and you seem quite knowledgeable with this.

If I am not mistaken those are your subnets. Research subnetting to learn more about it.

[ѕнα∂σω]

If I am not mistaken those are your subnets. Research subnetting to learn more about it.

Thanks for the reply, I'll look into subnets.

[Goodies]

Hi. I'm currently trying to "learn" networking.

I understand what an IP is, but it seems that there is more to it than I understand. There seem to be a few different types. For example, what is the difference between a 192.168.x.x and your normal 74.x.x.x? Is the first reserved for use in LANs? Meh - haven't found a definitive answer that I understand. For example: the result of the 'route' command in Linux.

Code

Kernel IP routing table
Destination     Gateway      Genmask      Flags Metric Ref    Use Iface
default      192.168.8.1     0.0.0.0      UG    0      0      0 wlan0
link-local      *      255.255.0.0     U     1000   0      0 wlan0
192.168.8.0     *      255.255.255.0   U     9      0      0 wlan0

What do the 192.168.8.1 and the 192.168.8.0 mean? Why is one under Destination and the other under Gateway? If I'm not mistaken, the gateway address is the router IP - it connects me to the internet and is what I would use if I were to access the router control panel.

Sorry if I'm spewing shit - I haven't wrapped my head around this yet, and you seem quite knowledgeable with this.

Hello!
I'll explain this fairly simply (even though I'm no longer in Empire, but I was when the original thread was posted).

Where it says "default", that is your default route. Anything that is not in the routing table will be sent out your wlan0 interface to IP 192.168.8.1. This is called your "default gateway". 192.168.8.1 is a host (in this case, most likely a router) to which all data will be sent if the destination IP is NOT inside your subnet.

How does it know if it's in your subnet? That's a good question, thanks for asking.

The 192.168.8.0 and subnet mask of 255.255.255.0. This is where we get into subnetting.

255.255.255.0 in binary goes to:
11111111.11111111.11111111.00000000
in binary. A mask is what dictates the IP range. With the mask, every bit that is a 1 is deemed to be a "network bit". This just means it defines the network and they are constant, even though they are not actually all "1"s in the real IP.

The "0"s are called the "host bits". Each combination represents a host on that network. This is a /24 CIDR (24 1's in the subnet mask). Since IPv4 is a 32 bit address, we know there are 8 0's (or you can just observe that each octet is 8 bits lol).

Each combination of those 8 bits represents a new host. There are 2^8 combinations (256) which means there are 256 possible IPs.

However, the very first combination and the very last combination are reserved for "network address" and "broadcast address" respectively. For example:

192.168.8.X in binary:
11000000.10101000.00001000.XXXXXX

We know those 24 bits are permanent because the subnet mask says that the first 24 bits cannot change. So, making a range, we can see the network and broadcast address.

11000000.10101000.00001000.00000000 = 192.168.8.0

11000000.10101000.00001000.11111111 = 192.168.8.255

Note that .0 amd .255 are NOT AUTOMATICALLY NETWORK AND BROADCAST! You can have a normal host as a .0 and a normal host as a .255. However, /24's are very common (especially for home networks) so many people just assume.

[ѕнα∂σω]

Hello!
I'll explain this fairly simply (even though I'm no longer in Empire, but I was when the original thread was posted).

Where it says "default", that is your default route. Anything that is not in the routing table will be sent out your wlan0 interface to IP 192.168.8.1. This is called your "default gateway". 192.168.8.1 is a host (in this case, most likely a router) to which all data will be sent if the destination IP is NOT inside your subnet.

How does it know if it's in your subnet? That's a good question, thanks for asking.

The 192.168.8.0 and subnet mask of 255.255.255.0. This is where we get into subnetting.

255.255.255.0 in binary goes to:
11111111.11111111.11111111.00000000
in binary. A mask is what dictates the IP range. With the mask, every bit that is a 1 is deemed to be a "network bit". This just means it defines the network and they are constant, even though they are not actually all "1"s in the real IP.

The "0"s are called the "host bits". Each combination represents a host on that network. This is a /24 CIDR (24 1's in the subnet mask). Since IPv4 is a 32 bit address, we know there are 8 0's (or you can just observe that each octet is 8 bits lol).

Each combination of those 8 bits represents a new host. There are 2^8 combinations (256) which means there are 256 possible IPs.

However, the very first combination and the very last combination are reserved for "network address" and "broadcast address" respectively. For example:

192.168.8.X in binary:
11000000.10101000.00001000.XXXXXX

We know those 24 bits are permanent because the subnet mask says that the first 24 bits cannot change. So, making a range, we can see the network and broadcast address.

11000000.10101000.00001000.00000000 = 192.168.8.0

11000000.10101000.00001000.11111111 = 192.168.8.255

Note that .0 amd .255 are NOT AUTOMATICALLY NETWORK AND BROADCAST! You can have a normal host as a .0 and a normal host as a .255. However, /24's are very common (especially for home networks) so many people just assume.

And Goodies to the rescue.

THANK YOU! Finally something that I understand. So basically, when I'm sending something to a place that's NOT in my subnet it uses the default gateway to send it, right? It is indeed my router. The subnet is itself defined by the subnet mask, which identifies which octets can change, right?

What if I want to send something to somewhere that IS in my subnet? Would I use the actual IP of the machine?

Thanks a lot!

[Goodies]

And Goodies to the rescue.

THANK YOU! Finally something that I understand. So basically, when I'm sending something to a place that's NOT in my subnet it uses the default gateway to send it, right? It is indeed my router. The subnet is itself defined by the subnet mask, which identifies which octets can change, right?

What if I want to send something to somewhere that IS in my subnet? Would I use the actual IP of the machine?

Thanks a lot!

Actually, yes and no ;) Data is not actually sent to IP addresses but to MAC addresses. Weird, I know, but that's how it works. if you, say, ping 192.168.8.5 (assuming it's an alive host)

First it will calculate the range:
192.168.8.0/24 = 192.168.8.1 - 192.168.8.254
If it is in that range, it will look up the MAC address in the ARP table. ARP (address resolution protocol) is used just to find the MAC address of a known IP address.

It will then send the data to the MAC address, not necessarily th IP address. This is where ARP spoofing comes into play.

For example,. Even though 192.168.8.5 is at 11:22:33:11:22:33, at attacker can update your ARP table by sending ARP responses with a source IP of 192.168.8.5 but a source MAC of 77:77:77:77:77:77 and data will be sent to the destination IP of 192.168.8.5, but to the attacker's machine.

If it sends data to something that is NOT in your subnet, it looks up the MAC of the default gateway either by looking in the ARP table or, if it's not in there, by doing an ARP request. Again, an attacker can spoof ARP responses to become MITM.

---

Also, it doesn't necessarily need to be an entire octet changing. If we were given an IP of:

192.168.8.0/20 we would have to do a little math.

20 1's:
11111111.11111111.11110000.00000000 = 255.255.240.0

So with an IP of:
192.168.8.0, we match this up with the mask so:

These bits don't change (network bits)
These bits do change (host bits)

11000000.10101000.00001000.00000000 = 192.168.8.0

We can see that the value in the 3rd octet is cut, right? If we do the entire range, it goes from:
11000000.10101000.00000000.00000000 = 192.168.0.0
to
11000000.10101000.00001111.11111111 = 192.168.15.255

So, since you use the network address to identify a network, it would be 192.168.0.0/20, however, 192.168.8.0/20 is just as valid.

In this network, 192.168.8.0 and 192.168.8.255 are just host addresses.

An easy way of doing this (in case you're interested) is by seeing how many host bits are in the first octet with host bits... sorry if that is confusing.

Look at them octet by octet.

255 = 1111 1111
255 = 1111 1111
240 = 1111 0000 <-- everything from the first 0 in the subnet mask is hosts... there will never be a 1 after a 0.
000 = 0000 0000

There are 4 host bits in the 3rd octet. Take those 4 bits, and raise 2 to that number.

2 ^ 4 = 16. This means that 16 in the 3rd octet will be the next network, and it is.

192.168.0.0/20 +16 in the third octet
192.168.16.0/20 +16 in the third octet
192.168.32.0/20
etc.. etc.. etc...

So now, just by looking at that, you can see that the next subnet has a range of 192.168.16.0 - 192.168.31.255 :)

[vulpixbrinley]

I'm looking into ratting someone with Mac. I was wondering if jrat really works bc I've heard that it doesn't. And I was also trying to find out if dc works on macs.