Oct 23, 2015 04:10 PM
(This post was last modified: Aug 31, 2017 10:52 AM by ๖ۣۜCriminal.)
So were all familiar with isp doxing, now lets step up to the next level IP doxing 2.0 third party company edition. Today you're gonna learn how to have agents at other companys lookup IP's not just ISP's. This works best on sites that run magento I have not tryed this on other websites support team yet but feel free to tweak this method to your hearts content. First you want to figure out what type of community the person you want to dox is in such as call of duty, minecraft, runescape, club penguin, etc. After this is established grab their ip via various means skype resolving, visiting a link, etc.
F.A.Q
in an IP doxing sense whats the difference between a first party and third party company?
In the case of doxing someone via IP Address the first party company would be their ISP since they get the IP leased from ARIN and the most obvious place to go when your trying to obtain billing information when you only have an IP address however third party companys sometimes also store ip logs for anti fraud purposes or just to store it along with someones billing information for historical purposes. so first party = the ISP & third party = other companys that also facilitate the storage of the IP address along with billing info.
Why the hell would I want to do this when I can just sqli/rce/insert vuln category here the information my self?
Not everyones good at web application exploitation so their next best option is relying on a skill easy to improve on which is social engineering.Unlike exploits social engineering can only get saturated and never patched so thats always a bonus!
What is magento and how is it useful to this method?
Magento is an ecommerce CMS used to manage orders placed by clients, you could think of it like wordpress with the woocommerce plugin but standalone. Alot of these CMS store IP logs by default which will make doxing our target alot easier.
Ok this seems interesting how does it work?
Glad you asked! its simple you find a site running an ecommerce CMS similar to magento if not magento call up the support number and se the rep to search your order by IP Address and the address/email/phone/etc will come up, how to get the info from the rep is completely up to you, the skys the limit when it comes to se'ing. Most support reps will have isolated access to the CMS administration panel to lookup orders by whatever info you have.
Note*: Not every CMS stores ip logs by default so results may vary
F.A.Q
in an IP doxing sense whats the difference between a first party and third party company?
In the case of doxing someone via IP Address the first party company would be their ISP since they get the IP leased from ARIN and the most obvious place to go when your trying to obtain billing information when you only have an IP address however third party companys sometimes also store ip logs for anti fraud purposes or just to store it along with someones billing information for historical purposes. so first party = the ISP & third party = other companys that also facilitate the storage of the IP address along with billing info.
Why the hell would I want to do this when I can just sqli/rce/insert vuln category here the information my self?
Not everyones good at web application exploitation so their next best option is relying on a skill easy to improve on which is social engineering.Unlike exploits social engineering can only get saturated and never patched so thats always a bonus!
What is magento and how is it useful to this method?
Magento is an ecommerce CMS used to manage orders placed by clients, you could think of it like wordpress with the woocommerce plugin but standalone. Alot of these CMS store IP logs by default which will make doxing our target alot easier.
Ok this seems interesting how does it work?
Glad you asked! its simple you find a site running an ecommerce CMS similar to magento if not magento call up the support number and se the rep to search your order by IP Address and the address/email/phone/etc will come up, how to get the info from the rep is completely up to you, the skys the limit when it comes to se'ing. Most support reps will have isolated access to the CMS administration panel to lookup orders by whatever info you have.
Note*: Not every CMS stores ip logs by default so results may vary
