Still pretty new to all this, been learning for a while and soaking up as much as I can. The end goal is to go white-hat, but I’m trying to understand how things work from both sides.
Just a hypothetical—I was thinking about a site running WordPress, super vulnerable setup, login path is just /admin, basic stuff. But let’s say the site is high-profile. Like, messing with it would have serious consequences. High risk, probably monitored, systems in place to detect and trace anything sketchy.
So my question is: if someone were to get caught hacking a setup like that, how would they have been tracked? What’s the weak point that gives them away?
And more importantly—how would someone stay fully anonymous in a situation like that? Not just for SQLi, but in general. I’m trying to understand the bigger picture when it comes to opsec, traceability, and how people pull it off (again, hypothetically) without burning themselves.
Just trying to learn. Not looking to touch anything real or stupid.
TL;DR how do I remain fully anonymous when hacking
A no-logs VPN and clearing tracks are about all you need.
Apr 15, 2025 05:20 AM
(This post was last modified: Apr 15, 2025 05:21 AM by plops.)
Go to a foreign country that won't expedite you to the countries company you are hacking. Because if it's America and you are successful(even unsuccessful) then the feds are involved. They will find you.
But I agree with the above, no log vpn or chains, clean up your work. Move around and dont use the same wifi.
(Apr 15, 2025 03:31 AM)DramaKing Wrote: A no-logs VPN and clearing tracks are about all you need.
+1 on this, just make sure you don't leave behind DNS leaks.
They use proxies to hide the origin of their attacks to remain untraceable.
Apr 15, 2025 02:29 PM
(This post was last modified: Apr 15, 2025 02:52 PM by aukra07.)
(Apr 15, 2025 05:20 AM)plops Wrote: Go to a foreign country that won't expedite you to the countries company you are hacking. Because if it's America and you are successful(even unsuccessful) then the feds are involved. They will find you.
But I agree with the above, no log vpn or chains, clean up your work. Move around and dont use the same wifi.
can you expand on the "don't use the same wifi" part
how am I supposed to change around wifis?
(Apr 15, 2025 05:27 AM)Klonopin Wrote: +1 on this, just make sure you don't leave behind DNS leaks.
how would I prevent this?
(Apr 15, 2025 05:27 AM)Klonopin Wrote: +1 on this, just make sure you don't leave behind DNS leaks.
how would I prevent this?
(Apr 15, 2025 02:29 PM)aukra07 Wrote: how am I supposed to change around wifis?
hello, you know the little internet symbol in bottom right near the clock?
it should look like a zebra pizza slice. click it. are there any other wifis?
(Wifis in this case are the wireless networks that are visible to your computer.)
Apr 16, 2025 06:06 PM
(This post was last modified: Apr 16, 2025 06:07 PM by aukra07.)
(Apr 15, 2025 04:15 PM)Robert Rouge Wrote: hello, you know the little internet symbol in bottom right near the clock?
it should look like a zebra pizza slice. click it. are there any other wifis?
(Wifis in this case are the wireless networks that are visible to your computer.)
yeah but those are my neighbors wifis wouldn't I get in trouble for that? also they're all locked behind a password
(Apr 15, 2025 03:31 AM)DramaKing Wrote: A no-logs VPN and clearing tracks are about all you need.
would protonVPN work? combined with tor network?
should I turn on the VPN on my main pc or on my Linux VM or both also?
(Apr 16, 2025 06:06 PM)aukra07 Wrote: yeah but those are my neighbors wifis wouldn't I get in trouble for that? also they're all locked behind a password
would protonVPN work? combined with tor network?
should I turn on the VPN on my main pc or on my Linux VM or both also?
look for public wifi, businesses that have free wifi available
(Apr 14, 2025 07:12 PM)aukra07 Wrote: Still pretty new to all this, been learning for a while and soaking up as much as I can. The end goal is to go white-hat, but I’m trying to understand how things work from both sides.
Just a hypothetical—I was thinking about a site running WordPress, super vulnerable setup, login path is just /admin, basic stuff. But let’s say the site is high-profile. Like, messing with it would have serious consequences. High risk, probably monitored, systems in place to detect and trace anything sketchy.
So my question is: if someone were to get caught hacking a setup like that, how would they have been tracked? What’s the weak point that gives them away?
And more importantly—how would someone stay fully anonymous in a situation like that? Not just for SQLi, but in general. I’m trying to understand the bigger picture when it comes to opsec, traceability, and how people pull it off (again, hypothetically) without burning themselves.
Just trying to learn. Not looking to touch anything real or stupid.
TL;DR how do I remain fully anonymous when hacking
To stay anonymous, you can use VPNs or the Tor network, operate from virtual machines, and avoid personal devices and identifiable information. experience.
|
![[Image: giphy.gif]](https://media.giphy.com/media/1UKQOBrxHsKJ7AsVxP/giphy.gif)
