+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: IP Hack (/Thread-IP-Hack)
RE: IP Hack - mothered - 02-16-2017
(01-26-2017, 08:44 PM)DarkMuse Wrote: The only thing I can think of them being able to do is to possibly find your geolocation
You can't get the geolocation of the user via their IP address. It's the ISP's locality that will be obtained.
The IP belongs to the ISP, not the user hence It's their details that are available.
RE: IP Hack - Skullmeat - 02-16-2017
As others have said, you could scan for open ports to exploit. You could also ddos them, but where's the fun in that?
RE: IP Hack - zenith - 02-16-2017
ISP doxing is a thing.
You pretty much call up the ISP that the ip is connected to, pretend you work there, and say your lookup tool isn't working and you need to see the info of *IP here*.
If the user is Comcast I know it would definitely work. There's a ton of idiots there. Never tried anything else.
RE: IP Hack - mothered - 02-16-2017
(02-16-2017, 05:33 PM)Zenith Wrote: ISP doxing is a thing.
You pretty much call up the IPS that the ip is connected to, pretend you work there, and say your lookup tool isn't working and you need to see the info of *IP here*.
Provided the pretexting Is formulated and applied accordingly, there's no reason why this won't work- with any ISP. No matter who the company Is, there's always a weak link In the human chain that can be exploited.
If you're assuming the Identity of an Internal employee, It's good practice to research the target first, Identify how they're structured, the type of terminology used and whether there's any codes or other specific requirements to obtain one's credentials. A few practice phone calls prior to the real deal can significantly be of help.
RE: IP Hack - m0dem - 02-16-2017
Why do people post questions in the Tutorial sub-forum?
RE: IP Hack - m0dem - 02-16-2017
(02-16-2017, 06:02 PM)mothered Wrote:(02-16-2017, 05:33 PM)Zenith Wrote: ISP doxing is a thing.
You pretty much call up the IPS that the ip is connected to, pretend you work there, and say your lookup tool isn't working and you need to see the info of *IP here*.
Provided the pretexting Is formulated and applied accordingly, there's no reason why this won't work- with any ISP. No matter who the company Is, there's always a weak link In the human chain that can be exploited.
If you're assuming the Identity of an Internal employee, It's good practice to research the target first, Identify how they're structured, the type of terminology used and whether there's any codes or other specific requirements to obtain one's credentials. A few practice phone calls prior to the real deal can significantly be of help.
Interesting. Have you ever tried anything like this?
RE: IP Hack - Elf - 02-16-2017
(01-26-2017, 08:44 PM)DarkMuse Wrote: Well let me start off by correcting what you've said grammatically specifically to benefit you.
"What can a hacker do if he or she has your IP?"
Here's the deal. Your IP is your address to your computer. There is a local IP that your router uses and a public IP that the internet uses.
If a hacker gets access to either, you are not necessarily screwed. Having the address to someone's computer means that they can scan your computer for vulnerabilities.
If you aren't a dumbass, have some kind of AV, and arent just opening ports willy nilly or leaving them open unnecessarily, you're fine. The only thing I can think of them being able to do is to possibly find your geolocation, and to find more info based off of your address or to dos/ddos your ip. (You can always regen your ip so ddos is ended) Usually these "hackers" you find online are either too inexperienced or are too scared to do anything with your real address due to legal implications. At the very most for these skids they will try to ddos you, which usually you can just reverse to fuck them over lol.
Worst Case:
A real hacker is pissed at you and has your internet IP. They find your local ip and scan you for vulns, find one, and install a rootkit or something of that nature to make you suffer. They then find your real info, dox you, and possibly SWAT you or come and kill you in front of your beloved dog.
If you plan on pissing these people off you had better know how to put a cyber condom on. Use vpns/proxies/tunnels properly and securely. Don't leave ports open unnecessarily and know how to protect the ones you do need to open. Know what to watch for when you are infected or are under attack. Back up your data regularly. Carry a fucking hand gun and keep a shot gun next to your desk. Unless you plan on getting swatted, in which case you should only do so if it's legal.
So yeah.
Watch out, my dog is named John Wick so if you kill me in front of him you're asking for a death wish.
RE: IP Hack - mothered - 02-17-2017
(02-16-2017, 07:45 PM)m0dem Wrote: Interesting. Have you ever tried anything like this?
Not specifically with an ISP, but on similar grounds, I've performed It on a cell phone carrier.
I actually SE'd them Into giving me the default PIN code to access all Voicemail messages of anyone connected to that carrier (based In my locality). I researched the carrier for around a week prior to the SE- made quite a few phone calls (general enquiries to see how they function and operate Internally), Identified the questions raised and how they expected to be answered, noted a shortlist of those I spoke with who I believed were vulnerable to social engineering, generated a few emails mainly to obtain the position of the recipients within the company (example assistant manager, clerk, IT support etc), and a few other bits and pieces.
All the above was not relative to my attack, but more so to get a good understanding of the company's background and to become "one of them" when the real SE took place.
RE: IP Hack - Blink - 02-17-2017
(02-16-2017, 02:19 PM)black3izard Wrote: thats easy you pwn the user if know his ip address
It's not that simple.
If you have access to a 0-day exploit or a public one and thay happen to have the right software running with the right port open... Then you are correct.
Otherwise, that can [D]DOS you, figure out your general location, and not much else.
There's also ISP doxing, which gets things compicated... They basicaly pretend to work at your ISP (wasy to get from your IP), then they get your physical location with a bit of SEing.
RE: IP Hack - DarkMuse - 02-18-2017
(02-16-2017, 03:15 PM)mothered Wrote:(01-26-2017, 08:44 PM)DarkMuse Wrote: The only thing I can think of them being able to do is to possibly find your geolocation
You can't get the geolocation of the user via their IP address. It's the ISP's locality that will be obtained.
The IP belongs to the ISP, not the user hence It's their details that are available.
Gotcha. Thanks for the correction sir!