Difference between revisions of "Self-dox"

From Gender and Tech Resources

m
m (→‎Storing information)
Line 3: Line 3:
 
Such flaws can then be exploited. The exploitation wildly differs depending on the adversary. For example, profiling information can be used for encapsulation attempts by intelligence agencies. If those attempts are tried and fail and you are still enough of an annoyance to your government, expect [[Psychological warfare|aggressive demonisation by government paid trolls]] (and exceptionalism at its current flourishing best).  
 
Such flaws can then be exploited. The exploitation wildly differs depending on the adversary. For example, profiling information can be used for encapsulation attempts by intelligence agencies. If those attempts are tried and fail and you are still enough of an annoyance to your government, expect [[Psychological warfare|aggressive demonisation by government paid trolls]] (and exceptionalism at its current flourishing best).  
  
−
Doxing is also a part of reconnaissance where it is called 'human intelligence' or 'humint', and its focus is on its shadow side. The techniques can be simple or complex, and are useful for background checks (infiltrant agents will probably remain invisible with these techniques but a littler petty tyrant may be detected) <ref>Investigation Online: Gathering Information to Assess Risk https://modelviewculture.com/pieces/investigation-online-gathering-information-to-assess-risk
+
Doxing is also a part of reconnaissance where it is called 'human intelligence' or 'humint', and its focus is on its shadow side. The techniques can be simple or complex, and are useful for background checks (infiltrant agents will probably remain invisible with these techniques but littler petty tyrant may be detected) <ref>Investigation Online: Gathering Information to Assess Risk https://modelviewculture.com/pieces/investigation-online-gathering-information-to-assess-risk
 
</ref>.
 
</ref>.
 +
 +
There are tools particularly created for d0xing. I use as little automated tools as possible. Not only because of the risk of poisoning, also because I prefer to pay more attention to little-easily-overlooked-details. The more you rely on auto-anything, the more you overlook. But if you want to use a tool and it is unknown to you, please do some research (possibly) follow the money, where the makers are located, for assessing likelihood of the code being poisoned.
  
 
This page collects doxxing resources and if you have one, please do add!
 
This page collects doxxing resources and if you have one, please do add!
Line 10: Line 12:
 
[[File:Lulz-vs-lulz.jpg|480px|thumb|right|Doxed: how Sabu was outed by former Anons long before his arrest http://arstechnica.com/tech-policy/2012/03/doxed-how-sabu-was-outed-by-former-anons-long-before-his-arrest/]]
 
[[File:Lulz-vs-lulz.jpg|480px|thumb|right|Doxed: how Sabu was outed by former Anons long before his arrest http://arstechnica.com/tech-policy/2012/03/doxed-how-sabu-was-outed-by-former-anons-long-before-his-arrest/]]
  
−
== Storing information ==
+
== Storing information during research ==
 +
Store gathered data on an encrypted external disk.
 +
 
 +
=== Basket (KDE) ===
 +
http://basket.kde.org/
 +
 
 +
=== Tomboy (GNOME) ===
  
−
=== Using basket ===
+
=== Dradis ===
−
=== Using dradis ===
+
Dradis is a self-contained web application that provides a centralised repository of information to keep track of what has been done so far, and what is still ahead. http://tools.kali.org/reporting-tools/dradis
  
 
== Elicitation ==
 
== Elicitation ==
Line 30: Line 38:
 
RWhois (referral whois) is a directory services protocol which extends the whois protocol in a hierarchical and scalable way. It focuses on the distribution of “network objects” (domain names, IP addresses, email addresses) and uses the hierarchical nature of these network objects to more accurately discover the requested information. It is similar to DNS but apparently, still not in general use.
 
RWhois (referral whois) is a directory services protocol which extends the whois protocol in a hierarchical and scalable way. It focuses on the distribution of “network objects” (domain names, IP addresses, email addresses) and uses the hierarchical nature of these network objects to more accurately discover the requested information. It is similar to DNS but apparently, still not in general use.
  
−
=== Using crunch ===
+
=== Crunch ===
−
=== Using wyd ===
+
=== Wyd ===
  
 
== Resources ==
 
== Resources ==
Line 88: Line 96:
  
 
=== D0xing tools ===
 
=== D0xing tools ===
−
 
−
And then there are tools particularly created for d0xing (also known as human recon). Please follow the money, where the makers are located, and assess likelihood of the code being poisoned. I use as little automated tools as possible. Not only because of the risk of poisoning, also because I prefer to pay more attention to little-easily-overlooked-details. The more you rely on auto-anything, the more you overlook.
 
  
 
* Sleeping Time http://sleepingtime.org/
 
* Sleeping Time http://sleepingtime.org/

Revision as of 14:48, 16 June 2015

Doxing is a technique of tracing someone or gathering information about an individual using sources on the internet. Its name is derived from “Documents” or “Docx”. Doxing method is based purely on the ability of the hacker to recognize valuable information about his target and use this information to his benefit. It is also based around the idea that, “The more you know about your target, the easier it will be to find his or her flaws” ~ Urban dictionary.

Such flaws can then be exploited. The exploitation wildly differs depending on the adversary. For example, profiling information can be used for encapsulation attempts by intelligence agencies. If those attempts are tried and fail and you are still enough of an annoyance to your government, expect aggressive demonisation by government paid trolls (and exceptionalism at its current flourishing best).

Doxing is also a part of reconnaissance where it is called 'human intelligence' or 'humint', and its focus is on its shadow side. The techniques can be simple or complex, and are useful for background checks (infiltrant agents will probably remain invisible with these techniques but littler petty tyrant may be detected) [1].

There are tools particularly created for d0xing. I use as little automated tools as possible. Not only because of the risk of poisoning, also because I prefer to pay more attention to little-easily-overlooked-details. The more you rely on auto-anything, the more you overlook. But if you want to use a tool and it is unknown to you, please do some research (possibly) follow the money, where the makers are located, for assessing likelihood of the code being poisoned.

This page collects doxxing resources and if you have one, please do add!

Doxed: how Sabu was outed by former Anons long before his arrest http://arstechnica.com/tech-policy/2012/03/doxed-how-sabu-was-outed-by-former-anons-long-before-his-arrest/

Storing information during research

Store gathered data on an encrypted external disk.

Basket (KDE)

http://basket.kde.org/

Tomboy (GNOME)

Dradis

Dradis is a self-contained web application that provides a centralised repository of information to keep track of what has been done so far, and what is still ahead. http://tools.kali.org/reporting-tools/dradis

Elicitation

Profiling and fingerprinting

IP lookup

When you have an IP address an IP lookup will provide details such as ISP name, country, state, city, longitude and latitude. Domain names can help us to find out important information such as address, email id and phone number.

Using whois from the command line you may or may not get useful results. It runs on port 43, and information returned is in plain ASCII format, but because whois servers all over the internet are managed by a wide variety of organisations, information returned may vary. And the different whois clients have different functionality too.

Whois proxies can be used between a client and a server. Those usually use the http or https protocol. If port 43 is blocked, that is not a problem when a client is using proxies through a browser. Also, likely a proxy will determine which server to contact for different lookups.

Almost all services prevent data mining for preventing data gathering for spamming, and that also limits the service for other purposes such as intelligence gathering. Recently, some ISP’s are discussing limiting their service even further.

RWhois (referral whois) is a directory services protocol which extends the whois protocol in a hierarchical and scalable way. It focuses on the distribution of “network objects” (domain names, IP addresses, email addresses) and uses the hierarchical nature of these network objects to more accurately discover the requested information. It is similar to DNS but apparently, still not in general use.

Crunch

Wyd

Resources

Spies online

You can use the same (or similar) spies online techniques [2] to see yourself through the eyes of the adversaries that might d0x you. That information can then be used to protect yourself from your adversaries as best as you can. And when setting up other, anonymous or pseudonymous identities, these same resources can be used for test-driven-development of the identity.

Search engines

People

Images

Posts and discussions

IP lookup

Technical information related to whois

Whois clients

Webbased whois lookups

Useful whois servers

RWhois

Other interesting lookups

D0xing tools

Reuseful archives

Such as wandering through archives, yellow pages, phone directories and other possibly useful information made publicly available.

Europe

Africa

Asia

Oceania

South America

North America

Related

References

  1. ↑ Investigation Online: Gathering Information to Assess Risk https://modelviewculture.com/pieces/investigation-online-gathering-information-to-assess-risk
  2. ↑ Spies online http://www.spiesonline.net/
Retrieved from "https://gendersec.tacticaltech.org/wiki/index.php?title=Self-dox&oldid=2492"