Thursday, 14 June 2012

Hacking Using Doxing -Doxing Complete Hacking Tutorial


I hope you read my last article about What is Doxing?.  Let me explain more about Doxing in this article.

Use of Doxing:
  • Hackers can track Innocent peoples data and hack their accounts.
  • Security Experts can trace the Hackers(can trace some innocent hackers only,N00bs). This will be helpful for solving Cyber Crime cases.


Definiton of Doxing:
Doxing is derived from Document Tracing. Doxing is tracing the information from internet resources about particular person.

Usually internet users left their information(like gender,name,city,..) in some websites(like social network,..).  So using some searching Techniques, we can gather complete data about a person.  This type of searching(tracing) is known as Doxing. This data can be used to hack their account or trace them.




What you can find using Doxing?
  • Real Name, age,gender
  • Email id, registered websites
  • Social Network Page(facebook,twitter links)
  • Address, Phone Number
  • Parent's Names and their Jobs
  • Place of Education (School/University etc.)
  • Relatives
  • and more data
From where you are going to start?
Yes, if you know person real name, then start from his name.  If you know the username then start from there. or if you know any other data, start from there  Using name or username , search for other information in google.


How to do Doxing? 
Just assume you want to gather information about one of forum member.  Let us assume his username is peter.  If you search in google as "peter" , you will get thousands results about peter. So what you are going to  do?

You have to some other information about peter in that forum itself.  For example , You got his birthday.  Now you can continue your searching with "peter xx/xx/xxx".  This will reduce the resutls.

Not only birthday, you can use some other info like signature.  For example if he put signature in forum as "Dare Devil".  You can continue searching using "Peter Dare Devil".  This will reduce the Results.

Sometime your target person registered in multiple forums, websites,social networks... So while searching ,you will get result of registered website of him using that username or info.

Read Each posts of target person, he might left some more information about him any one of forums or websites.

Using Email Address for Tracing:
If you got the email address of target person, it is much easier to trace the person. You can search using in the following sites. you may get some data.

Websites that will be useful for Doxing:
www.myspace.com
www.bebo.com
www.facebook.com
www.google.com
www.pipl.com
www.wink.com
www.123people.com
www.zabasearch.com
...
You can find any other site related to target person and search for his data.

Doxing needs Intelligence: 
Doxing needs Intelligence and searching ability.  You have to guess where to search and what to search about person.  Depending on searching ability, you will get what you required.

Security Question:
 Hacker can get the victim's security question answer using doxing.

For example, if your questions is "What is your pet?", he may guess. He will search with email or username . you may left your my pet is xxx. So now you are the victim.

Dictionary Attack:
Hackers can gather information about the victim and create a dictionary file(wordlist) for a target person alone.  Using that dictionary file , he can crack your passwords.

Conclusion: 
Doxing is one of powerful hacking method.

Security Tips of Users: 
Don't use Internet.  This is best security tip because your data can be traced by anyone.  sounds crazy?! No one like to leave the Internet.  So  i am giving some other tips for you.
  • Becareful when you give information in internet.
  • Use very Strong passwords .
  •  Don't set Stupid security Question for account. 

4 comments: