Post by TBBSpartan2667 on Aug 12, 2015 2:59:23 GMT
First of all: I IN NO WAY, take any responsibility, in what you decide to do with the information you obtain.
I used to run a small doxing service, where people could request that I located certain people for them, only with a reasonable excuse of course.
As well as people could have me test how well hidden they were, they'd then give me a clue or two, or more.
Then I'd then set out to find them, then once I was done, I'd send them their files over Skype.
I'd even try to help them cover their tracks better if they desired. So I've done this stuff a few times..
I might set up a doxing service thread on here as well later on..
But I feel people should learn to defend themselves.
Please notice, some of the websites may not, and will not work in many countries outside the US.
I'm sure most countries have similar websites, however it's up to yourself to find those.
Most of these will however do the tricks even if you / they're not from the US.
There's also a lot more to cover, doxing can go way further, but this should do plenty.
Doxing is pretty much, you target a specific person (Victim) and decide to gather all the information you possibly can,
perhaps even go for some of the people surrounding that person, like a few friends, family and girlfriend / boyfriend.
This information can be used to scare off the person or just find the person, perhaps in case the person decided to scam you,
hack your account or something entirely else, and now you want to get revenge.
Well doxing can change depending on where in the world you and the person you're trying to dox, is located.
It will probably be a lot easier if you're in the same country. Plus your social engineering skills can, and most likely will come in handy.
Have you talked to the person? Seen a picture of the person? Got their name? Got their number? Their approximate location? Their IP?
Any bit of information can be very useful.
If you got their Skype, you can go for a Skype resolver to get their IP. Easiest method out there to obtain the IP of a specific person.
It is very commonly used, especially when someone wishes to DDoS a specific person.
DDoSing is not gonna be the focus in this tutorial though.
Skype Resolver
Skype Grab
If it that doesn't work or the person is unresolvable, you can try to go for an IP logger. IP loggers basically work as in:
you disguise one link, as something entirely else and that link can be to ANYTHING, let's take www.facebook.com for example,
you put that into the website, and out comes a link that'll look like www.pupush.com/?id=97av3rmillion-kekek-87249ded
The link can also be to a picture, or something else, now, once you have the link ready,you'll send it to the victim,
you can also take the linkthrough Tinyurl to make it just a bit more appearling, people are more familiar with Tinyurl,
and will feel more safe clicking a link from there, the link would then look something like: tinyurl.com/p23z557
There's also a ton of other IP loggers / grabbers out there, just google them, you'll find loads.
Ip grabber (Tutorial on website if needed.)
Tinyurl (To make the link a bit better looking.)
Once you have their IP, that's gonna help you track down their location, if you don't already know where they're located.
You simply just put in their IP into one of the links below, the links will also be able to determine if the IP is an actual home-address
or if the IP you managed to get is just a proxy. If it's a proxy, then sorry, it's a dead-end, and you'll have to try again.
But if it's an actual home-address, you'll have the name of their ISP, their country, city, and approximate address.
(They're always off by a bit, but they tend to be relatively close.)
IP Lookup
Who Is
So now, you'll have their approximate location, if you managed to get their IP. It's really not that difficult to obtain an IP.
You just need to be alright with social engineering, basically talk them into giving you information / doing things for you,
without them really realizing it. If you didn't get their IP, don't give up, keep trying, and well if it keeps failing..
There are other methods of obtaining the information that you need.
If you have a picture of the victim, you can reverse search it, either on Google or on a website that I like, Tineye.
It doesn't have to be a picture of them, even if it's an avatar, a signature or something they use to represent themselves,
you can try that as well. (Doesn't always work, but worth a try.) This can help you locate other profiles they may use,
as well as even help you get their Facebook, Twitter or something like their Instagram.
Reverse image search
With their Facebook / Twitter / Instagram, you'll often tend to be able to pull off a lot of information:
Things like their full name, even their parents names, friends, siblings, birth-date and a ton of other pictures of them.
With that, you can further reverse search their pictures, names and perhaps find more stuff on them.
If you have their phone number, you can use some websites to look them up, tons of them on the internet.
You might have to find your own, based on the country you're from though.
Whitepages and 411
There's plenty of websites that allow you to search for usernames as well, which can be a jackpot.
A lot of people tend to use the same username over, and over, and over.. Making it easy to find them.
Spokeo and Pipl (Pipl being my favourite of those two.)
If you decide to set up some fake accounts, or want to contact them over mail, but don't wish to use your own e-mail.
There are some great fake e-mail services out there. You basically just enter their website, and boom you're igned an e-mail,
and you can even make your own in the blink of an eye. Just enter the e-mail you desire, and it's yours, it's as easy as that.
These e-mails can help you set up a quick fake and new account, which you can use to contact the victim, pretending to be someone else.
Now, if you're good with social engineering, just talking to the person for about an hour, you'll be able to pull off a lot of information from them,
Email Fake (Personal favourite, many of these aren't blacklisted on websites, can save e-mails and use them later.)
Mailinator (Stores old e-mails up to like 14 days or something, can save and check ANY inbox on the website.)
Throwawaymail (Works until you update the page.)
If you're too lazy to come up with a new identity yourself which you MIGHT use to approach the person.
You don't have to approach the person with a new account / identity, but it's a good way to get extra information.
Then there are plenty of websites for this, here's one for example, you can select what country the person should be from,
even select what country the name should be from and the gender, quite useful at times.
Identity Generator
You can also start stealing their accounts, some of the best information, is typically stored within their account, like Credit Card details,
Social Security Numbers, E-mails and private messages. Common methods to do this, would be Brute-Forcing, doesn't work well on all websites.
For example: Facebook, PayPal, Hotmail and Gmail they tend to suspend the account because of suspicious activity, if you try to guess the pword.
A good start would be on small accounts like Minecraft / Roblox. Once you get into those, you will have a possible pword, that you can try on the e-mails.
A lot of people tend to use the same pword for everything, so.. Worth a try. You can also try to RAT them or use a keylogger.
Throwing a keylogger / RAT on their computer, will provide you with most of their pwords.
IF YOU ARE GOING TO HACK PEOPLE, DOXING AS WELL, PLEASE, USE A VPN!
I beg you man, VPN, always, use, a, VPN.
You can thank me when you don't have to pay a fine of $10 000 dollars and perhaps even spend time in jail.
Depending on who you go after, and what you've done, this Shenaenaes can go bad if you don't cover your .
Other useful websites:
Criminal Searches
Realtor
Look Up People
Ancestry
Internet Archive
US Search
Google
Never underestimate the power of Google
If you know how to search properly on Google, you can find a TON of information.
It may not be easy if you're all new to doxing, however.. There's no limit to what you can find on there.
In the spoiler below you'll find a way to put up your dox.
You don't have to put it up like this, but it's better to have order over the doxes.
In case you make a lot of doxes and store them in a folder, makes it easier to browse through them.
Plus it'll also avoid any confusion, I have confused myself many times with my own doxes.
All because I didn't sort them properly. Also if you at some point decide to share it with others, you'll look a lot more like a professional.
Even if the dox isn't complete or 100 % accurate.
I used to run a small doxing service, where people could request that I located certain people for them, only with a reasonable excuse of course.
As well as people could have me test how well hidden they were, they'd then give me a clue or two, or more.
Then I'd then set out to find them, then once I was done, I'd send them their files over Skype.
I'd even try to help them cover their tracks better if they desired. So I've done this stuff a few times..
I might set up a doxing service thread on here as well later on..
But I feel people should learn to defend themselves.
Please notice, some of the websites may not, and will not work in many countries outside the US.
I'm sure most countries have similar websites, however it's up to yourself to find those.
Most of these will however do the tricks even if you / they're not from the US.
There's also a lot more to cover, doxing can go way further, but this should do plenty.
Doxing is pretty much, you target a specific person (Victim) and decide to gather all the information you possibly can,
perhaps even go for some of the people surrounding that person, like a few friends, family and girlfriend / boyfriend.
This information can be used to scare off the person or just find the person, perhaps in case the person decided to scam you,
hack your account or something entirely else, and now you want to get revenge.
Well doxing can change depending on where in the world you and the person you're trying to dox, is located.
It will probably be a lot easier if you're in the same country. Plus your social engineering skills can, and most likely will come in handy.
Have you talked to the person? Seen a picture of the person? Got their name? Got their number? Their approximate location? Their IP?
Any bit of information can be very useful.
If you got their Skype, you can go for a Skype resolver to get their IP. Easiest method out there to obtain the IP of a specific person.
It is very commonly used, especially when someone wishes to DDoS a specific person.
DDoSing is not gonna be the focus in this tutorial though.
Skype Resolver
Skype Grab
If it that doesn't work or the person is unresolvable, you can try to go for an IP logger. IP loggers basically work as in:
you disguise one link, as something entirely else and that link can be to ANYTHING, let's take www.facebook.com for example,
you put that into the website, and out comes a link that'll look like www.pupush.com/?id=97av3rmillion-kekek-87249ded
The link can also be to a picture, or something else, now, once you have the link ready,you'll send it to the victim,
you can also take the linkthrough Tinyurl to make it just a bit more appearling, people are more familiar with Tinyurl,
and will feel more safe clicking a link from there, the link would then look something like: tinyurl.com/p23z557
There's also a ton of other IP loggers / grabbers out there, just google them, you'll find loads.
Ip grabber (Tutorial on website if needed.)
Tinyurl (To make the link a bit better looking.)
Once you have their IP, that's gonna help you track down their location, if you don't already know where they're located.
You simply just put in their IP into one of the links below, the links will also be able to determine if the IP is an actual home-address
or if the IP you managed to get is just a proxy. If it's a proxy, then sorry, it's a dead-end, and you'll have to try again.
But if it's an actual home-address, you'll have the name of their ISP, their country, city, and approximate address.
(They're always off by a bit, but they tend to be relatively close.)
IP Lookup
Who Is
So now, you'll have their approximate location, if you managed to get their IP. It's really not that difficult to obtain an IP.
You just need to be alright with social engineering, basically talk them into giving you information / doing things for you,
without them really realizing it. If you didn't get their IP, don't give up, keep trying, and well if it keeps failing..
There are other methods of obtaining the information that you need.
If you have a picture of the victim, you can reverse search it, either on Google or on a website that I like, Tineye.
It doesn't have to be a picture of them, even if it's an avatar, a signature or something they use to represent themselves,
you can try that as well. (Doesn't always work, but worth a try.) This can help you locate other profiles they may use,
as well as even help you get their Facebook, Twitter or something like their Instagram.
Reverse image search
With their Facebook / Twitter / Instagram, you'll often tend to be able to pull off a lot of information:
Things like their full name, even their parents names, friends, siblings, birth-date and a ton of other pictures of them.
With that, you can further reverse search their pictures, names and perhaps find more stuff on them.
If you have their phone number, you can use some websites to look them up, tons of them on the internet.
You might have to find your own, based on the country you're from though.
Whitepages and 411
There's plenty of websites that allow you to search for usernames as well, which can be a jackpot.
A lot of people tend to use the same username over, and over, and over.. Making it easy to find them.
Spokeo and Pipl (Pipl being my favourite of those two.)
If you decide to set up some fake accounts, or want to contact them over mail, but don't wish to use your own e-mail.
There are some great fake e-mail services out there. You basically just enter their website, and boom you're igned an e-mail,
and you can even make your own in the blink of an eye. Just enter the e-mail you desire, and it's yours, it's as easy as that.
These e-mails can help you set up a quick fake and new account, which you can use to contact the victim, pretending to be someone else.
Now, if you're good with social engineering, just talking to the person for about an hour, you'll be able to pull off a lot of information from them,
Email Fake (Personal favourite, many of these aren't blacklisted on websites, can save e-mails and use them later.)
Mailinator (Stores old e-mails up to like 14 days or something, can save and check ANY inbox on the website.)
Throwawaymail (Works until you update the page.)
If you're too lazy to come up with a new identity yourself which you MIGHT use to approach the person.
You don't have to approach the person with a new account / identity, but it's a good way to get extra information.
Then there are plenty of websites for this, here's one for example, you can select what country the person should be from,
even select what country the name should be from and the gender, quite useful at times.
Identity Generator
You can also start stealing their accounts, some of the best information, is typically stored within their account, like Credit Card details,
Social Security Numbers, E-mails and private messages. Common methods to do this, would be Brute-Forcing, doesn't work well on all websites.
For example: Facebook, PayPal, Hotmail and Gmail they tend to suspend the account because of suspicious activity, if you try to guess the pword.
A good start would be on small accounts like Minecraft / Roblox. Once you get into those, you will have a possible pword, that you can try on the e-mails.
A lot of people tend to use the same pword for everything, so.. Worth a try. You can also try to RAT them or use a keylogger.
Throwing a keylogger / RAT on their computer, will provide you with most of their pwords.
IF YOU ARE GOING TO HACK PEOPLE, DOXING AS WELL, PLEASE, USE A VPN!
I beg you man, VPN, always, use, a, VPN.
You can thank me when you don't have to pay a fine of $10 000 dollars and perhaps even spend time in jail.
Depending on who you go after, and what you've done, this Shenaenaes can go bad if you don't cover your .
Other useful websites:
Criminal Searches
Realtor
Look Up People
Ancestry
Internet Archive
US Search
Never underestimate the power of Google
If you know how to search properly on Google, you can find a TON of information.
It may not be easy if you're all new to doxing, however.. There's no limit to what you can find on there.
In the spoiler below you'll find a way to put up your dox.
You don't have to put it up like this, but it's better to have order over the doxes.
In case you make a lot of doxes and store them in a folder, makes it easier to browse through them.
Plus it'll also avoid any confusion, I have confused myself many times with my own doxes.
All because I didn't sort them properly. Also if you at some point decide to share it with others, you'll look a lot more like a professional.
Even if the dox isn't complete or 100 % accurate.
