[copscalled]

I have decided to make a tutorial on SEing ISP's (internet service providers) as mothered brought it up on a different thread and I thought it would work well for learning the basics of SEing. Some of the information was copied from different sources. Without further ado, let's get started.

Things you need:
>Basic Social Engineering Skills.
>Intelligence
>Skype
>Firertc
>Proffesional Voice
>Proper English.

1.  Acquiring the users IP address.
There are many ways to do it, so I won't get into detail but here are some of the ways:
Grabify.link - pretty much a link that tracks traffic.
Skype resolver
Wireshark
Discord resolvers.

2. Now that you have their IP, you need to find out what ISP the IP is linked to. You can do this by putting the IP into a basic geolocator.
https://tools.keycdn.com/geo

3. Once you know their ISP, google the Support/Customer Care line for it. Now call the ISP. You can simply call the ISP with Skype, or firertc. Make sure you use a VPN while doing this. If using firertc, use tor.


Each ISP has their own Program that they use for looking up Customer Information. Here is a list of Major US Providers and their Tools.

AT&T
Systems: CCTP (Call Center Transformation Program), G2

Cox
Systems: Icon, Polar

Charter
Systems: Sigma, IRIS

Comcast
Systems: ACSR, Comtrac, CSG, Einstien, Grandslam, Vision

Time Warner / Road Runner
Systems: Real, Unify

Verizon
Systems: Coffee

4. Now, once you are in a call you are going to want to say the following script, this can change but if you are starting out this is a good starter script.

*You: Hello, My name is Joe, and I'm with Tech Support employee id is (JD3783). I was trying to look up a Customer€™s Account Information in Grandslam when our systems crashed. I currently cannot open up Grandslam or CSG. I was wondering if you could help me out and look up a customer€™s information on your end. Thanks.
Agent: They will ask you for a Phone number. Reply with:
*You: Unfortunately, I only have their IP address, since I was in Live Chat with them. I have them on scheduled called back in 3 hours. I know Grandslam can look up Customer Info with an IP, can you try it in that.

Now if they tell you to fuck off, call back.

Mothered had a really good point;

"Timing also plays a contributing factor. Performing the SE late on a Friday just before the close of business (whereby the representative Is exhausted from the working week, not as alert and simply wants to finish up and go home), has a better success rate as opposed to Monday morning (fresh from a relaxing weekend)."

In addition to that, here is another good point:

" I think a lot of the times I am Se'ing an ISP, they know what I am trying to do, but, I am either very polite, with lots of compliments, or I am so damn annoying that they just say "Fuck it" and give me the information I need. These "Customer support reps" are human, they get pissed off, they get flattered and most importantly, they are usually stupid. That is why they are working in a rep centre making 8$ an hour. "

I know that some of the information I just said is pretty harsh, but it is true.

5. Make sure you say thank you if the rep gives you information, they could get fired for doing that or even worse sued. So be kind.



Final Notes:
>This might take some time to master and get a successful Dox. Keep trying and make sure to add your own twist to the story/script so you sound real.
>Research Is of utmost Importance. Preparation, formulation and execution follow (respectively) thereafter- all of which are solidified with the Information collected by researching.
>Do NOT swat the person after you dox them. That is plain retarded; a waste of resources and you run the risk of possibly killing someone. Plus; you can go to jail for 10 years + depending on where you live.


(If someone wants to make this post look better, feel free to do so)

Thanks for reading.

Sincerely,

Copscalled.

[Skryptec]

Very nicely explained tutorial. I am sure a lot of people here will benefit from it.

[JamesOG]

I don't really have any plans to dox someone but oh well. Good read anyways, sure would be useful in the future

[mothered]

When the SE Is prepared and executed accordingly, assuming the role of an Internal employee Is usually quite effective. I think you've documented It very well.

In terms of getting the user's IP address, I'm glad you've suggested Grabify.link. I've tested this site on a very In depth basis over a 3 week period on countless users, and can confirm that It serves It's objective extremely well.
An alternative site Is WhatsTheirIP. I've also put this to the test and It performed as expected. Bear In mind, you must use a Gmail email address with this website.

[copscalled]

Very nicely explained tutorial. I am sure a lot of people here will benefit from it.

I don't really have any plans to dox someone but oh well. Good read anyways, sure would be useful in the future

This can be extremely useful for a lot of reasons. In the past, my team and I would SE the reps to get the tools to use ourselves. We would also get the reps phone number, email address, password and normally SSN.

In this case, you can see how much information can be leaked out of a simple 10-minute call.

Hope you've enjoyed this read.

Sincerely,
Copscalled

[copscalled]

When the SE Is prepared and executed accordingly, assuming the role of an Internal employee Is usually quite effective. I think you've documented It very well.

In terms of getting the user's IP address, I'm glad you've suggested Grabify.link. I've tested this site on a very In depth basis over a 3 week period on countless users, and can confirm that It serves It's objective extremely well.
An alternative site Is WhatsTheirIP. I've also put this to the test and It performed as expected. Bear In mind, you must use a Gmail email address with this website.

Grabify.link may seem like a beginner way to acquire an IP address, but I can assure you it is a very useful tool.

When social engineering reps to get free stuff eg: Fitbit, Amazon or tile if your rep is starting an investigation on your case, you can acquire that IP address, and if you have a stresser, botnet or booter that is strong enough, you can shut down the entire center, or if the person is working from home, you'll get the IP address to his home, then performing a dox, can get his information.

Then you can imagine what you can do to benefit you.

[ID3F4CTED]

Love this tutorial, thanks for sharing man! Can be useful in the future

[copscalled]

Love this tutorial, thanks for sharing man! Can be useful in the future

No problem man, many more to come.

Glad you enjoyed this.

Sincerely,
Copscalled

[mothered]

Grabify.link may seem like a beginner way to acquire an IP address, but I can assure you it is a very useful tool.

As said In my aforementioned post, Grabify has proved It's effectiveness. Using the site Is one thing, getting the user to click the link Is another. Given you have limited attempts on the same user (before suspicion Is raised), the latter needs a well-crafted SE to get It done the first time around.

if the person is working from home, you'll get the IP address to his home, get his information.

That's where SEing comes Into action.

A lot of users I've come across, are under the Impression that personal Info on the user can be obtained with their IP. Your ISP owns your external/public./WAN IP address, not you so any Information collected via WHOIS and the like, Is that of the ISP.

[copscalled]

Grabify.link may seem like a beginner way to acquire an IP address, but I can assure you it is a very useful tool.

As said In my aforementioned post, Grabify has proved It's effectiveness. Using the site Is one thing, getting the user to click the link Is another. Given you have limited attempts on the same user (before suspicion Is raised), the latter needs a well-crafted SE to get It done the first time around.

if the person is working from home, you'll get the IP address to his home, get his information.

That's where SEing comes Into action.

A lot of users I've come across, are under the Impression that personal Info on the user can be obtained with their IP. Your ISP owns your external/public./WAN IP address, not you so any Information collected via WHOIS and the like, Is that of the ISP.

Exactly, many beginners thinks the IP itself holds information that can be accessed by the public; but that Is simply not the case.

Now for me, if I get a project, where someone would pay me to dox someone (normally companies wanting information on a trouble maker) or 15 year old kids wanting to swat an enemy, I normally see the IP as a complete dox. Even if it’s dynamic all American and Canadian ISPs must keep logs for a certain period of time.

I am no professional at this but I do know my fair share of things.

Back on subject, I feel like the most likely way someone could fail at this is if they sound nervous, or laugh. I certainly have a laughing problem when a rep is plain stupid.