Wanna Be Anonymous? 03-17-2013, 10:54 AM
#1
Hello guys!
I've seen new members talk a lot about anonymity so I thought I did make a tutorial on it and explain clearly whether you can get anonymous or not, We'll also be discussing some methods and tools to make that happen but first read this para with extreme attention and understand what it says:
Sometimes it is desired that a person can establish a long-term relationship (such as a reputation) with some other entity, without necessarily disclosing personally identifying information to that entity. In this case, it may be useful for the person to establish a unique identifier, called a pseudonym, with the other entity. Examples of pseudonyms are pen names, nicknames, credit card numbers, student numbers, bank account numbers, and IP addresses. A pseudonym enables the other entity to link different messages from the same person and, thereby, the maintenance of a long-term relationship.
Someone using a pseudonym would be strictly considered to be using "pseudonymity" not "anonymity", but sometimes the term "anonymity" is used to refer to both (in general, a situation where the legal identity of the person is disguised) - Wikipedia
So here I'll say my pseudonym is Ex094, your's is [username].
Being anonymous means using an unknown or unacknowledged identity etc that differs you real ID with your pseudonym. This means that our real identity is hidden, For anonymity on the internet we mean that no one knows about our Location or Identity. To remain anonymous a person must not leave traces about his real Identity. To understand this I have made a simple flow chart:
![[Image: weqx4wU.png]](http://i.imgur.com/weqx4wU.png)
Explanation:
Let me explain this to you, the person John wanted to join a top class black hat forum, for that he used his pseudonym as Lulz0r. John also had 1 Social Network account and also a Email account, he used the same email of his Facebook account to link the Black hat forum account. John does not know any thing about anonymity and he connects to the forum directly through the internet without any VPN or Proxy. John also doesn't know that the blackhat forum was monitored and logged by an unknown agency. The agency had the forum database and they came across John's account which was Lulz0r.
From his forum account they got the following information:
Now as the agency has his IP, they saw he was not sing any proxy etc so it made their task easy to track him down via IP. First they scrapped the net for his email and other credentials, came across his Facebook and MSN account.
John's Facebook account contains his complete identity so the agency now know's who he is. They can either track him by his MAC via IP or getting his address (As they have his real name).
So this was an example of poor anonymity instead we shouldn't be even using the word anonymous for him as he had himself compromised from the beginning! John had pseudonymity but he didn't had anonymity. From this example you now know what being anonymous means.
Mistakes:
Now I will point to John's mistakes which led him be compromised.
VPN, Proxy or Shell Tunneling:
As you can see in the image that John was directly accessing the forum through the internet. If he had used a Proxy or a VPN, it would have given him an edge on making the agency tilt on finding him. Using an SHH Tunnel or VPN would make him:
![[Image: abV7sLP.png]](http://i.imgur.com/abV7sLP.png)
Fake Credentials:
It is also to be noted that John had a Facebook account where he had his complete identity, the agency traced the email he used for the forum and same for the Facebook page, to his account. It is advised that if you are a Hacker and you are making a Facebook or any other account, be sure to make Fake Credentials.
Spoofing MAC Address:
Yes it is true that you can be tracked by your MAC Address, infact MAC Address is used to trace and locate your stolen PC's, Cool eh?
but not cool for Hackers as it is a very active hazard. You can easily spoof your MAC Address in Windows and Linux.
For Linux here's a tutorial: http://www.perturb.org/display/549_Spoof...Linux.html
For Windows: http://www.hackcommunity.com/Thread-Mac-...g-Tutorial
Why change MAC, Still confused? Read this article http://www.ciscozine.com/2011/01/12/how-...c-address/
How To Hack Anonymously :
Now lets forget the example above, you should by now have a basic understanding of anonymity. Now the question is how to remain anonymous while hacking. The solution is a simple one, In my opinion using an RDP for hacking is the best option unless it's a good one. Let me explain it with:
![[Image: NAdEVqR.png]](http://i.imgur.com/NAdEVqR.png)
You can get a Cheap RDP's from here http://www.hackcommunity.com/Thread-Selling-Cheap-RDPS
Leave No Traces:
http://www.dban.org/ Use this to destroy your Hard drive so that you don't leave any traces, this Anti-Forensics tool come's built in in Backtrack 5 R3 and might be present in Kali Linux (I haven't checked)
So my tutorial ends, Please remember this tutorial is based on my personal perspective and the ways I've tried! I hope this tutorial helps you
Guten tag!
Regards,
Ex094
I've seen new members talk a lot about anonymity so I thought I did make a tutorial on it and explain clearly whether you can get anonymous or not, We'll also be discussing some methods and tools to make that happen but first read this para with extreme attention and understand what it says:
Sometimes it is desired that a person can establish a long-term relationship (such as a reputation) with some other entity, without necessarily disclosing personally identifying information to that entity. In this case, it may be useful for the person to establish a unique identifier, called a pseudonym, with the other entity. Examples of pseudonyms are pen names, nicknames, credit card numbers, student numbers, bank account numbers, and IP addresses. A pseudonym enables the other entity to link different messages from the same person and, thereby, the maintenance of a long-term relationship.
Someone using a pseudonym would be strictly considered to be using "pseudonymity" not "anonymity", but sometimes the term "anonymity" is used to refer to both (in general, a situation where the legal identity of the person is disguised) - Wikipedia
So here I'll say my pseudonym is Ex094, your's is [username].
Being anonymous means using an unknown or unacknowledged identity etc that differs you real ID with your pseudonym. This means that our real identity is hidden, For anonymity on the internet we mean that no one knows about our Location or Identity. To remain anonymous a person must not leave traces about his real Identity. To understand this I have made a simple flow chart:
Explanation:
Let me explain this to you, the person John wanted to join a top class black hat forum, for that he used his pseudonym as Lulz0r. John also had 1 Social Network account and also a Email account, he used the same email of his Facebook account to link the Black hat forum account. John does not know any thing about anonymity and he connects to the forum directly through the internet without any VPN or Proxy. John also doesn't know that the blackhat forum was monitored and logged by an unknown agency. The agency had the forum database and they came across John's account which was Lulz0r.
From his forum account they got the following information:
Code:
Name: Lulz0r
IP: 192.168.1.1
Email: john@hotmail.comNow as the agency has his IP, they saw he was not sing any proxy etc so it made their task easy to track him down via IP. First they scrapped the net for his email and other credentials, came across his Facebook and MSN account.
John's Facebook account contains his complete identity so the agency now know's who he is. They can either track him by his MAC via IP or getting his address (As they have his real name).
So this was an example of poor anonymity instead we shouldn't be even using the word anonymous for him as he had himself compromised from the beginning! John had pseudonymity but he didn't had anonymity. From this example you now know what being anonymous means.
Mistakes:
Now I will point to John's mistakes which led him be compromised.
VPN, Proxy or Shell Tunneling:
As you can see in the image that John was directly accessing the forum through the internet. If he had used a Proxy or a VPN, it would have given him an edge on making the agency tilt on finding him. Using an SHH Tunnel or VPN would make him:
Fake Credentials:
It is also to be noted that John had a Facebook account where he had his complete identity, the agency traced the email he used for the forum and same for the Facebook page, to his account. It is advised that if you are a Hacker and you are making a Facebook or any other account, be sure to make Fake Credentials.
Spoofing MAC Address:
Yes it is true that you can be tracked by your MAC Address, infact MAC Address is used to trace and locate your stolen PC's, Cool eh?
but not cool for Hackers as it is a very active hazard. You can easily spoof your MAC Address in Windows and Linux. For Linux here's a tutorial: http://www.perturb.org/display/549_Spoof...Linux.html
For Windows: http://www.hackcommunity.com/Thread-Mac-...g-Tutorial
Why change MAC, Still confused? Read this article http://www.ciscozine.com/2011/01/12/how-...c-address/
How To Hack Anonymously :
Now lets forget the example above, you should by now have a basic understanding of anonymity. Now the question is how to remain anonymous while hacking. The solution is a simple one, In my opinion using an RDP for hacking is the best option unless it's a good one. Let me explain it with:
You can get a Cheap RDP's from here http://www.hackcommunity.com/Thread-Selling-Cheap-RDPS
Leave No Traces:
http://www.dban.org/ Use this to destroy your Hard drive so that you don't leave any traces, this Anti-Forensics tool come's built in in Backtrack 5 R3 and might be present in Kali Linux (I haven't checked)
So my tutorial ends, Please remember this tutorial is based on my personal perspective and the ways I've tried! I hope this tutorial helps you
Guten tag!
Regards,
Ex094
![[+]](https://sinister.li/images/modern/collapse_collapsed.png)
![[Image: 2YpkRjy.png]](http://i.imgur.com/2YpkRjy.png)
