Common Hacking 101: Proxies

Showing posts with label Proxies. Show all posts

Anonymity of Proxy Learn It Inside-Out

Anonymity Of The Proxy

The exchange of information in Internet is made by the "client - server" model. A client sends a request (what files he needs) and a server sends a reply (required files). For close cooperation (full understanding) between a client and a server the client sends additional information about itself: a version and a name of an operating system, configuration of a browser (including its name and version) etc. This information can be necessary for the server in order to know which web-page should be given (open) to the client. There are different variants of web-pages for different configurations of browsers. However, as long as web-pages do not usually depend on browsers, it makes sense to hide this information from the web-server.

What your browser transmits to a web-server:

• A name and a version of an operating system

• A name and a version of a browser configuration of a browser (display resolution, color depth, java / javascript support, ...)

• IP-address of a client

• Other information

The most important part of such information (and absolutely needless for a web-server) is information about IP-address. Using your IP it is possible to know about you the following: a country where you are from a cityyour provider?s name and e-mail your physical address Information, transmitted by a client to a server is available (accessible) for a server as environment variables. Every information unit is a value of some variable. If any information unit is not transmitted, then corresponding variable will be empty (its value will be undetermined).

These are some environment variables:

REMOTE_ADDR ? IP address of a client

HTTP_VIA ? if it is not empty, then a proxy is used. Value is an address (or several addresses) of a proxy server, this variable is added by a proxy server itself if you use one.

HTTP_X_FORWARDED_FOR ? if it is not empty, then a proxy is used. Value is a real IP address of a client (your IP), this variable is also added by a proxy server if you use one.

HTTP_ACCEPT_LANGUAGE ? what language is used in browser (what language a page should be displayed in)

HTTP_USER_AGENT ? so called "a user?s agent". For all browsers this is Mozilla. Furthermore, browser?s name and version (e.g. MSIE 5.5) and an operating system (e.g. Windows 98) is also mentioned here.

HTTP_HOST ? is a web server?s name

This is a small part of environment variables. In fact there are much more of them

(DOCUMENT_ROOT, HTTP_ACCEPT_ENCODING, HTTP_CACHE_CONTROL, HTTP_CONNECTION, SERVER_ADDR, SERVER_SOFTWARE, SERVER_PROTOCOL, ...).

Their quantity can depend on settings of both a server and a client.

These are examples of variable values:

REMOTE_ADDR = 194.85.1.1 HTTP_ACCEPT_LANGUAGE = ru HTTP_USER_AGENT = Mozilla/4.0 (compatible; MSIE 5.0; Windows 98) HTTP_HOST = www.webserver.ru HTTP_VIA = 194.85.1.1 (Squid/2.4.STABLE7) HTTP_X_FORWARDED_FOR = 194.115.5.5

Anonymity at work in Internet is determined by what environment variables "hide" from a web- server.

If a proxy server is not used, then environment variables look in the following way:

REMOTE_ADDR = your IP HTTP_VIA = not determined HTTP_X_FORWARDED_FOR = not determined

According to how environment variables "hided" by proxy servers, there are several types of proxies:

Transparent Proxies

They do not hide information about your IP address:

REMOTE_ADDR = proxy IP HTTP_VIA = proxy IP HTTP_X_FORWARDED_FOR = your IP

The function of such proxy servers is not the improvement of your anonymity in Internet. Their purpose is information cashing, organization of joint access to Internet of several computers, etc. Anonymous Proxies

All proxy servers, that hide a client?s IP address in any way are called anonymous proxies

Simple Anonymous Proxies

These proxy servers do not hide a fact that a proxy is used, however they replace your IP with its own:

REMOTE_ADDR = proxy IP

HTTP_VIA = proxy IP HTTP_X_FORWARDED_FOR = proxy IP

These proxies are the most widespread among other anonymous proxy servers.

Distorting Proxies

As well as simple anonymous proxy servers these proxies do not hide the fact that a proxy server is used. However a client?s IP address (your IP address) is replaced with another (arbitrary, random) IP:

REMOTE_ADDR = proxy IP HTTP_VIA = proxy IP HTTP_X_FORWARDED_FOR = random IP address

High Anonymity Proxies

These proxy servers are also called "high anonymity proxy". In contrast to other types of anonymity proxy servers they hide a fact of using a proxy:

REMOTE_ADDR = proxy IP HTTP_VIA = not determined HTTP_X_FORWARDED_FOR = not determined

That means that values of variables are the same as if proxy is not used, with the exception of one very important thing ? proxy IP is used instead of your IP address. Summary

Depending on purposes there are transparent and anonymity proxies. However, remember, using proxy servers you hide only your IP from a web-server, but other information (about browser configuration) is accessible!

How to Change Your IP To The CVV From Any Country

How To Change Your IP To The CVV From Any

Country

Hi guys!I hope you all doing fine.

As I told you in the post about cashing out cvv's and cc's for do this job safe and successful you still need to know some small but important details.

Maybe some of you already try to cash out cvv but the transaction was canceled.

This could happen because your IP appear to be in some other country or city that the cvv real holder address.

This is very easy to solve,all you have to do is to learn and use SOCKS. Some of you probably think that the VPN is enough but it is not !

A VPN will hide your IP and without the help of VPN provider you are not trackable.

SOCKS is trackable and not secure and all it does is to does is to make your internet browser to appear in the area you chose.So for cash out cvv's you will need you IP to appear in the area that the cvv's real holder lives and for make this possible you have to use SOCKS.

But remember that SOCKS are not enough to hide your IP and are used just for "cheat" the security system and make them believe that you are living in the cvv real holder area.SOCKS can be trackable !

So even if you will use SOCKS the VPN must still be used!Always activate your VPN before start carding. Clean the browser history and then you are ready to go.

We apply SOCKS on the Mozilla Firefox browser. SOCKS5 came in format IP:PORT or for example 23.498.33.910 :9500.

In this example 23.498.33.910 is the IP and 9500 is the port.

So next time,before you try to cash out cvv using online shopping you must remember to use SOCKS to make your IP appear in the same area as the address of the cvv holder.

To download Mozilla Firefox go to this link Here .

Remember to download all stuff used for carding in English.I know that seems more easy to have your computer set into your own language but is not recommended as cookies saved into your pc will allow the site you visited to have a look to your computer.Lets say that you are a Romanian and your browsers and computer stuff is all in Romanian language.As this language is used only in Romania,who ever can look into your computer may know you are a Romanian citizen.

Also make sure that the date and time of your computer is set on format GMT+ or GMT- as the cvv real holder living area.This are small but important details to protect your self and to have success when you try to carding.

To change your IP using SOCKS all you have to do is to get a SOCKS provider.There are plenty of Auto-shops which sell SOCKS.I personal use http://5socks.net/en_index.htm but there are many other sites from where you can chose.

Once you have your cvv and the SOCKS located in same city or area with the cvv address you can start carding.

At this moment you already must know what site you want to hit and have everything read to do this work.

Open now Mozilla Firefox browser and click "Tools"

a small pop-up window will be open on your desktop.In this window ,click "Options"

You will be taken to other window,here click "Advanced and select "Network Now, Click on "Settings

An other small pop-up window will open on your screen.Chose "Manual proxy configuration" and fill up the Socks Host with the IP you got from your SOCKS provider and then fill up the Port also got from the provider.

Click "OK" and the both pop-up windows.

Now allow few seconds to activate the SOCKS then go to any IP check site and make sure your IP was changed.

I use This ,but you can use any site you trust.Once you have your real IP hidden with the VPN and your computer seems to be located in the cvv real holder area,with SOCKS you can try your best and make some money!

Good luck and be safe!

How To Set up a SOCKS proxy Using Putty & SSH

How To Set up a SOCKS Proxy Using Putty & SSH

If you ever find yourself in front of a public computer connected to the Internet and are concerned about the security of the path between you and a website you wish to visit, a SOCKS proxy can come in handy.

SOCKS proxies generally allow you to “bounce“ a TCP connection off another server transparently“ basically instructing another computer to make a connection on your behalf. When used in combination with Secure Shell (SSH), it can form an encrypted tunnel that insulates you from anyone attempting to grab traffic off the wire.

The following is a simple step-by-step tutorial about how to do this.

You will need:

-Putty SSH client: http://www.putty.org -An account on an Internet-accessible server that accepts SSH connections and allows connection forwarding (enabled by default)

-A popular web browser or other software that supports SOCKS communications

Step 1:

Fire up Putty and navigate to the Session Category

Step 2:

Enter the hostname/IP address and port of the server on which you have an account.

(Note: The default SSH port is 22)

This tells Putty how to connect to the SSH server.

Step 3:

Under the SSH->Tunnels Category Enter the following: Source port: 8888 (or any port of your choosing. Just be sure to remember what it is) Destination: hostname/IP address of the server on which you have an account

Also, select the “Dynamic“ radio button.

This tells Putty that, upon a successful connection, a SOCKS tunnel should be opened from a port on the computer you are using to the SSH server.

Step 4:

Click “Add“ The forwarded port is now added to the connection settings.

Step 5:

Click “Open“ to start the connection

Putty will ask for your login credentials. In most cases, this will be a username and password. (For extra security and bonus cool points, have your SSH server only accept certificates)

At this point, your Putty-enabled SOCKS proxy should be active. But how do we test it out? Keep reading“

Step 6:

Fire up your web browser and navigate to its proxy connection properties menu.

For Firefox 3, it is in Tools->Options->Advanced->Network(tab)- >Connection, Settings

For IE6, it is Tools->Internet Options->Connections(tab)->LAN Settings(button)->Advanced(button)

Step 7:

Find the SOCKS settings text box and enter the following: Proxy Address/Host: localhost OR 127.0.0.1 Port: 8888 (or whatever port you decided to use in Step 3)

Ensure SOCKS Version 4 is selected

Note: DO NOT enter any other proxy settings for other protocols (this includes the “use proxy server for all protocols“ option. Don“t enable it. I“m serious. If you do, things might not work correctly.)

Step 8:

Click “OK“ until you“re back to your browser.

Go to http://ipchicken.com and check your IP address. It should be different from the machine you“re on. In fact, it SHOULD be the IP address of the SSH server (or whatever machine is handling its connections).

Step 9:

Pat yourself on the back. Or have your buddies do it for you“ they“ll no doubt be impressed by your newfound computer skills. Enjoy browsing the web using your own personal SSH proxy.

NOTE: Although this could be useful when using a public computer“ it won“t protect you from local machine monitoring tools (keyloggers, screen captures, etc). Always exercise due diligence when using untrusted computers.

How to Setup OpenVPN Connect on Windows

How to setup OpenVPN Connect on Windows

A. Download and Install OpenVPN GUI

1. Download the latest stable community version of OpenVPN client (Windows Installer) HERE Note: If you have a 32-bit Operating System, download the 32-bit version of the installer. You can check your System Type by going to Control Panel > System and Security > System.

2. Open the folder where installer is downloaded and double-click the 'openvpn-install- <version>.exe' file to begin installation.

3. You may encounter a Security Warning screen: "Do you want to run this software?" If you see the Security Warning screen, click Run to run the software.

4. The Setup Wizard prompt will appear. Click Next to continue.

5. The OpenVPN license agreement and terms appear. Click I Agree to continue.

6. The component selection dialog appears. Leave all components checked with their default settings and click Next.

7. Select your destination folder and click Install. Note the Destination Folder location during install (usually C:\Program Files\OpenVPN)

8. When the installation is complete, click Next.

9. The wizard will notify you of the completion of the installation and prompt you to click Finish.

B. Download and copy the .ovpn profiles to the OpenVPN config folder

1. Visit our Network page HERE

2. Select an OpenVPN server location you wish to connect to and then click Get Profile to download .ovpn profiles. Repeat step to download more profiles

3. Open the folder (usually the ‘Downloads’ folder) where you’ve downloaded the profiles and then copy them to C:\Program Files\OpenVPN\config folder Note: If you get a pop-up message that says ‘You’ll need to provide administrator permission to copy to this folder’, click ContinueHow to Connect to OpenVPN

1. To connect, find the OpenVPN GUI icon on your desktop and double-click it to launch OpenVPN.

Note: On Windows 7, Vista, 8 and 8.1, run the program as administrator to enable the program to make changes to your computer and update the network configuration. a) Right-click the OpenVPN GUI icon and select Properties. b ) Click ‘Compatibility’ tab and check ‘Run this program as administrator’ c) Click Apply. Note: If you get a pop-up window asking if you want to allow the program to make changes to your computer, click ‘YES’.

2. In the system tray, right click on the OpenVPN GUI icon.

3. Find the site to connect to from the menu, and choose Connect from the site's submenu.

4. Enter your VPN username and password when prompted and click OK.

5. The OpenVPN GUI icon in the tray will turn green once the secure connection is established.

How to Disconnect from OpenVPN 1. Click the OpenVPN icon on the system tray to open the menu.

2. Select the active connection (the one with a check mark) and then click 'Disconnect’

Automatic login without manually entering VPN username and password Are you thinking of 'automatic login' without the need to enter password every time you want to

connect to OpenVPN? If so, please read on. Currently, there is no secure way to store the user name and password in Windows using OpenVPN. For security purposes, most versions of OpenVPN do not allow a user/password to be read from a file. If you are willing to take the security risk of having your login information saved in the clear on your hard drive, you can use the OpenVPN Community client and set it up to automatically log in. Recognizing the security risks, the procedure is as follows:

1. If you do not have OpenVPN GUI installed yet, download and setup it up first.

2. Navigate to C:\Program Files\OpenVPN\config folder

3. Using a text editor like Wordpad or Notepad, create a file name ‘password.txt’

On the first line, type your VPN username (12345 in this example) On the second line, type your VPN password

Save the file. 3. Next is to open and edit your .ovpn file with Wordpad and find the line that reads 'auth-user-pass'. Change it to 'auth-user-pass password.txt' (without the quotes). Save and exit.

4. Test the connection and see if it will connect automatically.

How To Setup Proxifier Quick Start

Proxifier: Quick Start

Install and launch Proxifier. The Proxifier icon showing traffic (information flow) will appear on the system tray. On Windows 7, the icon can be hidden.

Double click the system tray icon to open the main window of the program. Alternatively, you can start Proxifier again from the start menu and the existing running instance will be detected and will activate the main Proxifier window.

By default, Proxifier is configured to bypass all network connections. You can still see connections and DNS requests if you enable verbose output

Log->Output Level->Verbose.

Proxifier can process the connection directly (without a proxy server). To enable this mode, set Profile->Advanced->Handle Direct Connections. It can be useful to troubleshoot problems and utilize some features of Proxifier like traffic dumps, bandwidth and connection monitor, etc.

To make the connections work through a proxy server or a chain of proxy servers, you must first define a proxy server in Proxifier. Click Proxy Servers...

in the Profile menu or click on the icon located on the toolbar:

WARNING!

If you were using proxies before you installed Proxifier you should disable any built-in proxy settings. Your applications should then be configured to connect “directly” to the Internet (rather than through proxies).

Fill in the form specifying the details of the proxy server (address, port, protocol, etc.) that you want to add and click OK:

Proxifier will ask you whether or not you want to use this proxy by default. Click Yes to set it as the target for the Default Proxification Rule. You can change this anytime later at Proxification Rules

Mac Address Changer

Technitium MAC Address Changer

Version: 6.0.4 Programmer: Shreyas Zare System Requirements:Windows 2000/XP/Server 2003/Vista/Server 2008/7/Server 2008 R2/8/Server 2012

Technitium MAC Address Changer allows you to change (spoof) Media Access Control (MAC) Address of your Network Interface Card (NIC) irrespective to your NIC manufacturer or its driver. It has a very simple user interface and provides ample information regarding each NIC in the machine. Every NIC has a MAC address hard coded in its circuit by the manufacturer. This hard coded MAC address is used by windows drivers to access Ethernet Network (LAN). This tool can set a new MAC address to your NIC, bypassing the original hard coded MAC address. Technitium MAC Address Changer is a must tool in every security professionals tool box.

There are some famous, commercial tools available in the market for USD 39.99 to as much as USD 2499!, but Technitium MAC Address Changer is available for FREE. We don't charge for just changing a registry value! Also knowing how this works doesn't require extensive research as some commercial tool providers claim! Read how it works (below) for more details.

Features

• Internet Protocol v6 (IPv6) support added.

• Works on Windows 7 and Windows 8 for both 32-bit and 64-bit.

• Automatic Update feature added to update software to latest available version.

• Update network card vendors list feature allows you to download latest vendor data (OUI) from IEEE.org.

• Enhanced network configuration presets with IPv6 support allow you to quickly switch between network configurations.

• Command line options with entire software functionality available. You can select a preset from specified preset file to apply directly.

• Issues in previous version ironed out.

How Does It Work ?

This software just writes a value into the windows registry. When the Network Adapter Device is enabled, windows searches for the registry value 'NetworkAddress' in the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325- 11CE-BFC1- 08002bE10318}\[ID of NIC e.g. 0001]. If a value is present, windows will use it as MAC address, if not, windows will use the hard coded manufacturer provided MAC address. Some Network Adapter drivers have this facility built-in. It can be found in the Advance settings tab in the Network Adapter's Device properties in Windows Device Manager.

How To Change MAC Address

1. Starting MAC address changer will list all available network adapters.

2. Select the adapter you want to change the MAC address. You will get the details of your selection below.

3. In the Information tab, find the Change MAC Address frame. Enter new MAC address in the field and click Change Now! button. You may even click Random MAC Address button to fill up a randomly selected MAC address from the vendor list available.

4. To restore the original MAC address of the network adapter, select the adapter, click Restore Original button in the Change MAC Address frame.

NOTE: This tool cannot change MAC address of Microsoft Network Bridge. Network Bridge will automatically use the original MAC address of the first NIC added into bridge with the first octet of MAC address set to 0x02.

Anonymity of Proxy