Sunday, October 10, 2010

They Can Find you!

A lot of people are enjoying the fact that they may go on webcam chats and chat with random strangers. Yes, it’s fun and entertaining, but did you know that through a simple process they can know where you live? Don’t worry they can’t know exactly where you live, except if they know some corrupted person working at the ISP (Internet Service Provider) who is willing to trade your personal information, but that is less then likely to happen. So today we will show you how to do it. The best way to know how to protect yourself is to know how the attacker does it, and yes it’s very funny to do, but I never told you to do it! ;)


The Basics

Most webcam chats use a peer to peer webcam connection, meaning that no medium is used in between the two or more peers. Reason for that is that using a server to exchange the data would cause too big of a load and cause it to lag, us, the service users, we get very angry when lag happens :@. Since it’s a webcam connection, there’s a constant flow of data going from one computer to the other because it’s a constant stream. These data are called packets, in every packet; we can find the destination’s IP (Internet Protocol) address and the source’s IP address. Every IP address is placed in a database that knows that IP’s geometrical region. Having a program that makes it possible for us to look inside the packet to see those addresses and a service that could tell us where that IP’s region is would make all this possible. Obviously, it’s all out there for us!


The tools

-Packet sniffer (To find the IPs in the packets)


           Many are out there but the best I recommend is WireShark, a powerful tool that 
           will make it easy for you! (Also the one used in the How to)
           Go there to get WireShark: http://www.wireshark.org/download.html


-A webcam chat
Some fun chats to use this on are http://www.chatroulette.com and http://www.omegle.com, probably lots more but I tested those two. (Many people on there like to exhibit themselves, you were warned)

-An IP tracer (To find the IP’s region)
Just search on Google for an IP tracers, many are out there, a couple of good examples are: http://www.ip-adress.com/ip_tracer/, http://www.geobytes.com/iplocator.htm, http://www.ip2location.com/free.asp.


The How to

1. Open up WireShark
           
2. In the menu bar (the bar on top with file, edit, view, etc..) click on “Capture”.
           
3. Then click on “Interfaces”, a pop up will appear with one or multiple interfaces, choose the one that has a number in the “Packets” row.


 
4. Click “Start” on that interface.




            4.1. If an error message saying “The capture session could not be initiated (failed to set hardware filter to promiscuous mode).” Do step 2 & 3 again, but then click on “Option”. An other pop-up will appear with multiple options, check off the “Capture packets in promiscuous mode” option and then click start.





5. Once started you should see some data flowing into the screen. Where it’s written Filter: on top, type in “udp” and click on “Apply” that is right beside.



 NOTE: You are now set up to find IP address from webcam chat sessions.


7. Once a session started go back to your WireShark, you will see two IP addresses going from the source and to destination over and over again. One of them is yours, the other is the “victim’s” IP address. If the IP starts with 192, that one is yours, so the other is your “victim’s”.



 
NOTE: Victim’s IP have been blanked out for privacy purposes.

            8. Open up one of the IP tracers e.g. www.ip2location.com/free.asp. Then write the “victim’s” IP address in there.


 
9. You now have the Victim’s ISP, Country, State/Region/Province, and City.


NOTE: As said before, it’s only the geometrical region you have, so for sure the country and state is right (If the user isn’t using a Proxy/IP filter (Most people don’t)), the city maybe right or maybe not. By the way, you can get some epic reactions by pranking them right! ;D

We Are Not Responsible For Any Of Your Actions.

           
Wish you lots of fun! Don’t forget to follow us for more good stuff! ;)

-Uncanny Phim