Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

What kind of anonymization can be used for scanning and exploiting? Of course there are VPNs and VPS, but thats a different story. I know some scanning can be done via TOR, but how can an exploit or something used via proxy?

share|improve this question
add comment

1 Answer 1

I am not sure how VPNs will provide anonymity. Even for VPS (in case you meant Virtual Private Server), I am again not sure how will you use that to be anonymous. If you buy a bunch of VPS from linode/rackspace and use it to scan/exploit some servers, it is easy to trace you back. Linode requires a photographic copy of your credit card to activate your VPS.

If you make your scanning programs use Tor, your IP won't be revealed -- but I don't recommend using Tor. Running vulnerability scans using Tor can be really slow. That won't help if you are brute forcing. Also, Tor exit node policies may restrict which ports you can connect to. In addition, it is unethical to use Tor to scan, exploit, or hack other systems.

Expert malicious hackers usually use compromised computers to run their attacks from. They might infect a computer (some university/govt. office) and use that to attack their target, making sure that they have put enough controls that a forensic examination of that computer won't reveal their IP or identity. Again just IP anonymity may not be sufficient in what you are trying to do. Just by visiting a website, you can leave enough evidences to uniquely identify you.

but how can be exploit or something used via proxy?

One way to mount attacks from a remote computer is to create a socks proxy to that host and run all the hacking programs using tsocks. Again this is just one scenario and one way... a lot depends on the exact requirements and the tools at hand.


Finally, please do not use these tricks to scan/attack someone without their authorization. Unless you are very thorough, you are bound to leave traces. Whether you'll be found or not depends on how much time and money the other party is willing to spend in the investigations.

share|improve this answer
2  
Please don't encourage people to use Tor for scanning, exploiting, or hacking other systems. Tor is a shared resource. When people abuse it, everyone loses. –  D.W. Sep 14 '12 at 7:05
1  
I just answered the question from a technical perspective. I am just assuming and hoping that someone is not naive enough do these kinds of disruptive things. Forget Tor, the idea of scanning/exploiting some resource without prior permission and consent from the owner is in itself a very bad idea and should be totally discouraged. So I totally agree with @D.W. –  Shivam Sep 14 '12 at 15:55
    
@D.W. Thanks for rewording. I realize that the original verbiage was indeed suggesting that I am asking him to do it that way. Cheers!! –  Shivam Sep 14 '12 at 17:17
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.