Home › Forums › Archives › Instant Messaging › Yahoo! Messenger Support › Yahoo IP sniffers. Fact or fiction?
- This topic has 54 replies, 32 voices, and was last updated 20 years, 7 months ago by
membernc.
-
AuthorPosts
-
November 20, 2003 at 6:45 am #65242
fussyhussy6969
MemberJust so you know, everything I’ve read what I did a search on “winspoof” is negative. -And- just to see for myself, I downloaded it off of a site which I will not name, and immediately Norton picked it up as a “hacker tool”. I just thought anyone who might be looking for it and downloading it might want to know this.
November 20, 2003 at 8:17 am #65237zhugeliang
MemberI have also been doing some research and tests on this topic, and i’ve come to the conclusion that IP sniffers do NOT work on Yahoo Instant Messanger. When you’re in a chat room or PM’ing someone, everything is sent through the yahoo servers, which act like a proxy server. The only way they can get your IP is if they dissect the packets sent to them from the servers, and they dissect them and find the header which might (big “if” here) show your IP address (still testing this out). They can’t even get it if you initiate a webcam “conference” with them, only P2P activities such as superwebcam and file transfers will show you thier IP address.
November 22, 2003 at 2:35 pm #65216freddy
MemberYou cannot get their IP from the header – only the src (YOU/Yahoo!) and the destination(Yahoo!/YOU) will be in the headers!
Yahoo!’s server have to maintain the chat room conversations. They will also maintain as much other activities as bandwidth permits.
Most PMs will go through their servers, however, buddy2buddy PMs may go peer2peer during high bandwidth times. Some IMVironments containing interactive content will also go peer2peer.
Yahoo! Messenger uses port 5101TCP for Peer2Peer IMs.
If you try anonymous webcam, your IP is sent as part of the anonymous user ID. Superwebcam, is a direct connection between two broadband users.
Voice chat is the same as normal chat when performed through the room.
http://www.freddys-utilities.co.uk/ipaddress.php more information here.
December 11, 2003 at 1:56 am #65244Hackers
MemberQuote:quote:Originally posted by freddyThe paid service is a company who manage their own servers, hence they work well.
You can download programs like multi proxy which gather lists of servers off the internet, it takes hours a day to verify which ones work, and then many of them don’t actually work properly.
It’s not worth the time playing with free ones, and its not worth the money for the paid ones. People can’t do much with IPs, its just made to look so by the less intelligable, or those wanting your money for software to “protect” you.
If you have a firewall, no one can hack you (if it’s set up right) this includes free ones. ZoneAlarm,Sygate,Outpost…
If you have an antivirus, you protected against viruses, this again includes free ones. AVG….If you use dial-up, your IP address is dynamic, and changes every time you re login.
Some DSL connections are also dynamic, such as a refresh every 72hrs…You dont know what your talking about do you? Here read this maybe you can learn. And also it doesn’t take hours aday to see if they work properley. It takes a few minutes. Your a newbie or lamer.
This article is going to show the newbie to the hacking/security world how to use a proxy server to hide there real ip and other information. We will also discuss how a proxy server works.
A. What are Proxy servers
Well before we can explain what proxy servers are we must show you alittle how the internet works. The internet has thousands of users. How does it indentify each user? Well it does it by “packets” these packets tell alot about you and your computer. When you connect to let’s say Yahoo.com packets are sent to yahoo.com servers and inside the packets the following data is sent:
Your I.P. Number
Your Operating System
The date and time you where connected
and any data you submitted to yahoo.comThis is how they work. Now, How is this a security risk? Well if you visit some hacker sites thet can get your ip and hack you and they can find informaiton about your os and that helps a hacker because he can look up exploits for your os and so fourth. So we are going to show you how to hide your real ip using a http:// proxy and we will talk about socks and http:// tunneling. Now how does a proxy server work? A proxy server works like this. Instead of your computer connecting to yahoo.com directly and sending packets this is what a proxy does. Your computer connects to the proxy. The proxy then connects yahoo.com and then the proxy sends the page to you. Instead of your ip being shown on that page the proxy’s ip is shown Thus hiding your ip.
B. Enable a Proxy Server
Ok to enable a proxy server open up internet explorer. Now go to the following:
Tools > Internet Options
Now when the internet options dialog appears click on the tab that says “Connections” You will then see a button that says Lan settings. Click on this button. Now once you have clicked up on this button you will see a check box that says “Use proxy server for lan” Now check that box and enter a proxy server and a port number. You can get them by going to stayinvisible.com. Now once you have a proxy server your not done yet. Your still unsecure. There are alot of ways to get your ip still. Now before you close that box out click on advaned. You will see a a button next to the port number field that says “advaned…” click this button. Once you click it another dialog appears that is called “proxy settings” Now you will see a check that says “Use the same proxy server for all protocals” un-check this. Now just click ok for now and then apply the new settings. Now you cant use a proxy if your running on a windows 9x machine. Anyway we will come back to why we did this later in this article.
C. Your Os and other info.
Now let’s say you are running on a xp os and you have a proxy with this address enabled: “293.223.232” so now your packets send this info:
293.223.232 5:01 PM 12/8/2003 Windows xp, MISE 4.0 (Comaptiable with IE6;Win32)
Now you got your ip hidden but they can still see your Os and your Internet browser. There is a quick and easy way to fix this. Hold down the windows logo key + r and the run dialog appears. Type in regedit and then click ok. The registry editor has appeared. Now navigate to this key to change your os version:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersion
and you will see all of your information. Now Only Change the following keys:
The Version
Your namedont change the c:windows keep that as your root directory! I am warnign you! Now when you restart your machine when you visit your website it will say whatever os you typed in there. I have linux mandrake listed for mine. Now once you changed that navigate to this key:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet SettingsUser Agent
and change that to whatever you want.
Now when you surf the internet the packets send this data out:
293.223.232 5:01 PM 12/8/2003 Linux Mandrake, Opera Webbrowser
See I faked all of my information. And if you want to go further change the clock’s time and date.. But that wont help the hak0r much. lol =)
D. Socket Proxys
Now Socket proxys they dont work like http:// one’s do. Socket proxys work with individual programs such as Aim and Icq and so fourth. Now socket proxies are going to be harder to find then http ones. That is because there’s just not a real demand for them. So go to google and type in one of the below
index of/socket proxies
or
socket+proxies
and so on… Now once you have found one open up internet explorer again and go back to tools > internet options > connections tab > lan settings > advaned… and where it says socket proxies put your socket proxie. now be aware that http:// proxies will not work for a socket p roxie. You have to find one for sockets. Once you enter it your and apply it your more secure then you where before you read this tutorial. Now there is one more security issue and that is cookies. I would suggest you limit your cookies to a certain size and also maybe have a program “delete” all of the cookies after you close a internet session. Anyway I hope this tutroial has helped.
If you want to add in something then please email me at my email at the beginning of this tutorial.
1999 – 2003 Hackers Network All Rights Reserved.
December 11, 2003 at 1:59 am #65243Hackers
MemberAlso I can’t edit my last post but if you have a free firewall and you have it configured right there is always a chance of getting hacked. Nothing is ever 100% secure like your telling me. Also if you have a Av software there are over 500 viruses each month. Most of them are undetected until someone catches them and submits them to symantic, or whoever. You dont know very much do you?
December 11, 2003 at 2:49 am #65213shifter
ParticipantFor someone so damn smart, you’d think you would have figured out that you had to logon to the forum before you could edit your post (Now who’s the newbie/lamer?). We appreciate that you have some knowledge of proxies, thank you for sharing your tutorial with us. BUT there is no excuse for your self righteous attitude OR your comments directed at one of our most respected members. Please adjust your attitude if you wish to continue your participation in this forum.
December 12, 2003 at 6:33 pm #65214Johnson
MemberAnyone in yahoo that steals names isn’t going to steal them using you’re ip from some ip sniffer. If they are going to steal you’re name it will be from trojaning you, or sending u a program with some script in it to steal you’re password. Names are stolen from either cracking/stealing the pw, cracking/stealing the info. Like I have said b4, if you want to be safe, then do not d/l anything or accept files from someone, especially around yahoo. If you are gonna d/l a lot of stuff that you don’t really need i would highly suggest you use 2 pc’s, and not sign anything into the pc u d/l stuff on. It’s pretty cut and dry, an as for all this talk about “hacking” it’s annoying, I have been around yahoo for a while now and I am one of the most respected crackers, in games theres only one guy that ne one with any sense would consider a hacker, he could take any name he wanted to up til 2002, but he was using a couple of differenct exploits, but u always hear stories. Just because someone says they are a hacker doesn’t mean that they are, some people sit online 24/7 trying to convince people that they are hackers, they throw a bunch of computer jargon at you to confuse you into believing them and being afraid, it is really pathetic. I was in chat the other night an this guy targeted me, he first said he was gonna boot me, then after many failed attempts he informed me my account was locked, i proceeded to laugh at him, not many people know but there are servers to log in locked accounts, i tore into this guy for like 10 minutes, and he said i was mean, lmao now that was ironic, he forgot he was the one who said he was gonna boot me.
And for this guy rippin on freddy it’s the same stuff i get from newbies in games, they think degrading me gets them some kind of status, it is pathetic, freddy is one of the few people here I actually respect. When you are on top there’s only one place to go.December 21, 2003 at 4:26 pm #65210Dave
MemberQuote:quote:Originally posted by JohnsonThere was a program that you put in someones id and it would tell you all the aliases on their account, and also it would give you their ip, the person had to be online for it to work. So I don’t think it would be that far fetched for someone to make an IP stealer.
Is it possible to view all the aliases on someones account? I hope this is not possible.
December 25, 2003 at 10:29 pm #65236zhugeliang
MemberI know this is an old topic, but since my post on this topic (in which i’ld been testing the tracking of ip addresses over yahoo), I have been doing a lot more tests and research on the matter. So here’s the scoop, no, you can’t track IP addresses, see other names on accounts, or do any of that other crap that people try to scare you with. I’ve checked all (well, all that i could find, which is a lot) of the sites with any kind of yahoo programs/tools, such as booters, mic. lockers, etc. There is no way to trace someone’s ip (assuming you are in a chat room and doing any p2p connections) and you can’t look up other id’s of someone’s account.
I decided to write this to answere Dave’s question, and I hope that this answeres all your questions.
Some good advice, would be to take a look into security (at least at what people are trying to scare you with) before you believe them.
Hope this helps 🙂
December 26, 2003 at 8:17 pm #65246netscore
Memberonly way in YIM is to send someone a file via pm, then go to ms-dos type in netstat -n and you have their ip.
December 26, 2003 at 9:25 pm #65225riff_raff_50076
MemberThere is a program that will show you all the alises on an account, but before anyone gets scared of this the username and correct password are a MUST.If they dont have the password the program is useless.As for Tracking an IP thats almost impossible dail up users get a new IP at every connection Dsl and cable users change Ip at diffrent intervals . to stay completely safe stay off line , to be reasonably safe keep your antivirus updated . Dont sweat the small stuff .
January 14, 2004 at 8:34 pm #65248lovegrl
Memberhey could some one help please…. some stupid guy said if i don’t voice chat with him he is going to hack my pc with in 30hours could he really do that. Is their anything i can do to avoid it
January 14, 2004 at 10:26 pm #65212shifter
ParticipantYes, ignore him. Its 99% likely it is just BS. Even if he does have this ability, it is unlikely that he will waste 30 hours doing this.
A good thing to do is make sure you log all conversations with him. If he continues to prove extrememly bothersome, call the police. Show him this article to prove how serious a crime this is. Don’t give in to losers who think they can scare you into doing what they want. Its a load of crap.
January 15, 2004 at 10:53 pm #65224riff_raff_50076
MemberLovegrl do Your self a favor and get a free firewall Sygate, zonealarm ,or Outpost all good and free also keep your antivirus upto date,doing those two things will keep your computer safe from this guy or anyone else for that matter . Dont be intimedated by someone in chat its probly all talk just to scare you. follow shifters advice
January 22, 2004 at 5:57 pm #65249oh_fiona
MemberEvery now and then, I get threats like lovegrl. I freak and stay offline for a couple days. Who says ignorance is bliss? Nothing ever happens though and I eventually go back online. But after reading this thread, I feel better that hacks are easier to avoid then some claim. Glad I found this website. 🙂
-
AuthorPosts
- You must be logged in to reply to this topic.