Untraceable internet connection

We''ll assume that you want this information for educational purposes and not to elude police. Using a proxy server might serve the purpose you want unless the police are really determined to track you down.

quote:

---

Original post by caffeineaddict
We''ll assume that you want this information for educational purposes and not to elude police.

---

Yeah right

---

"C lets you shoot yourself in the foot rather easily. C++ allows you to reuse the bullet!"

I would never actually want to do this, I was thinking about and was curious how it would be done. I''ve got too much to lose to do something that would cause the police to track me down...

How would you setup a proxy server? I''ve heard of them before, and thought that they had more puposes than eluding police... what are they meant for?

Proxys are your friend. Google for "free anonymous proxy" and you''ll find a list with a lot of them. You set them up in the "Advanced" dialog in "Connection Settings" tab in "Internet Options" dialog. You can even link them, but i''m not really sure how to do it.

Or you could hack into someone''s router, and link it with some other wingates in your way to the site you want. but don''t quote me on that.

Um.. goto a library computer and log in.

shortcurves.com | /josh

The only other thing I could think to do was to drive around in a laptop/wireless NIC, and connect to other people's unprotected wireless networks. I here that there are lots of them. This wouldn't quite make you anonymous though, because cops could still trace the locations that you ARE using, and find out what neighborhoods/networks you are using. You would have to find a new one everytime in a random place to truly be secure. Plus it would be a pain.

Just for giggles, I just setup the proxy with some serever in argentina. Pretty cool. Except now I get the argintina version of google

Thanks for the ideas. I will never have to use them, hopefully, I was just curious.

any other methods?

[EDIT]
I also thought of the public library, but it wouldn't be too hard for the cops to figure out that you just go to the library every friday to check your 'anonymous' email... TH elibrary has cameras... they could look at all of the times that you checked your email, and find the people who went to the library at every one of those times. Would be tough for them, but definately not impossible.

Is there a way to do multipule proxy's so incase they get through one, they still have to search through a whole maze of them?[/EDIT]

[edited by - Tazzel3d on May 1, 2004 4:05:57 PM]

Downtown in my city we have free wifi access... when I want untraceable access I park and access it from my laptop. For even more security you could combine that with an annon. proxy. You could also buy a 700usd "throw-a-way" laptop with cash and no one would be able to trace you.

Didn't see Tazzle's post

[edited by - monkey_32606 on May 1, 2004 4:12:14 PM]

Wireless stealing might backfire if they can find out your MAC address.

would a throw away lan card work just as well?

Also, my router has an option to change the WAN MAC address... what exactly does this mean? Does your MAC address come from your LAN card? Is it possible to hack a LAN card to have a different MAC address every time you make a connection?

I agree that this would be a bit easier in a big city where things like free wifi is available, but I come from a town with a limited population, a sinlge free inet source , the pub library, and only a couple ISPs.

Do email services such as hotmail or yahoo, encrypt the data so that your ISP can''t spy on you? It doesn''t matter what kind of prxy you have, if your ISP can simply look at your email as it streams through them. Or the cops might be able to tell them to do this...

quote:

---

Original post by Tazzel3D
Is there a way to do multipule proxy''s so incase they get through one, they still have to search through a whole maze of them?[/EDIT]

---

OMFG HITL0R OR SMTH, CLICK MEH
happy hax0ring.. err i mean mail checking.

Well http proxys couldn''t help your hacking efforts too much, wingates would do that.

Well, if I were going to try and cover my tracks as you have described I would setup a Netcat relay and a Covert_TCP server operating in Bounce mode on a remote computer. Then I would use a Covert_TCP client to bounce an interactive session off of a random high profile e-comerce website that is based in another country to the Covert_TCP server, which would forward the connection to my target.

In essence, the data would transmit like this:

1) I bounce data off of the e-commerce site to my remote system from my computer. The data will look like it has come from the e-commerce server

2) My Covert_TCP listener on the remote computer will forward the data to the Netcat redirector on the same system

3) The Netcat redirector will send the session to my target computer


This process will make the connection very hard to trace, and will even give a false source. You can bounce data off of multiple servers, and redirect the session multiple times to make it harder and harder to track.

Hmm... Liquid Darkness: I would have no clue where to begin seting that kind of thing up... Does sound good and I am familiar with the methods... I''ll have to do some research on that

The other thing is that for proxy to work, I would need to have atleast 2 in the chain. If I connect to a proxy and the cops see that IP address as the one that is checking the hotmail account, they can simply tell all of the local ISPs to do a search on connections with that address. Most likely, nobody else will be using proxy and they can pretty well nail you. I tried setting up the proxy chain, but it doesn''t seem to work. I just put the two IP addresses in my Proxy address box like this:
200.75.38.202:80 200.130.18.29 ad then port 80 in the port box. All of the IP websites say that my IP is the first one. Is it that I connect to 200.130.18.29 which goes to the first which is what is displayed?

How can I test this?

I''ll have to do a little more research into nc and Covert_TCP

Gonna get flamed for this, but realistically the best way to create an anonymous connection is to own a box in another country, preferable one with really weak infosec and privacy laws, and preferably a residential windows box on a cable modem account.

One would bounce the connection off that box from wi-fi access. High quality 802.11 gear allows modification of the MAC address.
Realistically if you aquire wifi access from a wireless access point that does not have WEP enabled, and is not an advertised hotspot you are likely not being logged.

Ideally one would be using an operating system such as FreeBSD which gives one a wide variety of tools.

Once you have gained remote access to a victim system use any number tools available to bounce the connections to your target.

Be aware that in some areas of the US masking the origin of a computer communication can be illegal. Compromising systems is illegal in most countries. Using packet capture tools can constitute privacy violations which is a serious offence in some countries now.

This is for educational use only.

If you try this in a real environment be aware that people like me are paid alot of money to catch people like you.

I am not hacker, but would this add to the anonymousness()? After bouncing stuff around and routing around, your packet may be lower than normal packets in number of bounces left. So it may be useful to have a "packet recharger" after your last bounce, right before it routes to its final destination. The "packet recharger" sets the bounces to 255. That way to a trace it may not seem like you have gone through very many routers, and it will make your comp seem closer to the target. Just an idea.

[edited by - witchcraven on May 1, 2004 6:29:47 PM]

[edited by - witchcraven on May 1, 2004 6:31:41 PM]

quote:

---

Original post by ChaoticCanuck
Gonna get flamed for this, but realistically the best way to create an anonymous connection is to own a box in another country, preferable one with really weak infosec and privacy laws, and preferably a residential windows box on a cable modem account.

One would bounce the connection off that box from wi-fi access. High quality 802.11 gear allows modification of the MAC address.
Realistically if you aquire wifi access from a wireless access point that does not have WEP enabled, and is not an advertised hotspot you are likely not being logged.

Ideally one would be using an operating system such as FreeBSD which gives one a wide variety of tools.

Once you have gained remote access to a victim system use any number tools available to bounce the connections to your target.

Be aware that in some areas of the US masking the origin of a computer communication can be illegal. Compromising systems is illegal in most countries. Using packet capture tools can constitute privacy violations which is a serious offence in some countries now.

This is for educational use only.

If you try this in a real environment be aware that people like me are paid alot of money to catch people like you.

---

Thats pretty much what I told him to do, except that you mentioned that he should use wi-fi to originate the connection... And there is no need for him to use a BSD box, if he has netcat on NT from the attacking computer, it would work just as well to start a session with any type of shell account remotely.

Besides that, he just wants to anonymise an HTTP session, not necessarily launch a full attack...



[edited by - Liquid Darkness on May 1, 2004 9:39:25 PM]

quote:

---

Original post by Tazzel3D
The only other thing I could think to do was to drive around in a laptop/wireless NIC, and connect to other people''s unprotected wireless networks.

---

google for "war driving" (or just try WarDriving.com), although i don''t know if it is legal...

This is sort of related to the topic: Freenet