Saturday, September 16, 2017
Doxing
Doxing
In this post I will write about something that is bit different but still involves reconnaissance. Doxing is a process in which someone (usually attacker) gathers personal information about individual and reveals them in public. Obviously, intention behind Doxing is never good because it is used to harass and make someone fearful. Since it discloses private information in public it affects virtual identity and is serious privacy concern. Doxing is a process with 2 steps: first is gathering information about individual (reconnaissance) and second is intentional revealing of information in public. I will concentrate on the first step and information gathering since it can be also utilized in cyber security. When someone posts such information publicly then its called Doxing and its malicious.
Starting information will usually be name, e-mail username or such. Its a small piece of information so you will need to search for more using search engine about which I have written in my previous post. Lets say you have a name, username or something similar, there are many tools with which you can search for information like social media accounts, locations, e-mail addresses, etc. PeekYou is people search engine in which you can search about person by name and location, username or phone. It will return you information about social media account details, possible e-mail addresses and public records. There are some similar sites which let you search by name/username: Pipl, Spokeo, Lullar. Check Usernames is a site used to check availability of username on lots of social networks. We can use this to check if a specific username is used on particular social network and then gather information from that network. KnowEm is a site which is very similar to Check Usernames. You can search for someone by using image, for TinyEye you have to upload image or provide link of an image. It will return you sites where that image is used and pictures that best match your given picture. Also you can search google by images, you have to provide either image URL or upload image, same as with TinEye. White pages can be used for searching for phone numbers and addresses, obviously those are specific to location where you are searching. All the tools and methods which I described in my previous posts can be applied here in combination with this tools.
Since we use Internet on daily basis it has become a big of our lives. We use different social networks and register in various sites. While doing that we share our information intentionally or unintentionally, also because of fast change of the Internet we usually forget about the sites we used and information we shared. So its important to be aware of what you share on the Internet and where you sing up, since it can be used against you in a malicious way and it can have serious consequences.
download file now
