Follow us on Twitter!
It is the path of least resistance that makes rivers and men crooked. - Bj Palmer
Thursday, April 24, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 20
Guests Online: 18
Members Online: 2

Registered Members: 82905
Newest Member: BLckLIght
Latest Articles
View Thread

HellBound Hackers | Events | General

Author

How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 27-03-08 21:55
How can anyone find the IP address or ISP of another member in a forum or website?





!!!!THIS IS NOT GOING TO USED!!!!!!!!!

I AM JUST ASKING FOR THEORETICAL REASONS

(just to clarify it)Grin
Author

RE: How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 27-03-08 21:57
WordofMight wrote:
!!!!THIS IS NOT GOING TO USED!!!!!!!!!
I AM JUST ASKING FOR THEORETICAL REASONS


Yeah everyone does that...

Sorry though, I can't help you out here. Besides I don't think forums actually give you the users true IP but I could be wrong so don't quote me on that lol


Author

RE: How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 27-03-08 22:24
create a server.

open notepad

Code

<?php
putenv("TZ=GMT+1"); //Set this to whatever timezone the forum of interest is. Takes some fiddling.

function clean ($var)
{
return htmlspecialchars($var);
}

$ip = clean($_SERVER['REMOTE_ADDR']);
   
$ref = clean($_SERVER['HTTP_REFERER']);
$time = time();
$readable_time = date("Y\-m\-d\, H\:i");
$entry = "|<u>$time ($readable_time)</u>| <b>IP:</b> $ip, <b>Ref:</b> $ref<br /> \r\n";

$fp = fopen('iplog.html', "a") or die('Cannot open logfile');
fwrite($fp, $entry);
fclose($fp);





###OUTPUT IMAGE###
$file = "imagesource.gif";
$fp = fopen($file, "r") or die('Cannot grab image source');
$content = fread($fp, filesize($file));
header("Content-type: image/gif");
echo $content;
fclose($fp);
?>





Then make a .htaccess file in the same folder:

Code

AddHandler application/x-httpd-php .gif





This allows .gif files to process php. Now, simply put a 'imagesource.gif' in the directory and link to the original image (whatever you saved the php under. Remember, save it as a .gif file aswell). Should do the trick, it logs IP adresses of viewers. Very simple really.




Edited by on 27-03-08 22:24
Author

RE: How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 27-03-08 22:41
Taken down now lol.





Edited by on 27-03-08 23:42
Author

RE: How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 27-03-08 23:39
that's pretty interesting


Author

RE: How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-03-08 00:36
slpctrl wrote:
$ip = clean($_SERVER['REMOTE_ADDR']);


Is that necessary?

and yeah, maybe just stick it as your avatar or sig.

unless you want a specific IP, then link somebody like "check out this cool image" and put up some random lolcat or who knows.

hmm what kind of defense against this is there? code the forum to search each image for code i guess?


Author

RE: How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-03-08 01:10
slpctrl wrote:
hmm what kind of defense against this is there? code the forum to search each image for code i guess?


I'd like to know this too.


Author

RE: How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-03-08 01:15
Feralas wrote:
slpctrl wrote:
hmm what kind of defense against this is there? code the forum to search each image for code i guess?


I'd like to know this too.


Ahh lol quoted wrong person Pfft anyways, I doubt there's any really, a proxy would disguise the IP it places in the table but you can't prevent an IP from appearing because of the way packets of data are sent to your IP from the server. I can't wrap my head around a way to defend against it anyways.


Author

RE: How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-03-08 01:28
maybe the forum could copy all images over to its own directory, and display them from there?


Author

RE: How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-03-08 01:33
DigitalFire wrote:
maybe the forum could copy all images over to its own directory, and display them from there?



Oh, you meant server side? You could, there might be some issues namely images that are drawn in PHP (like the one above) if the images are being drawn from an external image source for other reasons (some are) it wouldn't display anything.


Author

RE: How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-03-08 02:23
slpctrl wrote:
Oh, you meant server side? You could, there might be some issues namely images that are drawn in PHP (like the one above) if the images are being drawn from an external image source for other reasons (some are) it wouldn't display anything.


Yeah server side image copying. thats true that some things wouldnt work, but it would protect users.

and for userbars that say like "ranked 7 out of 100" or something like that, as long as it requests a new image to copy over, it should keep updated and display properly.

even if the image is drawn in PHP, it still produces a .gif or .png, so are you sure there would be problems?

if there are, then it might just be the price to pay for better security.

have you tried this on HBH? it would seem like this would work on HBH, doesnt it?




Edited by on 28-03-08 04:32
Author

RE: How can anyone find the IP address or ISP of another member in a forum or website?


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 28-03-08 07:46
or you could just not click on the link to go wherever he wants you to go. i think that would solve the problem.