Question about hacking

Ok heres my question. I'm trying to figure out an IP address of another computer by opening a direct connection in AIM and using TCPview to show me the established connection.
When I'm connected I'm told I'm connected to (ex) arsvip-m01.blue.aol.com:5190
what exactly does that mean? and is it possible to break that down to a (ex) 123.433.123.1 like number?
Basically what I'm trying to do is hack my own computer and check for vulnerabilities.
I've created 2 AIM accounts and tried the direct connection and netstat method because I read about it in another forum and got TCPveiw to avoid having to use netstat.
I'd prefer not to use AIM to do this but I figured the sound of a direct connection seems pretty to the point.

Is their any other way to get my computers IP from another computer?
(assuming I know nothing about the computer who's IP I'm trying to get)
If so how would I do that?

Is their any way to hack into my computer using the arsvip-m01.blue.aol.com:5190 TCP information?

Whats the most logical way to hack my computer?

and this my be a stupid question but is it illegal to hack my own computer?


Any advice would be greatly appreciated ,
DOOBERT :)

1. It's a hostmask showing you're connected to an AOL server through port 5190.

2. Yes.

3. Yes.

4. Not in it's current form, but with some breaking down of the information it reveals and a little digging, yes very much so.

5. The way you know best is the most logical way to use. I'm not going to teach you hacking, even on your own. This is why I've intentionally left out any useful information in this post.

6. No, if you're the owner of the box, it's not illegal to hack it - IF the hack doesn't 'hop' through someone else's property - ie: that aol server you just mentioned. Read up on 'wargames' and how to hack yourself within your own network. Don't try it through someone else's network, that IS illegal.

Thanks for the reply ICE.

Could you reccomend where I could look to "break it down"?

That is basically the only thing holding me back at this point.

And I love how you broke down my questions hahahahaha that rocked.

Thanks again,
- DOOBERT :)

Perhaps you missed this part.

Quote:

---

IF the hack doesn't 'hop' through someone else's property - ie: that aol server you just mentioned.

---

Hopefully even when you do find that out, common sense will keep you away from that AOL server.
You do realize that is what that is right?
HTH

Quote:

---

Originally posted here by DOOBERT
Thanks for the reply ICE.

Could you reccomend where I could look to "break it down"?

---

Open up a command prompt on your computer (On XP, Start -> Run -> type "cmd" -> OK. On older systems type "command".) You can use either of two commands:
ping - http://www.microsoft.com/resources/d...n-us/ping.mspx
OR
nslookup - http://www.microsoft.com/resources/d.../nslookup.mspx

I would highly recommend you read a basic tutorial on TCP/IP and IP addresses. At least for the terminology, if nothing else. http://www.google.com/search?q=basic...en-US:official (Google is your friend.)

Regards,
Xierox

Thanks for the replies everyone you guys rock.
But I'm still not to clear on this.
It's not illegal to hack my own computer but if I go through AOL's AIM to do it, it is?
Can someone explain why?
And that goes for all outside networks right?

And is it illegal to ping someone? and if so why? and if not why not?
Wouldn't that give you the IP of the (in this case) hostmask you are pinging?

Thanks again,
- DOOBERT :)

Pinging is a universal network tool, as it's origonal function (which still applies today) is to see if a host is responding or not. Great for network testing to see which computers are up and which are not. Pinging, unless done in massive amounts to form a Denial of Service, is not illegal by any means. I can't think of a single instance or tool in which it would be illegal to discover an IP address. The discover and translation of hostnames to IP addresses is something that is required for the internet to function in the first place, and is an important part of the TCP/IP protocol. Meaning, it's MEANT for you to know what the IP is to each of those hostnames.

However, hacking -through- AIM can prove illegal. Even if you are trying to attack your own machine, your exploit still has to go through the AIM servers. Let's say you direct connect and send the exploit through the AIM client that way. You won't be passing through their servers AFAIK, but you are still using their software as a means to exploit. Granted, that shouldn't be illegal since it never crosses into their servers, but it's certainly a grey area since you are using their own software.

DOOBERT

"Legality" is a strange thing that varies from country to country and even state to state. I try to get across the point that obeying (or not) the letter of the law has nothing to do with the spirit of the law.

Stay out of trouble. If you start using other people's assets you stand the risk of being misinterpreted/misunderstood, as your activities might be identical to those of a "bad guy"

The "big boys" don't mess around...........they just shoot on sight :(

Start with a null modem cable (now that DOES give away my age:)), then work up to your own private network etc. That way you do nothing illegal, but more importantly, you do not draw attention to yourself.

Please do not get me wrong, I am not telling you how to run your life, I just don't like seeing people get into trouble if they don't deserve it.

Cheers :)

Thank you for the reply alpha.
Now on to my next series of questions.

Is their a program I can download or write to see if my online activity is being traced like that of the Trap and trace method?

Basically I want to be able to see if someone is tracking me and if so be told how much time I'd have left before my position is locked on. Or does that only exsist in the movies?

Also what is the name of the method hackers use to route their hacks from place to place or country to country? Is it just routing? Or is their a specific name for that type of method.
And how does one go about doing that?

I don't want you guys to get the wrong impression about me and think that I'm trying to do some major hacking over here and trying to take over the world. This is all just for personal knowledge because not only do I think hacking is cool as all hell but I'm writting a screenplay for a hacker type movie and when I film it I want to be showing real methods so people like you that watch it aren't like wow that was a perfectly good waste of time, money and film.

Once again, all you guys rock for helping out and I wont forget you in the special thanks credits.

-DOOBERT :)

Quote:

---

I'm writting a screenplay for a hacker type movie and when I film it I want to be showing real methods so people like you that watch it aren't like wow that was a perfectly good waste of time, money and film.

---

I am sorry to have to say this old chap, but there is a thing called "poetic licence"......like you shrink a three week task into three minutes? This is used in the film industry a lot:)

I strongly recommend that you look at "Rainbow Tables" if your script involves any password cracking?

Also do not forget collective computing..............SETI, Folding At Home and so on? You might tie that in with a lot of worms/backdoors creating a Worldwide web of computing power? The "bots" (possessed machines) will then respond to the "botmaster" and create the ultimate "Rainbow Tables"?

Obviously, there are people here who are far more qualified to help you in giving your script realism......my advice is that you do not really have the time to do it yourself..............just get the technical support.......and pay the guys if they do help? hey 50 bucks can buy a couple of course books or feed you for a week a college? :D

just a few thoughts?

Quote:

---

Is their a program I can download or write to see if my online activity is being traced like that of the Trap and trace method?

---

AFAIK, there is no single program that does this kind of detection. As nihil has said, poetic license. I believe that traditionally this kind of tracking is done via the old fashioned detective method: look for tracks (IPs, postings, emails, etc.) and follow those. People always leave a trail; the question remains as to how deep and how vast the resources (ie., time, people, computers, networks, $$$$) someone has to track another. So in reality you'd have to find ways to hide that trail. I suppose if you knew who was tracking you, you could use a keylogger or some other spy-type tool to see what activities they are doing (sort of watching the watcher).

Quote:

---

Also do not forget collective computing..............SETI, Folding At Home and so on? You might tie that in with a lot of worms/backdoors creating a Worldwide web of computing power? The "bots" (possessed machines) will then respond to the "botmaster" and create the ultimate "Rainbow Tables"?

---

wasn't Kazzaa suposed to be able to do this sort of stuf as well... and there was a worm that tapped that at one time.. unfortunatly iit replicated, but the payoad failed..

how to tell that your being traced.. hmm .. now that is where Bots come in
pity TS isnt here.. he knows about this side of the show..

DOOBERT-
As for your question using AOL's servers...in that hostmask you've got, you can see ".aol.com". That means that in order to connect to that IP address, you must go through the AOL servers first.

In order to hack that computer legally, you must have a network in your own home. This is so because you connect to your router/hub, and then straight to that other computer...no internet connection is needed or used.

EVERYONE ELSE-
are there any kinds of tutorials out there that would help in using C++ to do distributed computing...or is that a concept type thing you just kinda figure out and tailor to your needs?


A_T

Quote:

---

are there any kinds of tutorials out there that would help in using C++ to do distributed computing...or is that a concept type thing you just kinda figure out and tailor to your needs?

---

I haven't seen any but then again, haven't looked for any. Perhaps looking at the source code for some of the distributed projects might give you insight?

Hi AT,

You might find it here...

http://www.google.ca/search?client=f...=Google+Search
Google Search: C++ to do distributed computing

Ok, now we're bordering on the insane, so it's time for a bit of |ce philosophizing:

Doobert:

You don't need to pm me with your responses, most especially if you've already posted them here. I *can* read, consider myself quite literate, and check threads frequently, most especially the ones I've posted in.

Now for your questions

1. Yes. It's called a Firewall. Go google it.

2. No. That's Hollywood hype, and although it'd be cool if we could use our VR gloves to highlight graphic representations of people attacking our system and 'kill' them, that's kinda Hollywoodesque too. The REAL guys use things like ethereal, plus their firewall and associated logs and stuff to catch the various ScriptKiddies trying to break in...which leads us back to question 1 where you asked about downloading - That's what wannabee's (aka ScriptKiddies) do - they download a 'hacking tool, rootkit, etc' and try to run it against everyone - then they call themselves 'Uber leet hackers', when in reality they're completely unknowing of the tricks and tools of the trade. Real Hackers write their own stuff... Look up these definitions: Script Kiddie, Hacker, Cracker, Phreak.

3. Back in the days when you had to hack your local phone company to get free long distance so you could 'hop around the world' it was called 'hopping'. Nowadays, it's still called hopping, but it's used to protect anonymity - It involves using a string of 'zombies' - computers you already have access to - to handle your hack. Let's say I owned a college in southern california, a major university in bangladesh, a business in rochester, and some idiot's personal box down in south america somewhere.... I could use each one of those to do my 'hack' for me - either by controlling them directly and 'hopping' through them (using them as proxies to hide my real IP), or lining them all up as my 'army of zombies' and hitting the target without me ever being present at the targetted end. It's all a matter of programming. Oh, a sidenote - it used to be that Universities were the most commonly hacked setups - this is for 2 reasons: 1. they weren't secure at all, and 2. they had very high bandwidth (on the order of T1 or shared T1's.) As for your asking how one goes about doing that? That's up to you to find out, we're not going to teach you.

Quote:

---

I don't want you guys to get the wrong impression about me and think that I'm trying to do some major hacking over here and trying to take over the world. This is all just for personal knowledge because not only do I think hacking is cool as all hell but I'm writting a screenplay for a hacker type movie and when I film it I want to be showing real methods so people like you that watch it aren't like wow that was a perfectly good waste of time, money and film.

---

Wow. Hacking is cool, when you use the purest definition. Remember there's a HUGE difference between a true Hacker, a cracker, a phreak, and a scriptkiddie. I don't necessarily subscribe to the 'black hat, white hat, grey hat' philosophy of things in that everyone has a bit of all 3 in them, but most of us here are of the 'white hat' variety, or like the world to think so at least. It'd be pretty cool to see a technically accurate hacking movie out there amidst the fluff, but it'd be tough to do - most serious hacks take months and even years to setup, including a lot of social engineering, dumpster diving, smaller hacks, etc. You'll probably find as most screenwriters do that if you were to portray it 'technically accurate' you'd be so wound up in the petty details you'd lose sight of your plot. I offer 2 hints to your research:

Google is your friend, and
Next time tell us you're a writer first. Folks tend to get paranoid with the loose usage of the 'h' word around these parts.

[edit] AT - yah, they're out there. The big problem is that when you can finally see them up on the internet, odds are they're way out of date. The Real guys (as opposed to the skiddies) keep their good stuff to themselves - posting it up only after it becomes useless to them. [/edit]

Quote:

---

I'm writting a screenplay for a hacker type movie and when I film it I want to be showing real methods

---

Will this include the social engineering that has been taking place thus far? :D

cheers

-Relyt

Quote:

---

Will this include the social engineering that has been taking place thus far?

---

Judging by how usefull this forum has been on my quest for knowledge I would say most definitely.

-Nihil

Quote:

---

Obviously, there are people here who are far more qualified to help you in giving your script realism......my advice is that you do not really have the time to do it yourself..............just get the technical support.......and pay the guys if they do help?

---

My question on that is what business would you recommend I contact for something like that?
(I basically live in the Silicon Valley of the east so I've got everything from AOL headquaters to ORACLE and Cisco systems for resources.)

I read an article on Kevin Mitnik is it still possible to hack the phone companies switchboards and such. If yes what part of the phone companies system would be of use to a hacker?


Thanks again you guys I never expected so much help.

Keep on rockin'
-DOOBERT :)

Now, anyone of any age can write a script - I gave you the benefit of the doubt, but still didn't show you any tricks. I'm curious, however, as to the sell-ability, background, and education levels of a writer who is a mere 22 years old. I'm quite sure this is the 'social engineering' aspect of which our friend Relyt is speaking. (btw, his profile showed his b-day in 1983 for anyone who bothered checking.)

A couple of things about your last post kind of tweaked me though and made me seriously wonder about you and your intent. AoL isn't based in silicon valley, they're based out of Virginia. It IS quite possible they have an office there in the valley, but somehow I doubt it - all their major work comes from VA, with servers maintained in small computer shops around the country, and their helpdesk outsourced. Ooops.

As to the answer to your last question, No one could 'hack' a phone system... they would phreak it. Look up those definitions I gave you. You won't be getting any more info from me until then. Oh, and you might add 'Captain Crunch' to the list since you're interested in phreaking now.

he said he lives in the silicon valey of the east.

but i always thought cisco was located in the west... strange.

aside from that, no one will pay to watch a movie about a guy sitting at a computer at a command prompt. its boring to watch for about 99 percent of people. thats why hollywood makes the lame fake movies.

PM me....

Be prepared to send me a copy of your script after I sign a disclaimer accepting that the entire original work is yours.... I'll _advise_ you how to fix it to give "realism" without making it boring, (unless it's boring in the first place... ;) ... But remember, if it can't be fixed in such a way as to make it real, there wouldn't be much I could do... nor anyone else....

The whole problem is the storyline and how you can incorporate the "hacking" issue without boring the hell out of the audience and losing them on a technical basis at the same time.... It needs to be done on an understandable/explainable basis. It would need some "edge" to the story in a way that the technical aspects are undestandable to the regular person in order to create the "edge". It can be done with appropriate dialogue but that's not easy to create and be _realistic_ in the end.

Black: He said the Silicon Valley of the EAST! Virginia is in the east, remember? Jeez, I have to teach you Yanks everything including your own country's geography?

Hi DOOB~

Firstly, I cannot advise you very much on the technical side.............my "hacking" belongs to a couple of generations ago :)

But do think about that................it will take you maybe a year to write your script, so you need to sort of "future proof" it?

I have already suggested "Rainbow Tables" which are sort of pre-calculated password cracks.

On the communications side you should be looking at wireless (WiFi), "hotspots", wardriving and so on...............maybe some satellite stuff as well....................then there is "nonestop" I am afraid you will have to google for that one ;)

Hacking corporate phone networks?.....nah! too 1970's :D

How about "leaching" fibre optic cables?

One thing I can assure you of, is that you don't have time to learn the techniques yourself, you need some technical advisors. Otherwise someone else will beat you to it.

Also remember poetic licence..............you can use time compression, just get the technological feasibility right.

TS - nah, you just need to teach us to read more closely :rolleyes: touche