Tuesday, August 19, 2014

Stalk-a-thon: Stalking the Stalker!

Prologue
College, a place where numerous people from different backgrounds come to study, learn and enjoy their lives. Recently I heard about some weird people in college -who were stalking girls- like fools.
Let me just give a little details about what they did.
So this guy, started calling almost every girl who joined college this year, telling them about his sad life's story, waiting outside their classes, sms-ing them every night (I think he sent the same sms to everyone) , even running around with guitars, doing anything and everything to get their attention. Yes that's a lot of hard work. But, all for nothing. They all started ignoring him.

I feel such useless ways of getting attention is a waste of time. Cause in the end they will perceive you as a "weirdo" and stay a mile away from you.

But is stalking totally useless? Not quite.. I think if you are gonna go after someone: be it someone you love or someone you hate, maybe your mortal enemy or a princess right off a fairy tale, gathering intel about that person is essential, and increases the success rate of anything you might plan in the future.
So without wasting any more time.. Lets get on with some "stalking".

The Start
Here I am gonna gather as much intel as I can on one of the "stalkers" from college who I recently met.
Though I will redact most of the names and other things.
(I'm gonna refer to the person who I am gonna harvest info about as the "Subject")
By the way, always remember, never let the Subject know that he is being stalked! That's essential.

First up we need to find a place to start from- like email, Facebook id, phone number, or a photo, anything that can give you some initial info about that person.

So here I got his number: *****07183

Let's first find out who it belongs to. I'm simply gonna use Truecaller.
Most cases it would simply show you the name and if you are lucky you will find the Subject's picture as well.
<img>

But looks like I'm out of luck.. TrueCaller functions by drawing contacts from its users.. possibly this number is a new number or none of the girls he was stalking bothered to save his number or they didnt have Truecaller in their phone.
<img>

Then we go to our next source of unlimited information- Facebook.
Simply search the number on facebook search, if we are in luck, the person might have added his number to his to his profile and it might just show up. For example:


But seems we are not at all lucky when it comes to our subject..

Then last thing we can go with the number is just search in google- we can get infos about what websites he owns, or places he might have given his numbers to, tons of information.

And we are in luck..
Google has found us some info!


+91 *****07183 Mobile Number current Trace Details

Mobile number : +91 *****07183 
STD mobile number : 0*****07183 
Local mobile number : *****07183 
Telcom Circle : Kolkata Metro Telecom Circle 
Location : Kolkata city,Howrah city, Hooghly District or North & South 24 Parganas and Nadia Districts 
Country : India 
Major Cities of the Area : Kolkata 
Local language of Location: Bengali 
NetWork operator: Bharti Airtel 

But still these info are of no use. Just tells us the city he lives in and service provider.. But I can assure you sometimes Google finds amazing intel!
So last resort, let me ask any of the stalked girls the name of the stalker...

*After 2 mins*

Ok... so now we have a name!

Let's just simple find him on Facebook. (Since he is stalking people I know, he must have been sending tons of friend requests to classmates of those girls, so should be easy to find him on facebook.)

   "id": "10000*********6",
   "first_name": "Ad******",
   "gender": "male",
   "last_name": "K******",
   "link": "https://www.facebook.com/ad****************56",
   "locale": "en_US",
   "name": "Ad*************p",
   "username": "ad**************6"
Great.. thats the basic info from facebook graph.. lets take a better look at his profile.



Seems most all his posts and other details can be freely seen by anyone. (Not a good idea, I always suggest keeping all your Facebook details friends only or friends-of-friends at max.)















Hmmm... so lots of info.. where he is originally from.. where all he studied and the name "Bansal" should give a fair idea about his what his family expected from him.

Pretty normal stuff..
Okay, now time for checking out the old posts, these tend to give you lots of good info..
Like for example if the person posts a lot of pictures, or writes tons of crappy statuses or posts links to songs.. sports or political issues.. 


But in this case.. we notice that the Subject just joined facebook last year, and he only started making status updates once he joined college.. I'm guessing he really had a lot of high hopes for college. Which were inspired by bollywood movies of course..

Anyways he is not really worth stalking (aka "doxing" as its popularly called on the internet) anymore..
But if it was necessary we could always take a look at his brother.

Since his brother came to earth before him.. he will have more information to offer.

So I am guessing its not his real brother.. maybe cousin or something.. they both are from the same state.. and studied in the same school etc.. Anyways, nothing interesting about these people. Totally disappointing.. :\

So as we can see, we were able to gather a lot of info from simple sources that are at everyone's disposal..
But I haven't got the opportunity to discuss any interesting methods of finding information about people..
So for that lets take another Subject.



We gonna use social-engineering, what it basically means is to talk, interact with people or the Subject and gather information about them or make them do something that will make your life work easier.

Skype Resolver



So what can we do with the skype id?
We can find the Subject's ip address and consequently his location!

Because skype is a peer-to-peer Instant Messanger and because a few people were able to successfully reverse engineer skype- we can trace ips of skype users.
So they were able to make tools that can send requests to connect to the Subject's skype id and the server returns the ip of the Subject in response as per the history log saved in the skype main servers.

This is called skype ip resolving.. there are both offline and online tools for this.. you can even search on the internet "Skype IP resolver" and find your friend's ip address.

Protect you IP from getting Resolved

Since I am writing about skype IP resolvers I will also mention how to protect your ip from these.

You can of course go to settings and change how skype connects to the internet and put a socks5 or socks4 or a proxy server ip in it.. and every time someone tries to grab your IP they will fail.

But not everyone has access to high speed good quality socks/proxies.
Hence the following method will be far easier and better.


  1. Make an email @ live.com. [MAKE SURE its NOT hotmail but live.com email!]. The name you choose for the bit before @live.com will be your skype name that you can share with your friends. For example, 418sec@live.com , then my skype id will be live:418sec 
  2. Go onto Skype and select "sign in with Microsoft Account" or something like that!
  3. go through normal Sign up process and when you are done your skype shouldn't be resolvable!

Other ways of harvesting data about your Subject

If your Subject lives in USA... ohhh boy.. You can get his entire identity in matter of 5 mins. 

(If you don't live in USA or the person who you are gonna stalk doesn't really have much presence on the internet, probably because he is a low-life stalker who just wanted his movie fantasies to cone true in college just skip to the Conclusion at the bottom of this post)

Recently a large database was stolen from a US gov agency. It contains names, address, date of birth(DOB) and the social security numbers(SSN) of almost everyone.So if you are in USA.. you are just unlucky.

For people living in Europe & Australia, of course almost everyone has access to the internet, because of which if you are not careful you can leave your data wide open and can be found by people who might wish you harm using  that info.

Since the stalker who I was doxing lives in India of course he doesn't have much data on the internet. But for people living in other parts of the world- you can find data about them by searching in sites like linkedIn, Facebook. Once you know their email id you can do reverse-whois search and find what websites they own, you can search on http://com.lullar.com, its a very useful site and pulls up any information it can find.
If you know what username the Subject uses in most of his social networking sites try http://knowem.com/

You can even find IP addresses using emails. It requires the person to reply to your email or send you and email somehow. As I said before social engineering plays a vital part and makes life a lot easier if you can just make the person do what you want to help you on your current mission. 

Once you get more info like name, city etc you can also look it up on http://whitepages.com. This will give you lots of info like address telephone number etc. (Might return multiple results, just need to use your head and find the who you are looking for).

If you have the person's picture you can try http://tinyeye.com or https://www.google.com/imghp, upload the image and click search. Reverse image search usually returns great results. So for all those parties where you took drunk selfies with girls and don't remember their name, exceptionally useful method!

I am gonna do a compilation of a whole lot of other sites you can look up people's infos from.
Again if your Subject lives in a third world country and doesn't have much internet presence, these wont be useful,

Compilation of Sites
-General 
*These should be your first stop.* 
http://www.zabasearch.com/- No Success with Whitepages? Try this. http://www.zoominfo.com/-professional career and employment. http://wink.com/- Another people search
http://www.freeality.com -name, city, and state. http://www.infospace.com/-companies by name, category, or city. http://www.isearch.com - Phone Books
http://www.whitepages.com/find_neighbors- Need to confirm dox?calling neighbors and asking for the target. They tell you how you can reach them.
http://www.411.com/-source for free people and business searches in the US and Canada.
http://www.google.com/search?hl=en&pb=r&q=NAME+HERE+%28first+or+last+or+b oth%29+optional%3A+state%2Fzipcode%2Fcity%2Fetc. just click it.
http://infobel.com-links to almost every phonebook in the world. - Social Networks Facebook,MySpace,YouTube,Blogs, Whois ect. http://www.pipl.com/- Searches quite a few different places
http://com.lullar.com/- A profile searcher for Networking sites.
http://www.checkusernames.com/ - Check to see if a username has been used on over 9000 websites.
http://www.ip2location.com/-accurate!
http://www.paterva.com/web5/- It provides excellent results when e-mail addresses and full names are used.
http://www.archive.org/index.php- Find deleted webpages.
http://www.emailchange.com/-have somebody's old email, find current ones.
http://www.nedsite.nl/search/people.htm#top- Search email by name, phone, fax, college, ancestors, etc.
http://www.selfseo.com/find_ip_address_of_a_website.php - Find the ip of a protected site
- The TV Tropes method
http://tvtropes.org/pmwiki/el.php?findfor=InsertNameHere - If you have a username and think they may use this site, you can get their IP address. Just find one of their edits and highlight next to their name. Works best for deviantARTists, fanfiction writers, and other fantards that think they're pop-culture analysts.
- Images
http://tineye.com/- You can use this handy tool to see what sites have pictures of the target.
http://regex.info/exif.cgi -EXIF searcher.
- Government Databases
http://www.192.com/ - Look up UK docs
http://www.criminalsearches.com/- Even minor traffic offenses can be found.
http://www.blackbookonline.info/- Free Public Records Search Engine. http://www.dmv.org/-links to state DMV's. http://skipease.com/-Everything from SSN searches to Death Indexes. http://www.whoishe.com/- Background check
- Maps
Google Maps, Google Earth , Mapquest
-Miscellaneous Tools 
http://krilome.com/aprod/index-cse.html- Hide shit

Conclusion
Stalking people on the internet isn't illegal. Even our governments do it (In a more advanced way as Snowden showed us).
Since all these information are publicly available if you read them its not a crime. But then it depends how you use them. (If you get in trouble, I ain't responsible ! :P )

PS. There are more advanced ways of stalking people.. Which kinda questions legality hence I haven't mentioned them here. In case you are interested, and you know how to contact me, I'll help you out. ;)

Monday, August 4, 2014

Playing with the Doodle Balls

So back in 2010 (September 7),  Google made this amazing doodle..
Now, the reason I loved this one especially is because they made something so awesome with only javascript!
No flash, no actionscript, nothing fancy.. So it does not have any kind of dependency on activex, adobe flash or silverlight for that matter.. Its an html page that will run on even crappy Internet Explorer! :D

And that day i clearly remember spending half an hour just rolling my mouse over this..

Anyways at that time I wanted to recreate it... to say something that I want..
But because I didnt know much about coding or anything at that time.. after doing a big of google search I sorta just forgot all about it.

But I have always respected and been inspired by the the standards of innovation and commitment the guys at Google/Apple show in whatever work they do.. [Unlike Microsoft and Oracle for that matter.. (Java is a mess!)]

Anyways recently I found this doodle again just by accident..
And I started working on it.. trying to understand how they coded it and then attempting to recreate it..


                                     The Google doodle from Sept 7, 2010

(Since I cannot properly put the javascript codes here.. I had to host it elsewhere and iframe it on this post..
For a better doodle playing experience check out the links I have given below!)
Link to the Google's doodle:
http://ebullient.vacau.com/google.html
                                                            418Sec all the way!!

Link to the my doodle:
http://ebullient.vacau.com/418Sec.html
(I know its not as good as Google's , but then again... I am me.. and Google is too good.. :P )

If anyone wishes to take a look at the source code of the doodle I made, its available for download there on my blogfiles folder:
https://spideroak.com/browse/share/FFA/418sec/

Yes, its just the 418sec.html file.. few lines of html and css and a whole lot of jquery/javascript..
Hint: " The magic happens in the D( ) function. "

I am sure everyone will enjoy playing with this as much as I did.. :D


Countdown in Javascript/ jQuery: Tick Tock

So recently I had to make a simple countdown program for the Intra-Mun that was happening in my school..
So even after joining college I went back to school cause I really missed it as well..

Anyways let me first give some details about the functions:

  • Set hour/min/sec
  • Start/Pause/Reset(to the last entered time)
  • I added two buttons for presets of 30 secs and 1 min.
  • remove the input menu with keyboard shortcuts
  • And I made keyboard shortcuts for all functions cause I knew i would feel too lazy to click..
  • Coded in Javascript/jQuery with some css 
  • And after time reaches 0.. there I added a nice pop-up notification!
Here is how the entire page looks like when timer is running:

And then there are lots of keyboard shortcuts.. honestly I added them because I was feeling bored and I wanted to see what else I can do to make it more interesting..
In case the user forgets.. one can always press the "h" or "H" key on the keyboard..
Matthew 7:7 "Ask and it will be given to you.."
Same right here..
A lovely pop-up telling you which key does what
And then there is the input menu of course which arrives when you start or press "M"/"m" to bring it.. or "x"/"X" to get rid of it and clear the screen..

Of course all these are pretty simple.. But I thought since I spent my time on this.. hopefully someone might be able to use this as well in the future.. 


(Yes, I am paranoid with privacy and security.. So screw googledrive and dropbox.. I am trying out SpiderOak.. I am not gonna let NSA have my files no matter how insignificant they are..)

PS.
This is the notification when your time runs out.. ;)