This is the Ultimate Doxing Guide. None of the generic C+P Bullshit that is spread around. This is a guide, with original ideas and tutorials. I would also like to mention that this is not actually my work. Credits for this go to "Nigger" (it's a username, sorry) of Puppet Zone. Table Of Content: 1x. What is Doxing 2x. Information Gathering // Doxing Skills 3x. Advanced Doxing 4x. ISP Doxing // IP Information Gathering 5x. Conclusion 1x. What is Doxing? Spoiler Doxing. Taken from Wikipedia: Doxing is an abbreviation of document tracing, is the Internet-based practice of researching and publishing personally identifiable information about an individual.[1][2][3][4] The methods employed in pursuit of this information range from searching publicly available databases and social media websites like Facebook to hacking and social engineering. It is closely related to cyber-vigilantism, hacktivism, and cyber-bullying. Let's break this down. Essentially, doxing is research on a person. Kind of like stalking, your goal is to know everything about the person you are targeting. You are compiling a document on this person. (Dox is short for Document) It's pretty simple, and I think you should have your own definition for doxing. For more info regarding what a dox is, please read "[x] Chapter 1.0 - What is a Dox?" of Maxx's Anti-Dox Handbook which can be found here: http://www.hackcommunity.com/Thread-Tuto...x-Handbook 2x. Information Gathering // Doxing Skills Spoiler In this chapter, I will be going over what to do with basic information, and Basic Doxing Skills > Social Engineering. Social engineering, in the context of information security, refers to psychological manipulation of people into performing actions or divulging confidential information. A type of confidence trick for the purpose of information gathering, fraud, or system access. Doxing, is pretty simple. It's a lot of mind games and searches. You might have to become friends with your target, or act nice to them, to get the information you desire. In other words. Psychology. You will need to manipulate your target into situation which require them to give out information, or say something important. When you are doing this, you need to keep in mind, that you are in charge. You control the situation, and you make the rules. There are a lot of different methods to control people and make them do what you want. You won't learn this in a day, you might fail the first couple times you try something like this. You need practice. I won't go over specific ways or methods, because that's a skill you have to learn and work on yourself. > Research Skills Doxing, also requires research skills. Sure there are a lot of online services that look up information on people for you, but most of that information is public. And easily accessible. You just need to know where to look. Remember! Google is your friend! There are a couple things you can do research a target. For instance, if you have their Skype name. You can use a Google Dork to find out what sites they have posted it on. Ex. Let's say my targets Skype is: niggerpancake I'd like to find out if he's signed up for any sites, and if he has left his Skype name anywhere online. Go to Google, and use this Dork: intext:niggerpancake This will bring up searches that have that text in them only. You can also put a comma and write Skype afterwards. This will bring up a search that includes 'niggerpancake' and 'Skype' Try to do Google Searches for any information you have on them. If you do find accounts that they own, or have used. Use them to find more information on the target. Think of it, as stepping stones. If you can't find any information, but have their last name or name, or information on parents or relatives. You can use free People Searches like: https://www.whitepages.com // This is OK. I really would not recommend this, as people can change the information, and it sometimes unreliable. https://www.spokeo.com // Spokeo.... Well, this is the site that a lot of people use when they first start out. It costs money, and is a pain the ass to use. Instead use the next link. https://www.intelius.com // Similar to Spokeo, but has more features. I would recommend this, over other People Searches. Need a Paid Subscription https://www.advancedbackgroundchecks.com // Good Site. Gives good information. > Online Accounts // Social Media Once you have done some research on your target, you've probably turned up some information on them, like accounts/etc. You can do more research on these usernames/etc by Googling. Or if you have enough information on the target, try resetting the accounts. Try resetting the emails and guessing the SQA's or contacting the Support Lines and asking for reset/etc. > Email If you have the targets email. You can do a lot. Go to Facebook and type it in the search bar. You might Get a Result. Go to Skype and search with it. You might get other Skype accounts that are owned by the target Google Search the Email. Maybe you will find something. Check in Databases. You can either load all your DBs on a Server and use the command zgrep 'string' to search for Entries. Or use the handy site that someone set up: http://db-lookup.tk/ If you do find entries, you can hash crack/etc. But I won't get into that right now. Jacking some emails is difficult. You might be able to guess the SQA and get in, or you might not be able too. I will go over how to take Yahoo accounts. Since it's pretty easy, and this is public. 1. Call up Yahoo 800-318-0612 Wait time is fucking gay. Usually takes 45 Mins+ Sometimes an Hour. 2. Once they pick up tell them " Hello this is (insert SE name you want like Ryan) from the Yahoo Technical Support. Say: I've recently got some trouble here looking up a customers account in AMD & Star so I would like to ask you if you can help me out here really quick? 3. Then you give them the email and ask for pieces of info you need. They can see all the info on the account, including SQAs. 4. Then when you got all the info you either got the SQA if you got lucky if not you should have like " Name, Address, Phone " you call back and ask them to add a alternate email on the yahoo then they should ask for info " Name etc " you give him that and they add it most likely. 5. Then Just reset the email. > Phone Number Phone Numbers. These are fun. There is a good amount of things you can do with phone numbers. You can directly contact your target and talk to him. Or harass him. You can use the full Phone Number to reset accounts, or get access to other information. You can even Social Engineer the provider and read the targets text messages or forward his calls to a Pinger or Google Voice Account. Remember to search the number online, to see if he has it posted anywhere. And to check the Carrier for further reference. > Address Well. If you've managed to get the address. Then GG, it's Game Over for your target. Time to really fuck with them. There are millions of Realty Sites online. A couple big and good ones are: https://www.zillow.com https://www.redfin.com Search for the address and check how the house looks. You can include this in your dox later. Check on Whitepages or other Search sites for the address, and you should be able to get the names of the residents. This will probably include the names of your Target or his parents/relatives. This is handy information, that can be used later. 3x. Advanced Doxing Spoiler This is the more illegal parts of doxing. This is the shit that might get you in trouble. So don't be a dumbass. Only do this, if you know what you are doing, or are an advanced doxer. > Social Security Numbers // XXX-XX-XXX In the United States, a Social Security number (SSN) is a nine-digit number issued to U.S. citizens, permanent residents, and temporary (working) residents. SSNs are a big deal. People are instructed not to give out thier SSNs, becuase they are personal and can lead to identity theft and other problems. With a SSN you can pull Bank Information/Credit Card Information. Pull Credit Reports. Get access to Bank/CC Accounts. Use it to reset their ISP Account or Paypal. A lot of things. There are a couple online sites that sell SSNs for $3. They only use BTC. I won't post them here, but if you'd like a link, please send me a PM. > Credit Reports This is pretty simple. You will need the targets SSN and basic information on them. Go to: https://www.annualcreditreport.com/ Request a Credit Report Fill out the Information. Then you will have an option of 3 Credit Report Providers. Pick Expieran. Then it will display it. Enjoy the information. 4x. ISP Doxing // IP Information Gathering Spoiler > IP Information Gathering Having the IP address of your Target is important, this can lead to thier ISP Account or other accounts that they own. A couple ways to get the IP Address of your target are: Skype Resolvers: Type their Skype in, and get their current IP and prior IP Addresses. http://www.resolveme.org/ http://mostwantedhf.info/ IP Loggers: Sneaky way to get an IP and Browser Information http://blasze.tk/ http://iplogger.org/ > ISP Doxing This is a more advanced method of Doxing. Requires you too be good at Social Engineering. The basic Template/guide for each call is: Call in and pretend to be a Technical Support Agent or Billing Agent. Tell the agent on the line that your services/tools are down, and your supervisor told you to call in and seek the help of another agent. They should comply. Give them the information you have on the target and let them look it up. Now, moving on to the Tools of ISPs. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ AT&T Tools: SystemX // Shows IP, what account it is, lookup by address, runs credit checks, see driver license. Clarify // Looks up account and logs into the account. Can do full social, ip, phone number, and name. Telegence // Shows account information including last four of the ssn. MyCSP // Opens up Torch, SystemX, etc. Phoenix // Change phone numbers, rate plans, etc. Torch // Text messager. CSR Admin // Logs into MyATT account. CTI // Transfer calls. CCC Tool // Removes subscriptions. DLC // See how long the phone has been in service. C-Care // Checks for upgrades. Employee IDs: Robert Kingly ID: RK819A ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Verizon Tools: CoFee // Main Tool. Looks up via Name, Address, Phone Number, etc. CPE Manager // Looks up accounts by the IP address. iVIEW // Looks up via IP Address Note: Not sure if they still use this! Legend // Another tool agents use to pull info off an account. DTI // Pulls Everything! Fios Agents use this. Employee IDs: Hector Rodriguez ID: z569191 Supervisor: Juan Chavez ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Comcast Tools: Grandslam // Master Tool. Looks up via Name, Address, Phone #, Acc #, SSN. Note: IP Lookup is grayed out. Vision // Billing Tool. Tier 3 Can lookup via IP Address. Only Billing Department Has this. ASCR // Looks up account. Einstein // Looks up account. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ TimeWarnerCable/RoadRunner/Soon To Be Cumcats_v2 Call TWC @ 1800-TWCABLE Pretend you are a support agent, and ask the agent on the line to transfer you to Tier 3. Once transfered, tell the agent that you had trouble pulling up information in Unified or DOCSIS, and if they could help you out. They should comply. You will be able to ask for any and all information on the account. TWC Tools: AAD // Used to pull up the account once they have the information on the customer. Unified // Pulls up by MAC, IP, etc. ATG Tools // DOCSIS - Basically TWC’s “master tool”. Can do just about anything. Employee IDs: Charles Knight ID: K91736 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Cox Tools: Edgehealth // Looks up by IP and MAC. Ask the rep to switch the search dropdown from MAC to DOCSIS CPE to search by IP instead of MAC Address ICOMS // Looks up account. SL2 // Looks up account. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Charter Tools: DRUMS // General lookup Sigma // Looks up via IP Icon // Looks up via Account ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Optimum Online Tools: TDA // Billing tool Optix // Looks up by IP and MAC (Tier 2 only) Optimum is very difficult to ISP dox with only the IP Address. Usually you need to get transfered to Tier 2. Most of the times you need to send in a Sub-Poena for the account information. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ CenturyLink Tools: Ensemble // Looks up account. INET // Logs into account. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Frontier Tools: JWalk // Looks up account. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Windstream Tools: Datacannon // Master Tool. Pulls everything ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Shaw(CA) Tools: TOGAF // Looks up via Billing Details ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Rogers(CA) Tools: Vision21 // Master tool lookup, every Tier has access to this tool. ICM // Looks up via Account STI // Looks up via Account ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Bell(CA) Tools: Singleview // Looks up by IPs Maxplus // Looks up by billing details CSM 1 Bill // Looks up by billing details ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Sky(UK) Tools: Chordiant // IP Look up Pencils // Billing Tool ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Cogent Tools: SSRS // Looks up via Account ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Fido / Micro-Cell Tools: ICM // Looks up via Account Citrix // Logs into the account ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ T-Mobile Tools: Quickview // Looks up by account. Watson // Looks up by account. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Sprint Tools: CICS // Looks up by account DB2 // Looks up by account ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~??~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 5x. Conclusion Spoiler Doxing can be very illegal. Do all of this at your own risk. You are too blame for anything that happens. If you're wondering what parts of a dox actually makes it illegal, please read "Chapter 3.0 - Identifying a Dox" from my Anti-Dox Handbook which can be found here: http://www.hackcommunity.com/Thread-Reso...x-Handbook This is the end of the tutorial. I hope you enjoyed. Remember to share this with your friends.