Thursday, January 15, 2009

How To Spoof Your IP Address And How It Works

In this article we will discuss IP spoofing. IP stands for internet protocol and is basically a number assigned to your computer when it connects to the internet by your ISP ( Internet Service Provider). Your ISP is the company you get internet through whether it is with your cable or with your phone they are the ones who assign your IP address for internet use. Your IP address is basically an address for your computer similar to your mailing address for your home. The IP address can be used for many things in the modern world and I would give caution with using it. I would recommend using a proxy as much as possible regardless of your browsing habits as hackers and other people online like to grab your IP address and use it for attacking your computer, putting viruses on it and a myriad of other reasons.

Almost every single website you visit has a log and in that log is a record of the different IP addresses that visit the webpage. With this information they can know where you are located and if it is a law agency they can easily find out who you are and much more personal information about you. Many people have been contacted by their ISP as a warning for what they were downloading whether it be movies or music. Usually a law enforcement agency will contact your ISP and ask for records and logs of visited websites if they are suspicious of your internet activity. And then depending on whether they want to warn you of press federal charges they will have your ISP warn you or just show up at your door at the wee hours of night or morning.

So knowing that and how our IP address seriously affects our privacy and surgfing habits I would recommend spoofing it on a consistent level for personal privacy reasons. I do not condone or recommend using it for illegal purposes as you will pay the price eventually. So how do we go about spoofing our IP adress? There are a number of ways to do this so to start the most simple and easy way to do this is by using what is called a CGI proxy.

Basically how a proxy works is instead of asking for a website from our internet service we connect to another internet service and ask them for the information. Basically the request to visit bobspage.com would be redirected through the proxy server and we would receive the information through them and then instead of directly from our ISP. This is also known as bouncing your IP address. This is how a proxy works and proxy basically means to go through. A CGI proxy means COMMON GATEWAY INTERFACE proxy. It is basically an online website that offers a proxy in such a way that all you need to do is go to the CGI proxy website and type in the website you are trying to access spoofed. A lot of ISP's have blocks on certain websites and the same goes with school and work computers. With a CGI proxy you go to its page, enter the site that is blocked you want to visit and you will be taken their through their server unblocked.

Here are a list of CGI proxy websites: (if some don't work they sometimes are taken down for different reasons usually regarding legality issues, do a google search for there are lots and lots of them). Keep in mind that by using a proxy it will almost always slow down your internet speed since it is rerouting the request and it is usually rerouting it through an offshore server which takes time to relay the requested information and website.

Proxylord.com
Isoproxy.com
Becomehidden.com
Megawebproxy.com
Peekatwork.com
Beatfiltering.com
Proxify.com
Razorproxy.com
Proxyfoxy.com
Pagewash.com
Proxymyspace.cn
Sneak2.net
Anonymouse.org
Freeproxysite.com ( a list of more cgi proxies )

The second way to spoof your IP address and the way that I like, is to use a separate program for the task. Personally I would recommend using TOR for the job. It installs into windows and integrates itself into Firefox with a button at the bottom right hand corner of Firefox. All you have to do is install it and click that button and you are anonymous and using its proxy. Another good thing about TOR is that it is offshore located in germany and it is free to use and download. By it being offshore if they were required to give logs and records to a law enforcement agency it would ultimately make things harder for them and a lot of times different countries will not cooperate and if so the process drags on for some time. I would recommend JAP but there is a topic and debate on a backdoor they had years back in which they were giving record information out to law agencies.

The last way I would suggest using a proxy and a little more difficult way would be to set up a computer as a firewall and share its internet connection with your surfing machine. In essence you would set up a dummy computer to hook up to the internet and would run the internet through that machine into your personal use computer with an added ethernet card or by bridging the connections. I would not suggest this over a proxy unless you know what you are doing as it requires another computer and slightly slows the connection speed though not as much as the other described methods. To be sure the proxy is working go to whatismyip.com and check your original IP address. Afterwards when you start the proxy or use the CGI proxy to go that website and it should show something quite different and then your IP address is spoofed. Happy surfing.

16 comments:

  1. using a proxy does not = spoffing IP address. waste of time.

    ReplyDelete
  2. You should edit this article.
    As sp mentioned, http proxying is a different subject.

    ReplyDelete
  3. Where can I get that program you mentioned TOR?

    ReplyDelete
  4. @destroyer22 just google download TOR

    ReplyDelete
  5. Damit wit da misinformation. Not spoofing at all.

    ReplyDelete
  6. What about if I want to spoof a particular IP address? Say my real address I 100.101.200.201, and I want to make a server think it’s 100.102.200.202. Is there a way of doing that?

    ReplyDelete
  7. waste of time .... and in regard to your last method i wud suggest using a virtual machine instead .. but even then it is not spoofing

    ReplyDelete
  8. As far as using another computer locally, it will still get the IP from your ISP. You'll just be behind it and it will still trace to your home. A router does that very efficiently with no other effort. A router is a great firewall because it is a computer and it has the IP, and hackers can't tell it from your "real" computer and will waste time one it.

    ReplyDelete
  9. The author here must be misled. You are leading your readers to ignorance. This is not how IP Spoofing works. You are talking about proxying. IP Spoofing is when you try to pass your IP (attacker's IP) as one of the legitimate IP within your victims network. You will have to scan your victims network for some legitimate IP's in that network then modify your own packet headers so that your victim will think it's coming from within their own network. One more thing, you cannot use proxy sites to cover your IP when you're IP spoofing since it will cause the responses back to your machine to be misdirected.

    ReplyDelete
    Replies
    1. @ ronald, could you please tell me bit more about making a spoofed packet and how do i modify header information.
      thanks
      REZ

      Delete
    2. Hey I need this information too. could you please share your knowledge on how to make a spoofed packet and modify header information with me?
      Thanks in advance
      Meth

      Delete
    3. Please for the love of christ, don't feed the script kiddies. For everyone here, don't feed the idiots who cant even spell or use proper punctuation. Anonymous started that way.

      Delete
    4. This comment has been removed by the author.

      Delete
  10. this is a basic idea for the spoofing but in the real wide the scenario has been changed.

    ReplyDelete
  11. Thanks for the info you provided on this blog. I have been searching far & wide for an answer hopefully you'll be willing to help me with. I advertise my website on CraigsList, & my account recently got shut down b/c I was advertising in too many different cities. I had been doing so from the same account for over a year & all of the sudden BAM they crack down on me. My business is totally legit & I do not SPAM, but 99% of my traffic comes from advertising on CL. I live in Michigan & need to advertise in Indianapolis, Indiana. Now whenever I create a new account every one of my ads get ghosted. My question is do you know any programs or website that I can use to gain an IP address from a specific city like Indianapolis? Cost isn't an issue, but it will be if I go much longer without any traffic to my website. Thanks for taking the time to read this & I hope to hear back from you soon. You can reach me at: TCCC.CL.2012@gmail.com

    ReplyDelete