Graalians

Graalians (https://www.graalians.com/forums/index.php)
-   GraalOnline Classic (https://www.graalians.com/forums/forumdisplay.php?f=12)
-   -   Administrators could lose their identity *Admins 18 and up* (https://www.graalians.com/forums/showthread.php?t=10232)

Elementalzx14 09-11-2012 04:48 PM

Administrators could lose their identity *Admins 18 and up*
 
I was doing an experiment *Educational purposes only* and I found out banning a player or having any type of contact with a player could give away ur IP Address, yet if those players are smart enough to know how to do that you guys could be in danger of getting hacked, its not just admins its also normal players, i would advise finding a way to block ur IP from being sent, VNP, increase ur firewall, u dont want to be hacked, like i did, they almost got to my credit card info

NOTE:
i will not be showing anyone how to get someones IP! this was done for educational purposes only

callimuc 09-11-2012 05:51 PM

its easy to get someones ip... every scripter could get someones ip. an ip is not something like a udid.

Rages 09-11-2012 06:29 PM

o noes. They got your IP! Better destroy your device!

Tyler 09-11-2012 06:48 PM

I did some research the other day about IP being a threat if someone got ahold of it and it's really not a big deal apparently. I'm pretty sure if it was possible for someone to hack a staff knowing their IP it would have been done already.

Dusty 09-11-2012 07:13 PM

It's insanely easy to get someone's IP. In fact a simple image could be used to grab it. Can IPs be maliciously used? Probably... but there's no point in fretting over it, because if you did you'd be paranoid over every single thing you did on the internet.

Within the Graal community it's probably way more important to emphasize the security of UDID's.

PerfectDark 09-11-2012 09:24 PM

There is a easy solution when someone tries to use your ip to attack you, return the favor. As dusty said, udids are more important for security than ips.

The Doctor 09-11-2012 11:22 PM

I have made a list to get someone's IP:
*Making a PHP script that grabs the client's IP.
*Make an image with PHP that grabs the client's IP when they look at it.
*Have someone connect to a server of yours.

It is extremely easy, unless your not that tech savvy

MrSimons 09-11-2012 11:32 PM

Oh noes!!! The bad guys have our ips!!!! We gun die!!!!

The Doctor 09-11-2012 11:40 PM

the admens have my ip!1!!

PerfectDark 09-11-2012 11:57 PM

Quote:

Posted by Mr.$imons (Post 196444)
Oh noes!!! The bad guys have our ips!!!! We gun die!!!!

Screw the bad guys having our IP, it is the stalkers you got to look out for.

MrSimons 09-12-2012 12:10 AM

Quote:

Posted by PerfectDark (Post 196468)
Screw the bad guys having our IP, it is the stalkers you got to look out for.

OMAHJEEZUS DON LET THE INTERNET STALKERS FIND ME!!!!!!!

Twinny 09-12-2012 12:20 AM

Quote:

Posted by Elementalzx14 (Post 196362)
I was doing an experiment *Educational purposes only* and I found out banning a player or having any type of contact with a player could give away ur IP Address, yet if those players are smart enough to know how to do that you guys could be in danger of getting hacked, its not just admins its also normal players, i would advise finding a way to block ur IP from being sent, VNP, increase ur firewall, u dont want to be hacked, like i did, they almost got to my credit card info

NOTE:
i will not be showing anyone how to get someones IP! this was done for educational purposes only

I'd say they only 'nearly' got your credit card info because you did something stupid like install dodgy software. Knowing a public IP isn't that special unless you already have an open, public vulnerability (e.g. trojan). In most cases, even being behind a NAT'd network is protection enough against most moron hackers.

Nyx 09-12-2012 03:06 AM

I could easy use metalspoilt ton install my full FUD Trojan on any pc's... Antivirus are useless guys and you found someone iP, you're cool bro, everyone can do that easy.

Twinny 09-12-2012 03:24 AM

Quote:

Posted by Nyx (Post 196592)
I could easy use metalspoilt ton install my full FUD Trojan on any pc's... Antivirus are useless guys and you found someone iP, you're cool bro, everyone can do that easy.

You could spell it right and woo! Script kiddy deluxe!

Metasploit is mostly using well known/documented exploits for unpatched systems. As such, it's not that effective if you:
  1. Regularily update your OS
  2. Run a decent firewall (Windows Firewall is actually sufficient)
  3. Don't install dodgy ****

Again, even being behind NAT can prevent Metasploit (or any exploitation tool) from even reaching your computer (unless you are port-forwarding).

I set up a reflexive ACL on my router. All inbound traffic is blocked unless it was initiated by something behind the router. I also don't install dodgy ****. Anything i'm slightly suspect on, I give it a virtual environment and monitor :)

DragonRider 09-12-2012 03:30 AM

The only "malicious" thing you could do with someone's IP is boot them offline. But unless you're willing to pay $10+, it's not going to happen.

MrSimons 09-12-2012 04:37 AM

Quote:

Posted by DragonRider (Post 196604)
The only "malicious" thing you could do with someone's IP is boot them offline. But unless you're willing to pay $10+, it's not going to happen.

But if I am not on Graal... I will die.

The Doctor 09-13-2012 01:26 AM

Get IP
DDOS
???
Profit
(Jail)

BboyEatsbacon 09-13-2012 02:18 AM

Quote:

Posted by Shawn (Post 196884)
Get IP
DDOS
???
Profit
(Jail)

This is exactly why you use a trustable VPN and try not to give yourself away.

Twinny 09-13-2012 02:49 AM

Quote:

Posted by BboyEatsbacon (Post 196920)
This is exactly why you use a trustable VPN and try not to give yourself away.

OR call your ISP and ask them to blackhole the route temporarily or ask them to provide a new IP (if static) or just refresh your session (if dynamic) and also ask them to investigate.

For DDoS, they can atleast record the IPs and follow up with the relevant remote ISPs who, in can turn, can advise their customers that they have a zombie machine in their midst.

DragonRider 09-13-2012 06:16 AM

Quote:

Posted by BboyEatsbacon (Post 196920)
This is exactly why you use a trustable VPN and try not to give yourself away.

1 h4v3 j4yz b00t3r u r scr3w3d hahahhahahahahahhaahahahahaha
Besides, good VPNs cost money.


All times are GMT. The time now is 05:21 AM.

Powered by vBulletin/Copyright ©2000 - 2026, vBulletin Solutions Inc.