1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Anonymity from web-hosts

Discussion in 'Black Hat SEO' started by Mowkdizz, Oct 22, 2014.

  1. Mowkdizz

    Mowkdizz Registered Member

    Joined:
    Dec 12, 2011
    Messages:
    83
    Likes Received:
    11
    Occupation:
    Student
    Location:
    Ottawa, Ontario. Canada
    I want to have anonymity from web-hosts (it doesn't matter if my ISP sees my traffic) when browsing the web. I am going to be running a private server that in turn hosts virtual machines. These virtual machines will go through a private proxy provider (I will have previously bought anonymous private proxies) to connect to websites and make requests/upload various data. I wondering what the web server will in turn be able to see when I make these requests in terms of my anonymity. I made this picture to help better describe my question:

    http://i.imgur.com/k7WT1fD.png


    Will the website be able to see that I am using a private proxy of some nature? Will they see the MAC address from the hardware that is hosting the proxy, the MAC address of my virtual machine setup, or the MAC address of my private server? If the web-host sees the MAC address from the proxy providers hardware and they host multiple private proxies on one server, will requests from all of the proxies to the web-server be originating from the same MAC addresses?
    Thanks so much!!
     
  2. redmoon

    redmoon Regular Member

    Joined:
    Aug 19, 2009
    Messages:
    245
    Likes Received:
    73
    Use Tor or high anonymous private proxies to connect to your site and offshore hosting to be completely anonymous and not leave a footprint.
     
  3. Mowkdizz

    Mowkdizz Registered Member

    Joined:
    Dec 12, 2011
    Messages:
    83
    Likes Received:
    11
    Occupation:
    Student
    Location:
    Ottawa, Ontario. Canada
    The problem with this is I want to upload large files!
     
  4. ricaweb

    ricaweb Newbie

    Joined:
    Nov 10, 2013
    Messages:
    15
    Likes Received:
    5
    OK good question,
    if you are using IPv4 mac address is not transferred outside your lan,
    the packet that the webhost will recieve will have the mac address of their router (you only see last hop mac address in ipv4)

    if you are using IPv6 it is diffrent story as some fields in the IPv6 save the mac address unless you disable it from the host

    So the rule you dont care about MAC in IPv4 request

    for what they see is the IP address of the last proxy which is IP2

    but note: in http there is a header called X-Forwarded-For: and if the proxy is not configured correctly this header will have your original ip address
    so make sure the proxy hide this header


    Thanks
     
    • Thanks Thanks x 1
  5. Mowkdizz

    Mowkdizz Registered Member

    Joined:
    Dec 12, 2011
    Messages:
    83
    Likes Received:
    11
    Occupation:
    Student
    Location:
    Ottawa, Ontario. Canada
    If this is the case, will the web-server always be seeing the router MAC address of the proxy provider and know something fishy is going on if multiple IPs are coming from the same router?

    How would I go about making sure this is configured correctly? Would this be up to the proxy provider?
     
  6. ricaweb

    ricaweb Newbie

    Joined:
    Nov 10, 2013
    Messages:
    15
    Likes Received:
    5
    for first question
    No because the packet will go out of the proxy tot heir router and from there it will travel through a number of routers till it reach the router of target site, then it will travel through target site network till it reach the target host

    so it will only see its own network router or switch not the proxy router or switch

    if you are creating your own proxy like squid then it is simple configuration
    but most proxy providers should be already hiding this header

    use test proxy sites some of them check for this header as well to make sure itis not sent

    Also since we are at it even with all of that you could be caught if you enable JavaScript and Flash in your browser
    because javascript and flash can make direct requests bypassing the proxy except if you are running on VPN that forward all your traffic to the proxy server

    there are some sites for proxy check that do flash and javascript tests so search for them

    Thanks
     
    • Thanks Thanks x 1
  7. Mowkdizz

    Mowkdizz Registered Member

    Joined:
    Dec 12, 2011
    Messages:
    83
    Likes Received:
    11
    Occupation:
    Student
    Location:
    Ottawa, Ontario. Canada
    Ah. I thought the host MAC address might have been passed in the packets as well! Thanks :)

    Interesting. Is it possible to buy a private proxy and put that proxy into a VPN? If so is it easy to edit which proxy the VPN is using? I am not very familiar with VPN concepts. Where would be a good starting point in this matter? I will need flash and javascript enabled (I belive Javascript at least), so would using a VPN of some sort be the way to go in this case? I was planning on just buying anonymous private proxies in bulk, so if there is a way to use these proxies in a VPN program that would be terrific!

    Thanks for the help ricaweb!
     
  8. ricaweb

    ricaweb Newbie

    Joined:
    Nov 10, 2013
    Messages:
    15
    Likes Received:
    5
    you can buy a VPN directly or maybe get a Linux VPS and install your VPN software on it
    getting VPN directly is the easiest way to go since most of them even have ready clients to use with them

    just search for cheap vpn

    i see your issue most proxies are not VPN they are just socks or http proxy
    but at least get 1 VPN or 2 and make them first point of contact for your connection and then use the proxy list.
    in this case in worst case only your VPN ip will be revealed if the websites you are visiting use complicated JS and flash to get your source address

    the ultimate way is to get a vps for each location you want and run everything from it in this case you will never be caught with your real ip
     
    • Thanks Thanks x 1
  9. Mowkdizz

    Mowkdizz Registered Member

    Joined:
    Dec 12, 2011
    Messages:
    83
    Likes Received:
    11
    Occupation:
    Student
    Location:
    Ottawa, Ontario. Canada
    Is it possible to force all connections to go through a socks5 proxy instead of paying for expensive VPNs? I will need multiple (maybe several hundred) private IPs for several accounts on various web servers and therefore buying a new VPN IP would get pricey much quicker in this situation (I see about 5$ for VPN IPs VS $1.50 for private proxies). I read somewhere that they were forcing every connection to go through these proxies, and I would be very interested in doing something like that if it can save me money.

    Alternatively, do you know of any VPN software that allows you to simply enter a private proxy and password and it will route all traffic through this IP? I'm not sure if it is possible, but it would certainly be useful. I'm not really sure I see a reason for the VPN to be so much more expensive, so maybe it has to do with the underlying infrastructure.

    Do you think a company that has the technology enabled to view your host IP through javascript and java would be skeptical of a browser that doesn't have them enabled? I know its just asking for speculation, but I'm trying to find all available options here.

    Thanks so much!
     
  10. Mowkdizz

    Mowkdizz Registered Member

    Joined:
    Dec 12, 2011
    Messages:
    83
    Likes Received:
    11
    Occupation:
    Student
    Location:
    Ottawa, Ontario. Canada
  11. ricaweb

    ricaweb Newbie

    Joined:
    Nov 10, 2013
    Messages:
    15
    Likes Received:
    5
    Actually i was just going to suggest it

    so all the traffic from the browser will be redirect by proxycab
    so just configure it to redirect browser traffic

    it works i tried it before but just for playing with it not real work was done so i am not sure how stable it is

    Thanks
     
    • Thanks Thanks x 1
  12. Mowkdizz

    Mowkdizz Registered Member

    Joined:
    Dec 12, 2011
    Messages:
    83
    Likes Received:
    11
    Occupation:
    Student
    Location:
    Ottawa, Ontario. Canada
    How can you test which IPs javascript and flash are returning to the webserver? Is there a certain service you use to test this?
    Thanks