The Hacks of Mr. Robot: How Elliot & Fsociety Made Their Hack of Evil Corp Untraceable « Null Byte :: WonderHowTo

Welcome back, my tenderfoot hackers!Well, the first season ofMr. Robotjust ended and Elliot and fsociety successfully took down Evil Corp! They have effectively destroyed over 70% of the world's consumer and student debt! Free at last! Free at last!Of course, global financial markets crashed as well, but that's another story.Although there were many elements that made the hack successful, such as Darlene developing a zero-day exploit (I'll showing you how to do that in a future article) that none of the intrusion detection systems, firewalls, or antivirus softwares detected, Elliot also made certain that the hack could not be traced back to him by using proxies.Early in the last episode, Lenny, the former boyfriend of Elliot's therapist, Krista, reveals to Krista that he had been hacked by Elliot. He points out that Elliot is nearly untraceable as he uses a proxy from Estonia. In this tutorial, I will show how Elliot bounced his attack off an Estonian (or other) proxy in order to make his hacks untraceable.How Proxies WorkAs you know, whenever you visit (or hack) a website or server over the Internet, your unique Interpret Protocol (IP) address travels with you. It would then be very easy to trace the source of an attack by simply tracing the source IP address.Hackers, though, often use proxies to hide or obscure their IP address. In this way, they send their traffic to an intermediary proxy, who then sends the traffic on to the destination, replacing the source IP address with its own. In this way, the malicious traffic appears to be coming from the proxy and not the original sender.Before I start, I want to point out that there are multiple types of proxies. One of the more popular, anonymous proxies isTor. Although Tor is effective in anonymizing your traffic from Google and other commercial tracking, it is not effective in anonymizing your traffic from law enforcement, especially the NSA.As Elliot points out inthe pilot episode, when he is explaining to the coffee shop owner who is also a child pornographer, "Whoever's in control of the exit nodes is also in control of the traffic, which makes me the one in control." He owns the exit node, owns the traffic, and hence, the identity of the users.Now, let's see how Elliot and fsociety hid their identity in their hacks!Step 1: Fire Up KaliTo get started, fire upKali Linux. If don't already have Kali, you candownload it here.Step 2: Go to ProxychainsNext, let's go to proxychains. Type:kali > proxychainsWhen you do so, it shows you the simple proxychains syntax. Basically, after setting up proxychains, all you need to do is precede the command you want to run with the command "proxychains" and all of your Internet traffic will go through your chosen proxy. As we will see later in this tutorial, if we want to browse the Web with our browser, we can simply start our browser by preceding it with proxychains, such as:kali > proxychains iceweaselStep 3: Search for ProxiesIn order to set up proxychains to hide our IP address, we will need to select a proxy. There are many sites on the Web with lists of free and paid proxies. Some of these include, but are not limited to:Hide My Ass!SamAir SecurityProxy4FreeHide.meLet's try usingSamAir Security. When we navigate there, we can see their list of free proxies.Near the bottom of the page, we can see that they have sorted the proxies by country. Remember, Elliot was using a proxy in Estonia. This list has one proxy listed in Estonia.When click on it, we can see that this one proxy in Estonia is a transparent proxy. This means it won't hide our IP. That won't work!Instead, let's try the list of Russian proxies. Many hackers use Russian proxies as EU and U.S. law enforcement do not have jurisdiction in Russia. This means there is little or no chance of tracing their identity.We can see that there are five "high-anonymous" proxies in Russia on this list. Let's us one of those.Step 4: Configure ProxychainsNow that we have a list of potential anonymous proxies, we have to configure proxychains to use it. Like nearly all Linux/Unix applications, configuration is done by a plain text file. These files are generally found in the/etcdirectory. In this case, the configuration file for proxychains is found at:/etc/proxychains.confWe can open it with any text editor, but I will use Leafpad here.kali > leafpad /etc/proxychains.confThis opens the configuration file for proxychains as seen below. Near the bottom of the file is the critical part. Here is where we tell proxychains which proxy to use.By default, proxychains is setup to use Tor. As Elliot expressed in episode one, he who controls the exit node of Tor controls the traffic. Elliot is certainly aware that the NSA and law enforcement know this as well and would not want to use Tor. To disable Tor, simply put a comment mark (#) before line #64.Now, to use one of our Russian proxies, we simply need to add the type of proxy (http) and the IP address and port for that proxy as I have done above. Then, save theproxychain.conffile and close it.Step 5: Send Traffic Through ProxyLastly, if we want to send our HTTP traffic while browsing the Web through that Russian proxy, we simply open our Iceweasel browser by typing:kali > proxychains iceweaselNow, all of our traffic will go through the proxy and will appear to be coming from that proxy should anyone inspect the traffic.Stay Tuned for More Hacking LessonsIf you want to learn more about hacking, please take the time to exploreNull Byte. If you are interested in becoming a professional hacker, check out my article "How to Use Null Byte to Study to Become a Professional Hacker." Finally, keep coming back my tenderfoot hackers, as I continue to demonstrateeach of Elliot's and fsociety's hacks!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedThe Hacks of Mr. Robot:How Elliot & Fsociety Destroyed Evil Corp's DataNews:Samy's MagSpoof Hacking Device Was Just Featured on Mr. RobotThe Hacks of Mr. Robot:How to Build a Hacking Raspberry PiThe Hacks of Mr. Robot:How to Hack BluetoothThe Hacks of Mr. Robot:How to Hide Data in Audio FilesThe Hacks of Mr. Robot:How to Send a Spoofed SMS Text MessageNews:ProntonMail under DDoS AttackNews:A Game of Real HackingNews:Emotion-Sensing Robot Ready to Love?How To:Learn How Elliot from Mr. Robot Hacked into His Therapist's New Boyfriend's Email & Bank Accounts (Using Metasploit)How To:Hack Your Resume to Fool Keyword-Hunting Robots & Land Yourself More Interviews (The Evil Way)The Hacks of Mr. Robot:How to Send Ultra-Secure EmailsHow To:Build a Programmable Robot with Snap CircuitsMr. Robot:Hacking Sequence ExplainedHow To:9 Ways to Get People to Do What You WantNews:Valero Energy Corp.How To:Things to Do on WonderHowTo (02/08 - 02/14)How To:Noob's Introductory Guide to Hacking: Where to Get Started?How To:Things to Do on WonderHowTo (02/01 - 02/07)Hacking in the Media:Our Craft's Portrayal as Black MagicArduino Air Force:DIY Robotic Cardboard QuadcoptersResident Evil:Afterlife