Sleep
7 min readNov 7, 2024

Doxing And How to do it beginners guide

What is doxing:

Doxing, is the term used for the process of gathering personal information on a slave/target, although this does commonly take place over the internet, this isn’t always the case. There are many methods of doxing, and various tools available over the internet.

The Main Websites I Personally Use:

http://www.pipl.com
(Searches for emails, names, usernames, etc.)
http://www.google.com
(Searches for everything)
Reverse Search for pictures:
http://www.tineye.com
Reverse area code search:
http://www.telcodata.us/telcodata/telco
Reverse Phone number search:
http://www.whitepages.com
http://www.411.com

***Us*** Criminal Record Check:
http://www.criminalsearches.com/

Realtor Home search:
http://www.realtor.ca/

Ancestry Search:
http://search.ancestry.com/

Electoral Roll:
Births
Marriages
Deaths
Company Director Addresses
http://www.lookuppeople.co.uk/

Internet Archive:
http://www.archive.org/web/web.php

Reverse IP:
Primary : accurate country/ isp : http://www.whois.sc/iphere
http://www.ipgp.net/
http://www.ip2location.com/free.asp
http://www.ip-adress.com/ip_tracer/

Temporary Mail:
http://www.mailinator.com/

Anonymous email sending:
http://mail.anonymizer.name/
http://www.sendanonymoussms.com/

Secondary people search other then pipl.com
http://www.com.lullar.com

Gather Information on people’s cameras by just uploading an image:
http://regex.info/exif.cgi

once the target is accuired send free empty boxes:
http://www.usps.com/

Telephone Spoofing:
http://www.telespoof.com/freecall/agi

Where to begin:

Basically, any personal information you have on the slave will be helpful, whether it be a facebook page, their full name(or even their first name), their general location, their phone number, anything.

Social-Engineering is very closely related to doxing, as you can social-engineer the slave into revealing information about themselves.

A good knowledge on how to trace IP’s can also be helpful, as say, for example, if you have a full name, but no location, searching for that one name out of the whole world.. there’s going to be a lot of people with that name, but if you’re searching for someone with that name, living in a certain city (based on location of their ISP), it narrows it down, drastically. If they own a website, a simple WHOIS search will save you a lot of time.

I am going to go through multiple scenarios, based upon potential information one could have on a slave.

Compiling/formatting your dox:

Placing your dox in an eye-friendly format will save you a lot of time in the long run, and will avoid confusion. You should make a template to store your dox in, before attempting doxing

Here is a suggested template that I made to store your dox in, it can be modified to suit your needs, but it covers the basics.

Quote:

Usernames/Aliases:

Real name:

Real Nickname(s):

Location:

Ethnicity:

Nationality:

Pictures:

Videos:

Religious Views:

Sexual Orientation:

Home number:

Mobile number:

IP address:

Websites owned:

Social-Networking pages:

Forums they’ve posted in:

Family members:

Occupation:

Criminal Record:

Car make, model and liscence number:

List of all websites with their info on:

Misc. information:

Google Searching, and boolean operators:
Never underestimate the power of google, whilst doxing someone, google is by far your most powerful tool. You should come familiar with exploiting search terms, and any similar vunerabilities in google. Here is a useful site with lots of information on ‘google hacking’.

You should also learn all the boolean operators, as they can come in very useful, here is a webpage explaining how boolean operators work.

If there’s a dead link which you think will lead to information on the slave, you can always try googles cache. If google doesn’t have a cache of the page, try using this site.

Getting the slave’s IP:
There are various methods of doing this, although i’m not going to go too in-depth into this. Programs such as Cain and Abel can be used, but programs aren’t always needed. Over MSN, the easiest option is to use the IPGet addon, or:

Go to start, then run, then type ‘cmd’, then type ‘netstat -n’, send the slave a file, or have them send you a file, or go on webcam with them, and repeat the process. The IP that wasn’t previously there is the slave’s IP.

If you’re on a website with the slave, you can get their IP by them seeing an image you have hosted. You will need a website for this. Host an image on your website, and put it as your avatar, Private Message the slave, then view the visitor logs for your website, and the slave’s IP will be available. This can also be achieved using a php dynamic image, and the .htaccess trick, although this is a lot more complex.

You could also simply send the slave a link to your site, and then view their IP that way.

I have a slave’s online username/alias, what next?
useless. Think again, take the FBI for example, when they’re doxing, the first thing they’re going to look for is information leading directly to the location of the slave, or the victims ISP, say the slave is using multiple proxies/vpn’s, etc, this may be too hard for the FBI to accomplish, so instead, they’ll start doxing the slave by finding information about their usernames/aliases, when the FBI dox, that’s always what they look for first. You can have loads of proxies, but you should have even more aliases than you do proxies. I know.. we all want to claim credit for things, make ourselves look cool.. but, it will result in your downfall. Also, to protect yourself from doxing, use a short username, like I do.

Think of it this way, if they’re registered on hackforums, for example, with a certain username, chances are they’re going to be registered on other websites with that same username.

First thing to do, is to run a google search of their username, and see if any interesting websites come up, any forums that they are registered on, etc. If you do find something, see if you can view their profile, as they may have their date of birth, or email address, or something similar there. If they have registered on a forum, you can also sift through all of their posts, to see if they have let slip any personal information, but this can be time-consuming.

After google searching their name, regardless of whether you get anything useful or not, you should try searching their username on this website..

I have a slave’s Email Address, what next?

First off, as usual, start by google searching the victims email address. Generally, you don’t get information from this, but you may be surprised, if they’ve signed up on a website using their email address, that information might be available to you in a simple google search.

If they’re in your contacts list, and you don’t know their full name, try using this.

You can also coax a slave into sending you an email with an attachment, hovering over the attachment in windows, should give you the name of the author, which will generally be their name, if they’ve set up their PC using the correct details.

Here is a reverse-email lookup, which can be used to find information from an email-address.

Having a victims email can also be a great oppourtunity for social-engineering/manipulating them.

I have a victims name, what next?

Once you have a victims name, you’ve got pretty far. Chances are, you’ll know their general location by the point when you’ve got their name, but if not, you need to strive to find that out. Start with a google search of their name, it may bring up some social-networking sites, although this generally doesn’t work if they have an exceptionally commonnly used name. Once you have their name and general location, you want to proceed straight to getting their address and phone number.

You want to do this by searching various websites, such as phonebooks, and online electoral roll databases, below, are some useful sites for doing so:

http://www.whitepages.com/person

http://www.zabasearch.com/

http://www.google.com/search?hl=en&pb=r&.../city/etc.

http://www.411.com/

http://www.foo.com/

http://www.lookuppeople.co.uk

I have a victims phone number, what next?

A google search will probably be useless this time, but there’s still a very slim chance, so try it anyways.

Performing a reverse-phone lookup is probably the best choice here. Sadly, there’s now no longer a reverse phone lookup for the united kingdom available on the internet.

People in the USA are in luck, below are a few which work:

http://www.usaphonelookup.com/

http://phonenumbers.addresses.com/phone.php

http://www.whitepages.com/reverse-lookup

I have a picture of the slave, what next?

Once you have a picture of the slave, the first thing you want to do, is perform a reverse image lookup, to see what other websites they post on. A decent website for a reverse image lookup is TinEye

Another useful way of gathering information about someone’s picture, is .exif data. ‘exif’, stands for Exchangeable image file format. It is the image file format that digital cameras use, and stores information about the camera and photo.

Above is an example of what you will typically find in exif data, it is not very useful, although it does tell you what type of camera/phone they own, and the date and time when they took their photo.

Exif data is completely underrated, if the user has an iPhone, or another phone with GPS tracking enabled(lots of phones do, such as various N series Nokais, and pretty much any phone using the Android operating system, a few cameras do also.) then you can find the GPS location, which is usually accurate by the nearest hundred metres, of exactly where they were when they took their photo. Some Phones and Cameras even tell you the name of the slave within their .exif data.

An online .exif data viewer can be found here. You simply choose an image from the web, or upload your own image.

Firefox’s new file API can be used for viewing .exif data, and be found here.

There can be an .exif data viewer firefox add-on found here, it’s very user-friendly, you simply right click the slave’s picture, and the .exif data will open up in a new window.

Other Misc. info I can find out on the person:

Cell phone monitoring services can be used to monitor the slave using GPS, it will reveal where the slave is at any given time.

http://www.abika.com/ is a great overall site for doxing, you can do background checks on people, various reverse lookups, criminal record searches, etc. Abika also has a liscence plate search.

No responses yet