JDT Systems | CodeBrosForums

i couldnt copy and paste the code here it looked retarted.

arroy[1]="<macaddress here>"
arroy[2]="00:11:22:33:44:55"

rand=$[RANDOM % ${#arroy[@]}]
echo ${arroy[$rand]}
sudo ifconfig <network adapter here> down
sudo macchanger -m ${arroy[$rand]} <network adapter here>
sudo ifconfig <network adapter here>
sudo service network-manager restart
So what will this do? Change your MAC when someone requests it or something?

Quote from: jdaniele on November 29, 2019, 09:57:04 AM

Wasn't exactly sure which section to post in. Princeton university students made a tool to see what's "spying" on you.

https://iot-inspector.princeton.edu

Hope fully they make it for other OS soon. Honestly, not sure why it was made for macOS first but my guess was for the smaller audience or the team that made it just liked that OS and want to see if people even caught on.

so how do we spy back?

I'm guessing it scans the computer or network traffic and builds a list. I know Firefox now tracks a list of all the items that tack you so you can see trends built right into the browser itself.

many large companies will buy them so this doesnt happen. or all the scammers bought them up already

Oh yea just like gooogle.com and goooogle.com lol

Quote from: jdaniele on November 26, 2019, 09:31:47 PM

Quote from: andyassur on November 26, 2019, 09:09:39 AM

yeah so one of these things happen

    Antiquated or aging hardware and software
    Excessive heat or other extreme operating conditions outside system ranges
    Electrical surges, interruptions and fluctuations
    Defects in chips or other components

causing one number in a long string of binary number to switch from being a 1 to a 0 or vise versa
so like the letter a in binary is 01100001 and c is 01100011. so when you goto like facebook.com the website is converted to binary which is 01100110 01100001 01100011 01100101 01100010 01101111 01101111 01101011 00101110 01100011 01101111 01101101 im not sure if the . i converted to binary or not. which if some thing is over heating or not working properly it could send you to fccbook.com which would be this in binary 01100110 01100011 01100011 01100101 01100010 01101111 01101111 01101011 00101110 01100011 01101111 01101101 which is off by one bit. and could potently be dangerous site that could steal your username and password to your facebook or worse lets say it was your banks website.

Well "fccbook.com" is available lol. Should I buy it? lol

Quote from: andyassur on November 26, 2019, 11:42:55 AM

this github project is to search for available sites that are off by one bit

https://github.com/Creator69/JavaBitMaskDomainChecker

I wasn't kidding I'm definitely down to register a domain and put tracking tools on it to see the traffic it gets.

well its fccebook.com available? i forgot the e. you would have to be banking on someone spelling face book wrong and a bit flipping. you might get 10 - 15 hits a week? with fccbook.com

Let's check a few!

1. fccebook.com - Not Available
2. fscebook.com - Not Available
3. fqcebook.com - Not Available
4. fzcebook.com - Not Available
5. faccbook.com - Not Available
6. facrbook.com - Not Available
7. facwbook.com - Not Available
8. facdbook.com - Not Available
9. facebool.com - Not Available
10. facebopk.com - Not Available
11. facebppk.com - Not Available
12. facebiik.com - Not Available
13. facevook.com - Not Available
14. facenook.com - Not Available
15. gsvrnppl.com - Not Available
16. facfbook.com - Not Available
17. ffcebook.com - Not Available
18. facebbok.com - Not Available
19. faceboook.com - Not Available
20. facebookk.com - Not Available

I give up... 

Not I'm not saying this is something anyone should do unless it's for official reasons but the article was a good read for awareness.

https://krebsonsecurity.com/2019/11/its-way-too-easy-to-get-a-gov-domain-name

A lot of it is lieing on forms but points out that not a ton of checking and verification happens.

Have you tried it?

Quote from: jdaniele on November 20, 2019, 10:23:06 PM

So are they saying the computer makes an error by requesting a domain and messing up the bit? Or, is the human making the error by typing it wrong? I see this all the time with domains similar to Google.com lol.

the computer is the one making the typo.

Ok that's what I was wondering. So these "bitsquatting" are pretty much rolling the dice or basically digitally fishing.

Quote from: jdaniele on July 11, 2019, 09:51:04 AM

You usually always need a name but that should mean the SSID isn't being broadcasted. You need to just know it.

no a hidden ssid can be found. to connect to it you need the ssid name.

i believe you have to have you wifi card in monitor mode.

https://forums.kali.org/showthread.php?26486-Enable-monitor-mode-in-Kali-Linux-2
testing it right now.

still no luck but apparently the pineapple wifi will find them without you asking it to. ive seen it in a video on pineapple wifi.

I would think it would work similar to a simple text based password. Using something like brute force to discover what the SSID is.