EvilZone

Hacking and Security => Hacking and Security => : khofo January 08, 2015, 05:24:13 AM

: Query to exact geolocalisation
: khofo January 08, 2015, 05:24:13 AM
Hola amigos,

There is a question that have been tickling my brain lately, I'll try to be simple and straight-forward:

How can u send a request to fetch exact location, to be clearer for example I have a website how can I create a buttob that once clicked i have acess to this info or directly send it to a pc like just pop up. I am not really intrested in how to do the above exactly just examples what I want is to know is that how it's done.

I know it's a bit vague like in my own mind it's not clear just try to ask for precise clarifications of needed.
: Re: Query to exact geolocalisation
: d4rkcat January 08, 2015, 05:44:32 AM
I think I know what you mean. There is only one way that I know of to do exact geolocation down to the meter. It involves using the Wifi BSSID and googles spy database.
This requires a metasploit session:

https://github.com/rapid7/metasploit-framework/blob/master/modules/post/multi/gather/wlan_geolocate.rb
: Re: Query to exact geolocalisation
: khofo January 08, 2015, 05:13:14 PM
I think I know what you mean. There is only one way that I know of to do exact geolocation down to the meter. It involves using the Wifi BSSID and googles spy database.
This requires a metasploit session:

https://github.com/rapid7/metasploit-framework/blob/master/modules/post/multi/gather/wlan_geolocate.rb (https://github.com/rapid7/metasploit-framework/blob/master/modules/post/multi/gather/wlan_geolocate.rb)


But like how to weather sites for example can get your exact location just when u press " I agree to let xx.com use my location" or even google maps for example. Like I do not intend to know how it's done stealthy like a big banner with "DO YOU WANT TO SHARE YOUR LOCATION" and once the target presses YES I get it location or store it or whatever.


But thanks for the link really seams interesting to use when having a metasploit session on a target computer
: Re: Query to exact geolocalisation
: d4rkcat January 08, 2015, 05:21:58 PM
Are you talking about when you view websites from your phone?
If so that uses the GPS on the phone.
If you are talking about computers I would love to see an example site because as far as I know there is no way to find out the exact location of a computer from a websites point of view.
The closest a website could come would be like a whois so that would be the location of the ISP hub, ie nowhere near exact.
If you could find a way to get the BSSID of the router from a website then you could potentially do the same stuff the metasploit exploit above does and get the geolocation.
I have no idea if that is possible.

Heres some stuff from a 5 second startpage.com search:
https://coderrr.wordpress.com/2008/09/10/get-the-physical-location-of-wireless-router-from-its-mac-address-bssid/
http://diveintohtml5.info/geolocation.html
http://code.tutsplus.com/tutorials/build-an-exercise-tracking-app-geolocation-tracking--mobile-11070
https://stackoverflow.com/questions/2577305/how-to-get-gps-location-from-the-web-browser
: Re: Query to exact geolocalisation
: khofo January 08, 2015, 05:41:42 PM
Are you talking about when you view websites from your phone?
If so that uses the GPS on the phone.
If you are talking about computers I would love to see an example site because as far as I know there is no way to find out the exact location of a computer from a websites point of view.
The closest a website could come would be like a whois so that would be the location of the ISP hub, ie nowhere near exact.
If you could find a way to get the BSSID of the router from a website then you could potentially do the same stuff the metasploit exploit above does and get the geolocation.
I have no idea if that is possible.

Heres some stuff from a 5 second startpage.com search:
http:/eintohtml5.info/geolocation.html (https://evilzone.org/http:/eintohtml5.info/geolocation.html)
http://code.tutsplus.com/tutorials/build-an-exercise-tracking-app-geolocation-tracking--mobile-11070 (http://code.tutsplus.com/tutorials/build-an-exercise-tracking-app-geolocation-tracking--mobile-11070)
https://stackoverflow.com/questions/2577305/how-to-get-gps-location-from-the-web-browser (https://stackoverflow.com/questions/2577305/how-to-get-gps-location-from-the-web-browser)


I guess I got what u just said but lastly GOOGLE is it like secret how it gets your exact location.