Author Topic: Query to exact geolocalisation  (Read 594 times)

0 Members and 1 Guest are viewing this topic.

Offline khofo

  • EZ's Swashbuckler
  • Knight
  • **
  • Posts: 350
  • Cookies: 25
  • My humor is so black, it could go cotton picking.
    • View Profile
Query to exact geolocalisation
« on: January 08, 2015, 05:24:13 am »
Hola amigos,

There is a question that have been tickling my brain lately, I'll try to be simple and straight-forward:

How can u send a request to fetch exact location, to be clearer for example I have a website how can I create a buttob that once clicked i have acess to this info or directly send it to a pc like just pop up. I am not really intrested in how to do the above exactly just examples what I want is to know is that how it's done.

I know it's a bit vague like in my own mind it's not clear just try to ask for precise clarifications of needed.
Quote from: #Evilzone
<Spacecow18> priests are bad ppl
<Insanity> Holy crap
Of course God isnt dead. He's out there partying with the Easter Bunny, Santa Clause, Tooth Fairy, and the Man on the moon...
Some of my work: Introduction to Physical Security

Offline d4rkcat

  • Knight
  • **
  • Posts: 287
  • Cookies: 115
  • He who controls the past controls the future. He who controls the present controls the past.
    • View Profile
    • Scripts
Re: Query to exact geolocalisation
« Reply #1 on: January 08, 2015, 05:44:32 am »
I think I know what you mean. There is only one way that I know of to do exact geolocation down to the meter. It involves using the Wifi BSSID and googles spy database.
This requires a metasploit session:

https://github.com/rapid7/metasploit-framework/blob/master/modules/post/multi/gather/wlan_geolocate.rb
Jabber (OTR required): thed4rkcat@einfachjabber.de    Email (PGP required): thed4rkcat@yandex.com    PGP Key: here and here     Blog

<sofldan> not asking for anyone to hold my hand uber space shuttle door gunner guy.


Offline khofo

  • EZ's Swashbuckler
  • Knight
  • **
  • Posts: 350
  • Cookies: 25
  • My humor is so black, it could go cotton picking.
    • View Profile
Re: Query to exact geolocalisation
« Reply #2 on: January 08, 2015, 05:13:14 pm »
I think I know what you mean. There is only one way that I know of to do exact geolocation down to the meter. It involves using the Wifi BSSID and googles spy database.
This requires a metasploit session:

https://github.com/rapid7/metasploit-framework/blob/master/modules/post/multi/gather/wlan_geolocate.rb


But like how to weather sites for example can get your exact location just when u press " I agree to let xx.com use my location" or even google maps for example. Like I do not intend to know how it's done stealthy like a big banner with "DO YOU WANT TO SHARE YOUR LOCATION" and once the target presses YES I get it location or store it or whatever.


But thanks for the link really seams interesting to use when having a metasploit session on a target computer
« Last Edit: January 08, 2015, 05:14:01 pm by Khofo »
Quote from: #Evilzone
<Spacecow18> priests are bad ppl
<Insanity> Holy crap
Of course God isnt dead. He's out there partying with the Easter Bunny, Santa Clause, Tooth Fairy, and the Man on the moon...
Some of my work: Introduction to Physical Security

Offline d4rkcat

  • Knight
  • **
  • Posts: 287
  • Cookies: 115
  • He who controls the past controls the future. He who controls the present controls the past.
    • View Profile
    • Scripts
Re: Query to exact geolocalisation
« Reply #3 on: January 08, 2015, 05:21:58 pm »
Are you talking about when you view websites from your phone?
If so that uses the GPS on the phone.
If you are talking about computers I would love to see an example site because as far as I know there is no way to find out the exact location of a computer from a websites point of view.
The closest a website could come would be like a whois so that would be the location of the ISP hub, ie nowhere near exact.
If you could find a way to get the BSSID of the router from a website then you could potentially do the same stuff the metasploit exploit above does and get the geolocation.
I have no idea if that is possible.

Heres some stuff from a 5 second startpage.com search:
https://coderrr.wordpress.com/2008/09/10/get-the-physical-location-of-wireless-router-from-its-mac-address-bssid/
http://diveintohtml5.info/geolocation.html
http://code.tutsplus.com/tutorials/build-an-exercise-tracking-app-geolocation-tracking--mobile-11070
https://stackoverflow.com/questions/2577305/how-to-get-gps-location-from-the-web-browser
« Last Edit: January 08, 2015, 05:36:20 pm by d4rkcat »
Jabber (OTR required): thed4rkcat@einfachjabber.de    Email (PGP required): thed4rkcat@yandex.com    PGP Key: here and here     Blog

<sofldan> not asking for anyone to hold my hand uber space shuttle door gunner guy.


Offline khofo

  • EZ's Swashbuckler
  • Knight
  • **
  • Posts: 350
  • Cookies: 25
  • My humor is so black, it could go cotton picking.
    • View Profile
Re: Query to exact geolocalisation
« Reply #4 on: January 08, 2015, 05:41:42 pm »
Are you talking about when you view websites from your phone?
If so that uses the GPS on the phone.
If you are talking about computers I would love to see an example site because as far as I know there is no way to find out the exact location of a computer from a websites point of view.
The closest a website could come would be like a whois so that would be the location of the ISP hub, ie nowhere near exact.
If you could find a way to get the BSSID of the router from a website then you could potentially do the same stuff the metasploit exploit above does and get the geolocation.
I have no idea if that is possible.

Heres some stuff from a 5 second startpage.com search:
http:/eintohtml5.info/geolocation.html
http://code.tutsplus.com/tutorials/build-an-exercise-tracking-app-geolocation-tracking--mobile-11070
https://stackoverflow.com/questions/2577305/how-to-get-gps-location-from-the-web-browser


I guess I got what u just said but lastly GOOGLE is it like secret how it gets your exact location.



Quote from: #Evilzone
<Spacecow18> priests are bad ppl
<Insanity> Holy crap
Of course God isnt dead. He's out there partying with the Easter Bunny, Santa Clause, Tooth Fairy, and the Man on the moon...
Some of my work: Introduction to Physical Security