Geo Targeting Cyber Attacks using IP Addresses

In this video we look at how to enable security and hacking tools with geo targeting by associating IP address blocks with geographies. The idea is basically to be able to find say find all the IP addresses owned by ISPs in a given country. This can be used by a worm or a malicious program to target only a particular country or geography, while leaving the rest if the globe unharmed.

We will be using the Geoipgen tool in this demo. This tool internally uses the open source Geo-Lite country database from Maxmind. This database is a simple CSV file which contains a dump of IP address blocks and correlates them to country names. An interesting application of this database would be to find the geography and location given an IP address. There are already websites such as IP2Location which provide such services, but would be interesting to see a hacking or security tool use it!

 

Vivek Ramachandran is a security evangelist and has been working in computer security related fields for the past 7 years. In 2007, Vivek spoke at world renowned conferences Defcon (WEP Cloaking Exposed) and Toorcon (The Caffe Latte Attack). The discovery of the Caffe Latte Attack was covered by CBS5 news, BBC online, Network World etc news agencies.In 2006, Vivek was announced as one of winners of the Microsoft Security Shootout contest held in India among 65,000 participants. He has also been a recipient of a Team Achievement at Cisco Systems for his work on 802.1x and Port Security modules on the Catalyst 6500 switches. Currently he spends all of his time maintaining Security- Freak.Net , SecurityTube.Net and is the co-founder of Axonize. Vivek, is a Bachelor in Electronics and Communications Engineering from the prestigious Indian Institute of Technology, Guwahati.You can contact him at vivek[at]securitytube.net