Huge ISP Dox


SUBMITTED BY: King

DATE: April 24, 2020, 10:05 p.m.

FORMAT: Text only

SIZE: 58.1 kB

HITS: 501

  1. -------------------------------------------------------------------------------------------------------------------------
  2. Mega List (1):
  3. ---------------
  4. Cox Communications ISP Doxing(Employee Method)
  5. ====Tiers====
  6. - 1
  7. - 2
  8. - 2.5
  9. ====Tools====
  10. - Edgehealth // The primary modem provisioning tool, Search box'sBiggrinocsis CPE, MTA IP, Phone number, MAC Address, Account number, SSN, Address.
  11. - Inav
  12. - SL2
  13. - ICOMS
  14. - Polaris
  15. - Optix
  16. - CATS
  17. - SOAK
  18. - Netweather / Digiweather (Las Vegas Call Center Exclusive)
  19. - Granite
  20. - Vision Tools
  21. - KCUI
  22. - Intermanager
  23. ====IP lookups====
  24. Method 1.: For Cox IP lookups you can tell the agent to open up the Edgehealth tool and there should be a search box labeled "Docsis CPE" which you can enter an IP Address in and it will return the customers name, phone number and address!
  25. =================================================================================
  26. AT&T Uverse ISP Doxing(Employee Method)
  27. ====Tools====
  28. - G2
  29. - U.S-DOT // One of at&ts backup tools which means they normally don't use it unless their tools are down!
  30. - CRM
  31. - CAP
  32. - MYCSP
  33. - Clarify
  34. - Telegence
  35. - Enabler
  36. - CARE
  37. - OPUS
  38. - Pheonix
  39. - PTT
  40. - NBI
  41. - SDP
  42. ====IP lookups====
  43. Method 1.: For Uverse IP lookups tell the agent to go into the G2 Tool then to go into the trans history search area and there will be 3 search box's:IP, IP Netblock and IP Assigned. Tell them to search the IP address up in the IP search box and it will return a BAN number as a search result, which can then be looked up in CRM for the full account information!
  44. Method 2.: For Uverse IP lookups tell the agent to open their backup tool called U.S-DOT which can lookup ip's!
  45. =================================================================================
  46. Time Warner Cable ISP Doxing(Employee Method)
  47. ====Tools====
  48. - Real // The primary tier 1 modem provisioning tool, Search Box's:Cable Modem, MTA, CPE
  49. - Unified // The secondary tier 1 modem provisioning tool, Search Box's:All, Name, Account Number, Phone Number, MAC Address, QMTC, CMTS, Service Area, VOD, HUB, Node.
  50. - AAD(Advanced Agent Desktop) // The primary tier 1 billing tool.
  51. - Genocide
  52. - DOCSIS/ATG(Level 3/Tier 3 Only) // The tier 3 master tool for modem provisioning/billing, Search Box's:Modem Mac, Mta Mac, Modem Ip, Cpe Ip, Mta Ip, Account Number, User ID, Phone Number, Subscriber Name
  53. - Daycare
  54. - ACSR
  55. - ICOMS // The notorious billing system that almost every ISP uses.
  56. - Big Brother
  57. - Netcool
  58. - CSG
  59. - NYROC(BrightHouse Networks Version of DOCSIS)
  60. - Arris Workforce Management
  61. ====IP lookups====
  62. Method 1.:Tell the agent to go into Real and to go to the What is the entity name? tab and then to the What are you looking for? area and then they will be 3 search box's:Cable Modem, MTA and CPE.You can try getting the agent to lookup the IP in the CPE search box and if it returns "discovery not found" which means the search returned no results possibly due to the agents location or what division/market was set on real you can have the agent set the division on real to the one of the IP's location so then when they type the IP in the CPE search box results should come up, another way you can do IP lookups in real is you tell the agent to look the IP up in the Cable Modem search box and it will bring up all mac addresses ever associated with the IP including active and inactive accounts!
  63. Script:"Hello this is Micheal Jones from Time Warner Cable technical support level 2, all my tools seem to be down like real and unified and I need assistance pulling up this customers account so can you help me? open up the tool real sir and then when you open up real there should be a main search box and just type this IP Address into the box and all the information should come up tell me when you have an account pulled up sir."
  64. Method 2.:Tell the agent to go into Unified and they will be 11 search box's:All, Name, Account Number, Phone Number, Mac Address, QMTC, CMTS, Service Area, VOD, HUB, Node.Tell the agent to set his division/market to the one associated with the IP's location then tell the agent to type the IP Address in to the search box labeled "All" and all the account results should come up!
  65. Method 3.: Tell the agent to transfer you to Tier 3/Level 3 and those agents have access to a special tool known as ATG/Docsis.Tell the agent to open DOCSIS up and they will be 9 search box's:CPE IP, MTA IP, Cable Modem IP, Account Number, User ID, Phone Number, Subscribers Name, Modem MAC, MTA Mac.Tell the agent to search the IP Address up in the CPE IP search box and it will return all the information on the customer including the service address, MAC Address of the modem, account holder name and of course a phone number!, make sure to ask for these details nicely.Note*:Some Tier 1/Level 1 agents can open up DOCSIS as well.
  66. ===Format===
  67. IP:
  68. Name:
  69. DL:
  70. SSN:
  71. Phone Number:
  72. Address:
  73. Account Number:
  74. Skype:
  75. MAC Address: // Device MAC // Cable MAC
  76. Joshua: 189109
  77. =================================================================================
  78. Comcast Cable ISP Doxing(Employee Method)
  79. ====Tiers====
  80. - 1
  81. - 2
  82. - 3
  83. ====Tools====
  84. - Grandslam (No longer used by comcast; Main tool is Einstein now.) // The primary tool that does modem provisioning tasks and can lookup the account by anything, Search Box'sTonguehone Number, Account Number, Postal Address, City/State/Zip, First/Last name, Email Username, IP Address(Greyed out in the new Grandslam (No longer used by comcast; Main tool is Einstein now.) update, useless), DNS Lookup, Ticket Number, CDV(Comcast Digital Voice) Number, MAC Address, Social Network ID, Previous Accounts.
  85. - Vision
  86. - Comtrac
  87. - ASCR
  88. - Einstein // The help-desk like tool for employees which can also search customer accounts and this tool also replaced the old help desk system known as CASPER, Search Box'sTonguehone Number, Account Number, Postal Address, City/State/Zip, First/Last name, Ticket Number, CMAC, DNS Lookup, Previous Accounts.
  89. - ERone
  90. - CSG
  91. - ITG
  92. - BAM
  93. - Competitive Edge
  94. - Ninjato
  95. - Daycare
  96. ====IP lookups====
  97. Method 1.: For Comcast IP lookups you can tell the agent to use the Grandslam (No longer used by comcast; Main tool is Einstein now.) tool which has a search box labeled "IP Address" and have them type the IP into that and it will return all the details on the customer. This method has been patched as of january 2014 the "IP Address" search box has been greyed out!(Patched)
  98. Method 2.: For Comcast IP lookups you can tell the agent to use the Grandslam (No longer used by comcast; Main tool is Einstein now.) tool which has a search box labeled "DNS Lookup" under the greyed out IP Address box which can also pull accounts up by the IP Address, so just tell the agent to type the IP Address in it and the account results should show up! Normally this search was made for DNS related comcast IPS like this one for example:69.252.250.103, which have the hostname dns101.comcast.net but it seems to also pull up CPE(Customer Premise Equipment) IP's as well, so this looks like a bad implementation error on their end.
  99. Method 3.: For Comcast IP lookups you can tell the agent to use the Comtrac tool which has a search box labeled "IPV4" which can pull up the customers account details after the agent types the IP address in it so the results should show up.
  100. Method 4.: For Comcast IP lookups you can tell the agent to use the Einstein tool which has a search box labeled "DNS Lookup" which can pull up accounts by the IP Address and it will return the full account results.
  101. Method 5.: For Comcast IP lookups you can tell the agent to transfer you to the Network Solutions department and the IP Address search field on their Grandslam (No longer used by comcast; Main tool is Einstein now.)s aren't grayed out and you can do IP searches.
  102. =================================================================================
  103. Verizon FiOs ISP Doxing(Employee Method)
  104. ====Tiers====
  105. - 1
  106. - 2
  107. - 3
  108. ====Tools====
  109. - CoFee
  110. - CPE Manager
  111. - Legend
  112. - Info Desk
  113. ====IP lookups====
  114. Method 1.: For Verizon FiOs IP lookups you can tell the agent to use the CPE Manager tool which has a STB(Set-Top Box) Tracking tab and on it theres an search box labeled "WAN IP" which you can look the IP Address up in and then it will show how many set box's the customer currently has then you tell the agent to look up the Circuit ID and it will pull up the whole entire account!
  115. ======================================================================================
  116. Jonathan - Z381533
  117. David - Z646290
  118. Shawn - Z411609
  119. 108.0.244.22
  120. =================================================================================
  121. Windstream Communications ISP Doxing(Employee Method)
  122. ====Tools====
  123. - Datacannon
  124. ====IP lookups====
  125. Method 1.: For Windstream IP lookups tell the agent to open up the Datacannon tool, then on Datacannon you tell the agent to type the IP Address in the search box labeled "IP", it will then return a modem serial number which you ask the agent for nicely and then you can either have the agent lookup the modem serial number in another tool or you can call back and have the modem serial number looked up by another agent!
  126. =================================================================================
  127. Wide Open West ISP Doxing(Employee Method)
  128. ====Tiers====
  129. - 1
  130. - 2
  131. - 3
  132. ====Tools====
  133. - ICOMS // The only tool tier 1 agents have, this is just a basic billing tool to pull up accounts via basic info like address and phone number.
  134. - M.U.S.T(Modem, Upgrades and Statistics Tool) // The main tier 2 tool used for modem upgrades, can also search modem and CPE ip's to pull up accounts.
  135. - ALOPA // The tier 3 master tool, can do CPE, MTA and cable modem searches.
  136. - Spark // The tool agents use to chat with other agents using a chat room system.
  137. - Kronos // The agents use this tool to clock in/out of their shift.
  138. ====IP lookups====
  139. Method 1.: For WOW IP Address lookups tell the agent to open the MUST(Modem Upgrades and Statistics Tool) tool and it has a main searchbox for cable modem lookups so just have the agent type the IP address in the main search box labeled "CM IP or MAC Address" and it will pull up the modem information.
  140. Method 2.: For WOW IP Address lookups tell the agent to transfer you to tier 3 or home networking department.Once your at tier 3 or home networking department, have the agent do a CPE search on the ip using the ALOPA tool.
  141. =================================================================================
  142. Suddenlink Communications ISP Doxing(Employee Method)
  143. ===Tiers====
  144. - 1
  145. ===Tools====
  146. - ICOMS
  147. - Mystro
  148. - Tulse
  149. ====IP lookups====
  150. Method 1.: For Suddenlink IP Address lookups tell the agent to use the tulse tool and theres a search box thats labeled "Data CPE IP", so have them type the IP address into that and it will pull up the full account results!
  151. =================================================================================
  152. CenturyLink ISP Doxing(Employee Method)
  153. ===Tiers====
  154. - 1
  155. - 1.5
  156. ===Tools====
  157. - Radius // Primary tool tier 1.5 uses for CPE IP Searches.
  158. - RX // Search BoxTongueoll DSLAM
  159. - KGB2
  160. - Qview
  161. - H.S.I // Agent's use this tool to chat with other tier 1's and tier 1.5 agents which can do CPE searches on IP's using Radius.
  162. - Qrad(User Assigned IP Address)
  163. - Remedy
  164. - TRACS
  165. - MARTENS
  166. - Ensemble
  167. ====IP lookups====
  168. Method: For Centurylink IP lookups tell the agent to open up the HSI tool and to open up a chat with a tier 1.5 agent and have the tier 1.5 agent do a cpe search on the IP Address and if it appears out of scope tell the them to transfer you to century legacy support and have them lookup the IP, remember you need a working CUID or they will not provide information.
  169. Method 2.: For Centurylink IP lookups tell the agent to open up the Qrad tool and on it theres a search box labeled "User Assigned IP" which pulls up the full account.
  170. =================================================================================
  171. 9C:97:26:59:8B:57
  172. Frontier Communications ISP Doxing(Employee Method)
  173. ====Tiers====
  174. - 1
  175. - 2
  176. - 3
  177. ====Tools====
  178. Phone: +18005843384
  179. - Jwalk //
  180. - Inet //
  181. - Spark // Agents use this tool to chat with tier 1's in their team and tier 2's.
  182. - Peakflow
  183. - Netcool
  184. - Solarwinds
  185. - Nagios
  186. - DPI // Account Number , SSN , Name , Address
  187. - Simple // FIOS Uverse Customers
  188. - DPI // Account Number, SSN, Name, Address
  189. - Simple // FIOS Uverse Customers
  190. ===IP Lookups===
  191. Method 1.:For Frontier IP Lookups you tell the agent to transfer you to tier 3 then you use the "" tool.
  192. =================================================================================
  193. Optimum Online ISP Doxing(Employee Method)
  194. ===Tools====
  195. - IDA
  196. - IDA Lite
  197. - Boost
  198. - TriO
  199. - Sear
  200. - KDE
  201. - CableData
  202. - Groupwise
  203. - Modem Control
  204. - ZOOM
  205. - KOMS
  206. - Dart
  207. - Remedy
  208. ===IP Lookups====
  209. Method 1.: For Optimum Online IP lookups, tell the agent to open up the Sear tool and to do an IP Address search.
  210. =================================================================================
  211. Charter Communications ISP Doxing(Employee Method)
  212. ====Tiers====
  213. - 1
  214. - 2
  215. ====Tools====
  216. - Sigma // The primary billing tool, Search Box's:First + Last Name, FQID, Address, MAC ID, Email
  217. - IRIS // The secondary billing tool, Search Box's:First + Last name, Address
  218. - CSR Admin
  219. - D.R.U.M // Main tool for modem provisioning tasks and it also can practically search by anything, Search Box's:CPE IP, MTA IP, Modem IP, MAC Address, Address, First + Last Name.
  220. - Netcool
  221. - MARS
  222. - Hammer
  223. - Webtop
  224. - Everstream
  225. - Tekmark Proviser
  226. ===IP Lookups===
  227. Method 1.: For Charter IP Lookups tell the agent to use the D.R.U.M tool and theres a search box labeled "CPE-IP", so tell the agent to type the IP in that box and it should search for the modem information and a name and mac address should pull up.You then have the agent search the mac address up in CSG and it will pull up the full account information.
  228. Charter Communications
  229. Name : Gustavo
  230. ID : J30
  231. =================================================================================
  232. Mediacom Communications ISP Doxing(Employee Method)
  233. ====Tools====
  234. - ASCR
  235. - RDP
  236. ====IP Lookups===
  237. Method 1.:?
  238. =================================================================================
  239. AT&T DSL ISP Doxing(Employee Method)
  240. ==Tools==
  241. - CSR Admin
  242. - Unisync
  243. - CPSauce
  244. - CRM
  245. - OSS
  246. ===IP Lookups===
  247. Method 1.: For AT&T DSL IP lookups tell the agent to type the IP Address in the main search criteria box on OSS and it will show if the connection is active and will pull up the current Username of whoever currently has the IP Address assigned to them, you then tell them to look up the username in CRM and it will pull up the rest of the account details.
  248. =================================================================================
  249. Clear Wireless ISP Doxing(Employee Method)
  250. ==Tools===
  251. - Boss
  252. - Salesforce
  253. - Blue Avalanche
  254. - Cheetah
  255. - Clear Fax
  256. ===IP Lookups===
  257. Method 1.:For Clear Wireless IP Lookups you transfer to tier 2 then see if they can do a cpe search if not they will transfer you to tier 3 that can do CPE searches.
  258. =================================================================================
  259. RCN ISP Doxing(Employee Method)
  260. ===Tools===
  261. - ICOMS // The notorious billing system that almost every ISP uses.
  262. - TEAD
  263. - Lighthouse
  264. - ASPECT
  265. - PWS
  266. - NPAC/LSOA
  267. - Lotus Notes // The primary feedback system used to write notes on things.
  268. ===IP Lookups===
  269. Method 1.:
  270. =================================================================================
  271. Fairpoint Communications ISP Doxing(Employee Method)
  272. ===Tools===
  273. ?
  274. =================================================================================
  275. TalkTalk ISP Doxing(Employee Method)
  276. ===Tools===
  277. - Singleview // The primary modem provisioning tool.
  278. - Subportal // The primary billing tool.
  279. - PortalPay // The secondary billing tool.
  280. ===IP Lookups===
  281. Method 1. : For TalkTalk IP lookups tell the agent to type the IP Address in singleview!
  282. =================================================================================
  283. Sky Broadband ISP Doxing(Employee Method)
  284. ===Tools===
  285. - Lama
  286. - SPM (Superman) - IP Lookups
  287. - Iris
  288. ===IP Lookups===
  289. Method 1. : For Sky Broadband IP lookups tell the agent to type the IP Address in superman.
  290. =================================================================================
  291. ====Law Enforcement Impersonation (Subpeona Method)====
  292. The second way to ISP dox someone is to fake a cop or federal agency of law enforcement to gather information attached to an IP Address.This method is notoriously used by the blackhat hacker killerpop89 before he got owned by cosmo and the rest of ugnazi.Unlike
  293. employee impersonation this method is a wee bit harder but it is possible. First you want to find the subpoeona compliance line or similiar law enforcement helpline which I will provide all the contact information below for all the common ISP's.Sometimes if you can't social engineer the legal department fully they may keep asking you to send in a subpeona which you can photoshop a legit looking one and to send it in you can use a service like efax (efax.com).After all that is done you should get the information sent to you over phone or over email.
  294. Hello, I am Robert Traviano. I work for Law Enforcement as I have a subpoena letter - http://prntscr.com/6fuvcq That's a screenshot of the subpoena letter. So I need you to provide information from this IP address - 67.186.175.38 - It is HIGHLY urgent.
  295. If they don't give you information or refuse to, try this:
  296. <Employee name>, this is officially unresolved case. FBI are working on this and I am one of them, please look at the subpoena letter. We believe the person of that IP Address is a criminal due to illegal activites online. It is HIGHLY urgent. You could be saving people lives if you help out.
  297. TL;DR:
  298. 1) Draft up a fake subpoena for the IP adress you're targeting
  299. 2) send the subpoena into the ISP for the IP adress
  300. 3) call legal department after hours, you will be transferred to general support
  301. 4) tell general support you're calling RE: subpoena and tell them you need the information ASAP.
  302. 5) They will happily disclose anything you want to know regarding the account
  303. =================================================================================
  304. Paypal
  305. ====Tools====
  306. - Compass
  307. - Admin
  308. =================================================================================
  309. BellAliant
  310. ====Tools====
  311. - Singleview
  312. - CSM
  313. - INTERNET
  314. - WEBCARE
  315. - Infernet
  316. Number: (888)214-7896
  317. =================================================================================
  318. Verizon DSL
  319. ====Tools====
  320. - Focus Net, STB - Search Billing, DSL Broadband, Customer Name, ZIP Code, Cirucit ID
  321. - SSP360, Order Number, Billing Telephone, Account Number, Billing Account
  322. - VDI Express, Telephone, Email ID
  323. - Coffee,
  324. -
  325. =================================================================================
  326. Verizon:
  327. Z117601 -DAVID
  328. Z411609 - Shawn
  329. z614519 -John
  330. Z613346 - DAVID
  331. z250348 -Jim
  332. v781z84 -(Vcode) -Tyler
  333. z592009 -Chantelle
  334. =================================================================================
  335. Comcast:
  336. 51812 -Travis
  337. 4278 Roel
  338. =================================================================================
  339. Time Warner Cable:
  340. EID - V454172 Ryan
  341. =================================================================================
  342. Charter Communications
  343. Chase-L3L
  344. =================================================================================
  345. Sasktel:
  346. Portal:
  347. Simon:
  348. Customer Centre:
  349. Martins:
  350. =================================================================================
  351. att:
  352. JM038W -Jay
  353. Account Look-up Tools, Support Lines, and Sites:
  354. AT&T - http://www.att.com/
  355. U-verse Support: 1-800-288-2020
  356. Employee IDs - md905c
  357. • Systems: G2, CCTP, SystemX, Clarify, Telegence, MyCSP, Phoenix, Torch, CSR Admin, CTI, Agent Verification System, CCC Tool, DLC, C-Care
  358. Sky - http://www.sky.com/
  359. Sky Tech Sppport: 0-844-241-1653
  360. • Systems: Cloud
  361. Cox - http://ww2.cox.com/residential/home.cox
  362. Cox Support: 877-891-2899
  363. • Systems: Polaris (IP), iNav, edgehealth, Icon, IDM, ICOMS, SL2
  364. Charter - https://www.charter.com/?
  365. Charter Support: 713-554-3669
  366. • Systems: Sigma, IRIS
  367. Comcast - http://www.comcast.com/
  368. Comcast Support: 1-800-934-6489
  369. • Systems: ACSR, Comtrac, CSG, Einstein, Grand-slam, Vision
  370. Time Warner - http://www.timewarnercable.com/
  371. Time Warner Support - 212-364-8300
  372. • Systems: Real, Unify
  373. Road Runner - http://www.rr.com/
  374. Road Runner Support: 1-866-744-1678
  375. • Systems: Real, Unify
  376. Verizon - http://www.verizonwireless.com/
  377. Verizon Support: 1-800-837-4966
  378. • Systems: Coffee
  379. Items that are capable for look up:
  380. Name on file:
  381. DOB on file:
  382. SSN on file:
  383. Phone on file:
  384. Address on file:
  385. ISP Account #:
  386. Primary Account Email:
  387. Credit Card on File:
  388. Other Tools / Sites / Providers:
  389. Shaw: TOGAF, Marshall White, CF60, Calgary Call Center
  390. Rogers: Icm (can't do ips, but account number/phone number), Sgi (finding more info on account)
  391. Bell: Maxplus, CSM 1 Bill, Singleview
  392. Charter: Sigma, IRIS
  393. Netflix: Obiwan
  394. Verizon: Cofee, Legend, ASCRR (Business)
  395. Yahoo: AMD, Star
  396. T-Mobile: QuickView, Remedy, SAMSON, NCI, T-COMMUNINITY, IHLR
  397. CenturyLink: Qwest Repair Expert[QRX], Facility Check
  398. Charter: Sigma, IRIS
  399. Comcast: ACSR, Comtrac, CSG, Einstien, Grandslam (No longer used by comcast; Main tool is Einstein now.), Vision
  400. Sprint: iCare
  401. Time Warner / Road Runner / Brighthouse: Real, Unify
  402. Telus: Smart Desktop, Cosmo, Parter, Desktop One, Synapsis (IP LOOKUPS), Office Communicator
  403. Optimum Online: TDA
  404. Paypal: Compass, Admin
  405. Amazon: CRC, IVR
  406. Windstream: DataCannon
  407. AT&T
  408. Phone Number: 1 (800) 288-2020
  409. Systems: CCTP, G2, CARE, Telegence, Clarify, Phoenix, OMS, CRM, Enabler, OPUS, POSII, Compass, Ordertrack, myCSP, NBI, Ensemble, Xacct, PTT
  410. Yahoo
  411. Live Chat: https://io.help.yahoo.com/contact/index?...=PROD_ACCT
  412. Systems: AMD, Star
  413. Cox
  414. Phone Number: 1 (800) 229-6542
  415. Live Chat: https://www.cox.com/support/emailchat/chatusenglish.asp
  416. Systems: SL2, iComs, iNav, Edgehealth, Remedy, Quikway, Tivia
  417. Charter
  418. Phone Number: 1 (888) 438-2427
  419. Live Chat: http://www.myaccount.charter.com/Visitors/chatlive.aspx
  420. Systems: Sigma, IRIS
  421. Comcast
  422. Phone Number: 1 (800) COMCAST
  423. Live Chat: https://www.comcastsupport.com/chatentry/
  424. Systems: ACSR, Comtrac, CSG, Einstien, Grandslam (No longer used by comcast; Main tool is Einstein now.), Vision (NOTE: Only Grandslam (No longer used by comcast; Main tool is Einstein now.) can do IP address lookups.)
  425. Employee Name: Gilbert
  426. Employee ID: 100-499-892
  427. Employee Region: Boston
  428. Employee SV: Anthony
  429. Netflix
  430. Phone Number: 1 (866) 579-7172
  431. Live Chat: https://help.netflix.com/help#startChat
  432. Systems: Obiwan
  433. Sprint
  434. Phone Number: 1 (866) 866-7509
  435. Systems: CICS, DB2, MQ, ADABASE, REXX, VSAM
  436. Time Warner / Road Runner
  437. Username Retrieval: https://urt.rr.com/
  438. Password Reset: http://pt.rr.com/
  439. IP Management Tool: https://ipmt.rr.com/ipmt/login.jsp
  440. Phone Number: 1 (855) 800-1925
  441. Live Chat: http://www.timewarnercable.com/en/reside...ct-us.html
  442. Systems: Real, Unified, AAD, ACSR, ATG Tools, iComs, DOCSIS. (DOCSIS, Unified, and Real do IP lookups)
  443. Name: Darryl Estes
  444. EID: E12145
  445. Location: TW-Raleigh in Raleigh, NC
  446. Verizon
  447. Login: https://www22.verizon.com/cofee/content/...login.aspx
  448. Phone Number: 1 (800) 837-4966
  449. Live Chat: http://www.verizon.com/Support/Residenti.../index.htm
  450. Systems: Cofee, Legend, DTI Express, iView, iGO, CPE Manager, Marval, Telegence
  451. LCT Home Office:
  452. Name: Brett
  453. Location: Redmond, WA
  454. OSID: GFA*667
  455. Name: Andrew
  456. Location: New York, New York
  457. OSID: Z479046
  458. Shaw:
  459. Systems: TOGAF
  460. Rogers:
  461. Systems: ICM and STI
  462. Bell:
  463. Systems: Maxplus, CSM 1 Bill, Singleview (Singleview does IPs)
  464. Name: Vipin
  465. Employee ID: 604084
  466. Name: Shamari
  467. Employee ID: EY17429
  468. T-Mobile:
  469. Systems: QuickView, Remedy, SAMSON, NCI, T-COMMUNINITY, IHLR
  470. Opt Online:
  471. Systems: TDA
  472. PenTeleData:
  473. Login: http://www2.engr.ptd.net/
  474. Login: http://server4.engr.ptd.net/login/login.cgi
  475. Webmail: https://promail.ptd.net/
  476. Usernames: admin
  477. System: Smart System
  478. Name: Joann
  479. CFR: CSR2 (Employee ID)
  480. Position: Supervisor 2 PenTeleData, Corporate Office
  481. Paypal:
  482. Systems: Compass & Admin
  483. Fido / Micro-Cell
  484. Systems: ICM - Looks up the account information, Citrix - log into the account
  485. CenturyLink:
  486. Systems: Ensemble
  487. Frontier:
  488. Systems: JWalk and iNet
  489. Blue Ridge:
  490. Systems: iComs
  491. Cogent:
  492. Systems: SSRS and Remedy Ticketing System
  493. Charter
  494. Hello My Name is Andrew and I'm from the Charter Customer Support in
  495. Greenville South Carolina and i cant access the clients information
  496. our systems are not working could you please provide some details on the
  497. client for me?
  498. Comcast
  499. Hello my name is Andrew and I'm from the Comcast Customer Support in
  500. (VICTIMS AREA) and i cant access the clients information my
  501. Grandslam (No longer used by comcast; Main tool is Einstein now.) cannot connect and im recieving errors. Will you plesae look up
  502. the information on the client for me?
  503. Verizon
  504. Hello my name is Thomas and I'm from the Verizon Customer Support in
  505. Danvillge and i cant access the clients information my
  506. Legend/Iview (use any) cannot connect and im recieving errors. Will you plesae look up
  507. the information on the client for me?
  508. AT&T
  509. Hello my name is Thomas and I'm from the AT&T Customer Support in
  510. Danville and i cant access the clients information my
  511. G2 (use any) cannot connect and im recieving errors. Will you plesae look up
  512. the information on the client for me?
  513. General method:
  514. You'll be most successful in getting agents to pull up info by calling the internet technical support for the company, telling an agent you're an internet technical representative, and telling them your systems are down at your call center. Then give them whatever information you have, and get them to pull it up in one of their tools.
  515. =================================================================================
  516. AT&T Info:
  517. Tools:
  518. SystemX - Shows IP, what account it is, lookup by address, runs credit checks, see driver license.
  519. Clarify - Looks up account and logs into the account. Can do full social, ip, phone number, and name.
  520. Telegence - Shows account information including last four of the ssn.
  521. MyCSP - Opens up Torch, SystemX, etc.
  522. Phoenix - Change phone numbers, rate plans, etc.
  523. Torch - Text messager.
  524. CSR Admin - Logs into MyATT account.
  525. CTI - Transfer calls.
  526. Agent Verification System - Verifies employee ID.
  527. CCC Tool - Removes subscriptions.
  528. DLC - See how long the phone has been in service.
  529. C-Care - Checks for upgrades.
  530. Employee ID:
  531. First 2 Initials, first 3 of the Social, letter at the end.
  532. Example:
  533. Name: Larry Stevenson
  534. SSN: 306-89-7661
  535. UID: LS306Z
  536. Employee Logins:
  537. Computer:
  538. Username = UID.
  539. Password is set by the agent. Changes every month.
  540. Tool Portals:
  541. Username = UID.
  542. Password is either randomized or set by the agent. Changes every three weeks.
  543. Computer Info:
  544. OS is Windows 7 with an Windows classic theme.
  545. Virus protection is McAfee.
  546. Some connect wired and some are wireless.
  547. WiFi names are "AT&T" followed by a number.
  548. Online Access:
  549. https://access1.sbc.com/
  550. https://mycsp.cingular.com/mycspportal/a...abel=login
  551. https://attathome.att.com/athome_web/index.jsp
  552. https://sso.sl.attcompute.com
  553. https://attawardslink.com
  554. https://att.corporateperks.com/login
  555. =================================================================================
  556. ¦¦¦¦¦
  557. Verizon:
  558. Tools:
  559. CoFee - Main tool agents use. Looks up accounts by phone number, name, etc.
  560. CPE Manager - Looks up accounts by the IP address.
  561. Legend - Another tool agents use to pull info off an account.
  562. CoFee Login:
  563. https://www22.verizon.com/cofee/cpm/login/login.aspx
  564. =================================================================================¦¦¦
  565. Comcast:
  566. Tools:
  567. Grandslam (No longer used by comcast; Main tool is Einstein now.) - Looks up by IP, SSN, phone, and more.
  568. ASCR - Looks up account.
  569. Einstein - Looks up account.
  570. Every Comcast tool is within Grandslam (No longer used by comcast; Main tool is Einstein now.) as Grandslam (No longer used by comcast; Main tool is Einstein now.) is Comcast's "master tool".
  571. =================================================================================
  572. Time Warner / Roadrunner / Brighthouse:
  573. Call 1800-TWCABLE. Enter in a phone number and zip in the area of the IP address. Once an agent picks up tell them a fake name, you work for TWC internet tech support, and you were having trouble looking up a customers account with AAD. Then ask them if they can transfer you to tier 3. They will transfer you then. Once you get transferred to tier 3 say your name and your work for TWC internet tech support. Tell them you were having trouble pulling up an account by IP address. Say that Unified was giving you an error not found. Tell them you don’t have DOCSIS and ask them if they can look up the account in that. They should do it, so give them the IP. Once they pull up the account ask for these things in the order listed:
  574. -Name
  575. -Phone
  576. -Address
  577. -MAC Address
  578. -User ID
  579. -Email
  580. -Account Number
  581. After this point if you ask for anything else they may get suspicious. They may give it to you, or you might have to call back. Try asking for this information on the account.
  582. -Security measure: Last 4 of the ssn and/or the 4 digit pin code
  583. -customer code
  584. -full driver license
  585. After you get that call back TWC and ask to reset your password. Say you forgot the SQA. They will ask for the security measure and customer code then they’ll reset it.
  586. You’ll want access into the primary email and the MyServices feature.
  587. Make sure you get both reset, but sometimes you’ll have to create the MyServices account.
  588. Also if you want the SSID and network password go to the WiFi live chat once logged into the target’s account. The agents will ask for some information in order to verify you then they’ll ask for the modem MAC address. Give them the MAC address the employee read out to you earlier when you asked them for the MAC address on file. They should then provide you with the SSID name and password.
  589. Resources:
  590. Username Retrieval: https://urt.rr.com/
  591. Password Reset: http://pt.rr.com/
  592. Tools:
  593. AAD - Used to pull up the account once they have the information on the customer.
  594. Unified - Pulls up by MAC, IP, etc.
  595. ATG Tools / DOCSIS - Basically TWC’s “master tool”. Can do just about anything.
  596. If you’re ever asked for an employee ID just use this. It’s legitimate.
  597. Employee Info:
  598. Name: Darryl Estes
  599. EID: E12145
  600. Location: TW-Raleigh in Raleigh, NC
  601. Regions:
  602. Austin RDC
  603. TW-Austin
  604. TW-Beaumont
  605. TW-ColumbusTX
  606. TW-CorpusChristi
  607. TW-DelRio
  608. TW-Dilley
  609. TW-EaglePass
  610. TW-ElPaso
  611. TW-Gonzalez
  612. TW-KansasCity
  613. TW-Kerrville
  614. TW-Laredo
  615. TW-Lincoln
  616. TW-NorthTexas
  617. TW-RioGrandeValley
  618. TW-SanAntonio
  619. TW-Texas Regional
  620. TW-Uvalde
  621. TW-Waco
  622. TW-WitchitaFalls
  623. Bright House Network RDC
  624. TW-Bakersfield (Bright House)
  625. TW-Birmingham
  626. TW-Cantonment
  627. TW-CentralFL
  628. TW-Defuniak
  629. TW-Detroit (Bright House)
  630. TW-Elmore
  631. TW-Eufaula
  632. TW-Greenville
  633. TW-Indianapolis (Bright House)
  634. TW-TampaBay
  635. Charlotte NDC RDC
  636. NDC-Charlotte
  637. Columbus RDC
  638. IN-Columbus
  639. TW-KYN
  640. TW-Louisville
  641. TW-MOH
  642. TW-Milwaukee
  643. TW-NEO
  644. TW-NEW
  645. TW-Regional Midwest
  646. TW-SWOH
  647. TW-WesternOhio
  648. Coudersport RDC
  649. TW-Coudersport
  650. Herndon RDC
  651. TW-Herndon
  652. NYC RDC
  653. TW-Bergen
  654. TW-Liberty
  655. TW-NYCity
  656. TW-StatenIsland
  657. Orange RDC
  658. TW-DesertCities
  659. TW-Hawaii
  660. TW-LosAngeles
  661. TW-Mountain
  662. TW-MountainWest
  663. TW-Northwest
  664. TW-SanDiego
  665. TW-Southwest
  666. Peakview RDC
  667. NDC-Peakview
  668. TW-Allegeny
  669. TW-Broomfield
  670. TW-CentralKYOH
  671. TW-Clarksburg
  672. TW-Dothan
  673. TW-MOOKKS
  674. TW-Peakview Regional
  675. TW-Southeast
  676. TW-TerreHaute
  677. TW-VoIP
  678. TW-WesternKY
  679. Raleigh RDC
  680. TW-Charlotte
  681. TW-Columbia
  682. TW-Fayetteville
  683. TW-Greensboro
  684. TW-Raleigh
  685. TW-Regional-Carolinas
  686. TW-Wilmington
  687. Syracuse RDC
  688. TW-Albany
  689. TW-Athol
  690. TW-Berlin
  691. TW-Binghamton
  692. TW-Buffalo
  693. TW-CentralNY
  694. TW-Keene
  695. TW-Lancaster (National division)
  696. TW-Portland
  697. TW-Rochester
  698. TW-Syracuse Regional
  699. TSG RDC
  700. TW-TSG
  701. This isn’t really a part of the social engineering lesson, but here are some TWC employee tools accessed online.
  702. https://tools.rdc-nyc.rr.com/
  703. https://uptime.rdc-kc.rr.com/
  704. https://tools.nyroc.rr.com/
  705. https://tools.tampflrdc.rr.com/docsis/
  706. https://tools.ohiordc.rr.com/
  707. https://docsis-tools.tampabay.rr.com/
  708. https://tools.ohiordc.rr.com/onodera/
  709. https://tech.indy.rr.com/
  710. https://tech.insight.rr.com/
  711. You can find more by using the following Google dork:
  712. https://www.google.com/#q=inurl:tools+si...ery.rr.com
  713. =================================================================================
  714. Cox:
  715. Tools:
  716. Edgehealth - Looks up by IP and MAC.
  717. ICOMS - Looks up account.
  718. SL2 - Looks up account.
  719. =================================================================================
  720. Optimum Online:
  721. Tools:
  722. TDA - Billing tool.
  723. =================================================================================
  724. T-Mobile:
  725. Tools:
  726. Quickview - Looks up account.
  727. Watson - Looks up account.
  728. =================================================================================
  729. CenturyLink:
  730. Tools:Cox Communications ISP Doxing(Employee Method)
  731. ====Tiers====
  732. - 1
  733. - 2
  734. - 2.5
  735. ====Tools====
  736. - Edgehealth // The primary modem provisioning tool, Search box'sBiggrinocsis CPE, MTA IP, Phone number, MAC Address, Account number, SSN, Address.
  737. - Inav
  738. - SL2
  739. - ICOMS
  740. - Polaris
  741. - Optix
  742. - CATS
  743. - SOAK
  744. - Netweather / Digiweather (Las Vegas Call Center Exclusive)
  745. - Granite
  746. - Vision Tools
  747. - KCUI
  748. - Intermanager
  749. ====IP lookups====
  750. Method 1.: For Cox IP lookups you can tell the agent to open up the Edgehealth tool and there should be a search box labeled "Docsis CPE" which you can enter an IP Address in and it will return the customers name, phone number and address!
  751. =================================================================================
  752. AT&T Uverse ISP Doxing(Employee Method)
  753. ====Tools====
  754. - G2
  755. - U.S-DOT // One of at&ts backup tools which means they normally don't use it unless their tools are down!
  756. - CRM
  757. - CAP
  758. - MYCSP
  759. - Clarify
  760. - Telegence
  761. - Enabler
  762. - CARE
  763. - OPUS
  764. - Pheonix
  765. - PTT
  766. - NBI
  767. - SDP
  768. ====IP lookups====
  769. Method 1.: For Uverse IP lookups tell the agent to go into the G2 Tool then to go into the trans history search area and there will be 3 search box's:IP, IP Netblock and IP Assigned. Tell them to search the IP address up in the IP search box and it will return a BAN number as a search result, which can then be looked up in CRM for the full account information!
  770. Method 2.: For Uverse IP lookups tell the agent to open their backup tool called U.S-DOT which can lookup ip's!
  771. =================================================================================
  772. Time Warner Cable ISP Doxing(Employee Method)
  773. ====Tools====
  774. - Real // The primary tier 1 modem provisioning tool, Search Box's:Cable Modem, MTA, CPE
  775. - Unified // The secondary tier 1 modem provisioning tool, Search Box's:All, Name, Account Number, Phone Number, MAC Address, QMTC, CMTS, Service Area, VOD, HUB, Node.
  776. - AAD(Advanced Agent Desktop) // The primary tier 1 billing tool.
  777. - Genocide
  778. - DOCSIS/ATG(Level 3/Tier 3 Only) // The tier 3 master tool for modem provisioning/billing, Search Box's:Modem Mac, Mta Mac, Modem Ip, Cpe Ip, Mta Ip, Account Number, User ID, Phone Number, Subscriber Name
  779. - Daycare
  780. - ACSR
  781. - ICOMS // The notorious billing system that almost every ISP uses.
  782. - Big Brother
  783. - Netcool
  784. - CSG
  785. - NYROC(BrightHouse Networks Version of DOCSIS)
  786. - Arris Workforce Management
  787. ====IP lookups====
  788. Method 1.:Tell the agent to go into Real and to go to the What is the entity name? tab and then to the What are you looking for? area and then they will be 3 search box's:Cable Modem, MTA and CPE.You can try getting the agent to lookup the IP in the CPE search box and if it returns "discovery not found" which means the search returned no results possibly due to the agents location or what division/market was set on real you can have the agent set the division on real to the one of the IP's location so then when they type the IP in the CPE search box results should come up, another way you can do IP lookups in real is you tell the agent to look the IP up in the Cable Modem search box and it will bring up all mac addresses ever associated with the IP including active and inactive accounts!
  789. Script:"Hello this is Micheal Jones from Time Warner Cable technical support level 2, all my tools seem to be down like real and unified and I need assistance pulling up this customers account so can you help me? open up the tool real sir and then when you open up real there should be a main search box and just type this IP Address into the box and all the information should come up tell me when you have an account pulled up sir."
  790. Method 2.:Tell the agent to go into Unified and they will be 11 search box's:All, Name, Account Number, Phone Number, Mac Address, QMTC, CMTS, Service Area, VOD, HUB, Node.Tell the agent to set his division/market to the one associated with the IP's location then tell the agent to type the IP Address in to the search box labeled "All" and all the account results should come up!
  791. Method 3.: Tell the agent to transfer you to Tier 3/Level 3 and those agents have access to a special tool known as ATG/Docsis.Tell the agent to open DOCSIS up and they will be 9 search box's:CPE IP, MTA IP, Cable Modem IP, Account Number, User ID, Phone Number, Subscribers Name, Modem MAC, MTA Mac.Tell the agent to search the IP Address up in the CPE IP search box and it will return all the information on the customer including the service address, MAC Address of the modem, account holder name and of course a phone number!, make sure to ask for these details nicely.Note*:Some Tier 1/Level 1 agents can open up DOCSIS as well.
  792. ===Format===
  793. IP:
  794. Name:
  795. DL:
  796. SSN:
  797. Phone Number:
  798. Address:
  799. Account Number:
  800. Skype:
  801. MAC Address: // Device MAC // Cable MAC
  802. Joshua: 189109
  803. =================================================================================
  804. Comcast Cable ISP Doxing(Employee Method)
  805. ====Tiers====
  806. - 1
  807. - 2
  808. - 3
  809. ====Tools====
  810. - Grandslam (No longer used by comcast; Main tool is Einstein now.) // The primary tool that does modem provisioning tasks and can lookup the account by anything, Search Box'sTonguehone Number, Account Number, Postal Address, City/State/Zip, First/Last name, Email Username, IP Address(Greyed out in the new Grandslam (No longer used by comcast; Main tool is Einstein now.) update, useless), DNS Lookup, Ticket Number, CDV(Comcast Digital Voice) Number, MAC Address, Social Network ID, Previous Accounts.
  811. - Vision
  812. - Comtrac
  813. - ASCR
  814. - Einstein // The help-desk like tool for employees which can also search customer accounts and this tool also replaced the old help desk system known as CASPER, Search Box'sTonguehone Number, Account Number, Postal Address, City/State/Zip, First/Last name, Ticket Number, CMAC, DNS Lookup, Previous Accounts.
  815. - ERone
  816. - CSG
  817. - ITG
  818. - BAM
  819. - Competitive Edge
  820. - Ninjato
  821. - Daycare
  822. ====IP lookups====
  823. Method 1.: For Comcast IP lookups you can tell the agent to use the Grandslam (No longer used by comcast; Main tool is Einstein now.) tool which has a search box labeled "IP Address" and have them type the IP into that and it will return all the details on the customer. This method has been patched as of january 2014 the "IP Address" search box has been greyed out!(Patched)
  824. Method 2.: For Comcast IP lookups you can tell the agent to use the Grandslam (No longer used by comcast; Main tool is Einstein now.) tool which has a search box labeled "DNS Lookup" under the greyed out IP Address box which can also pull accounts up by the IP Address, so just tell the agent to type the IP Address in it and the account results should show up! Normally this search was made for DNS related comcast IPS like this one for example:69.252.250.103, which have the hostname dns101.comcast.net but it seems to also pull up CPE(Customer Premise Equipment) IP's as well, so this looks like a bad implementation error on their end.
  825. Method 3.: For Comcast IP lookups you can tell the agent to use the Comtrac tool which has a search box labeled "IPV4" which can pull up the customers account details after the agent types the IP address in it so the results should show up.
  826. Method 4.: For Comcast IP lookups you can tell the agent to use the Einstein tool which has a search box labeled "DNS Lookup" which can pull up accounts by the IP Address and it will return the full account results.
  827. Method 5.: For Comcast IP lookups you can tell the agent to transfer you to the Network Solutions department and the IP Address search field on their Grandslam (No longer used by comcast; Main tool is Einstein now.)s aren't grayed out and you can do IP searches.
  828. =================================================================================
  829. Verizon FiOs ISP Doxing(Employee Method)
  830. ====Tiers====
  831. - 1
  832. - 2
  833. - 3
  834. ====Tools====
  835. - CoFee
  836. - CPE Manager
  837. - Legend
  838. - Info Desk
  839. ====IP lookups====
  840. Method 1.: For Verizon FiOs IP lookups you can tell the agent to use the CPE Manager tool which has a STB(Set-Top Box) Tracking tab and on it theres an search box labeled "WAN IP" which you can look the IP Address up in and then it will show how many set box's the customer currently has then you tell the agent to look up the Circuit ID and it will pull up the whole entire account!
  841. ======================================================================================
  842. Jonathan - Z381533
  843. David - Z646290
  844. Shawn - Z411609
  845. 108.0.244.22
  846. =================================================================================
  847. Windstream Communications ISP Doxing(Employee Method)
  848. ====Tools====
  849. - Datacannon
  850. ====IP lookups====
  851. Method 1.: For Windstream IP lookups tell the agent to open up the Datacannon tool, then on Datacannon you tell the agent to type the IP Address in the search box labeled "IP", it will then return a modem serial number which you ask the agent for nicely and then you can either have the agent lookup the modem serial number in another tool or you can call back and have the modem serial number looked up by another agent!
  852. =================================================================================
  853. Wide Open West ISP Doxing(Employee Method)
  854. ====Tiers====
  855. - 1
  856. - 2
  857. - 3
  858. ====Tools====
  859. - ICOMS // The only tool tier 1 agents have, this is just a basic billing tool to pull up accounts via basic info like address and phone number.
  860. - M.U.S.T(Modem, Upgrades and Statistics Tool) // The main tier 2 tool used for modem upgrades, can also search modem and CPE ip's to pull up accounts.
  861. - ALOPA // The tier 3 master tool, can do CPE, MTA and cable modem searches.
  862. - Spark // The tool agents use to chat with other agents using a chat room system.
  863. - Kronos // The agents use this tool to clock in/out of their shift.
  864. ====IP lookups====
  865. Method 1.: For WOW IP Address lookups tell the agent to open the MUST(Modem Upgrades and Statistics Tool) tool and it has a main searchbox for cable modem lookups so just have the agent type the IP address in the main search box labeled "CM IP or MAC Address" and it will pull up the modem information.
  866. Method 2.: For WOW IP Address lookups tell the agent to transfer you to tier 3 or home networking department.Once your at tier 3 or home networking department, have the agent do a CPE search on the ip using the ALOPA tool.
  867. =================================================================================
  868. Suddenlink Communications ISP Doxing(Employee Method)
  869. ===Tiers====
  870. - 1
  871. ===Tools====
  872. - ICOMS
  873. - Mystro
  874. - Tulse
  875. ====IP lookups====
  876. Method 1.: For Suddenlink IP Address lookups tell the agent to use the tulse tool and theres a search box thats labeled "Data CPE IP", so have them type the IP address into that and it will pull up the full account results!
  877. =================================================================================
  878. CenturyLink ISP Doxing(Employee Method)
  879. ===Tiers====
  880. - 1
  881. - 1.5
  882. ===Tools====
  883. - Radius // Primary tool tier 1.5 uses for CPE IP Searches.
  884. - RX // Search BoxTongueoll DSLAM
  885. - KGB2
  886. - Qview
  887. - H.S.I // Agent's use this tool to chat with other tier 1's and tier 1.5 agents which can do CPE searches on IP's using Radius.
  888. - Qrad(User Assigned IP Address)
  889. - Remedy
  890. - TRACS
  891. - MARTENS
  892. - Ensemble
  893. ====IP lookups====
  894. Method: For Centurylink IP lookups tell the agent to open up the HSI tool and to open up a chat with a tier 1.5 agent and have the tier 1.5 agent do a cpe search on the IP Address and if it appears out of scope tell the them to transfer you to century legacy support and have them lookup the IP, remember you need a working CUID or they will not provide information.
  895. Method 2.: For Centurylink IP lookups tell the agent to open up the Qrad tool and on it theres a search box labeled "User Assigned IP" which pulls up the full account.
  896. =================================================================================
  897. 9C:97:26:59:8B:57
  898. Frontier Communications ISP Doxing(Employee Method)
  899. ====Tiers====
  900. - 1
  901. - 2
  902. - 3
  903. ====Tools====
  904. - Jwalk
  905. - Inet
  906. - Spark // Agents use this tool to chat with tier 1's in their team and tier 2's.
  907. - Peakflow
  908. - Netcool
  909. - Solarwinds
  910. - Nagios
  911. ===IP Lookups===
  912. Method 1.:For Frontier IP Lookups you tell the agent to transfer you to tier 3 then you use the "" tool.
  913. =================================================================================
  914. Optimum Online ISP Doxing(Employee Method)
  915. ===Tools====
  916. - IDA
  917. - IDA Lite
  918. - Boost
  919. - TriO
  920. - Sear
  921. - KDE
  922. - CableData
  923. - Groupwise
  924. - Modem Control
  925. - ZOOM
  926. - KOMS
  927. - Dart
  928. - Remedy
  929. ===IP Lookups====
  930. Method 1.: For Optimum Online IP lookups, tell the agent to open up the Sear tool and to do an IP Address search.
  931. =================================================================================
  932. Charter Communications ISP Doxing(Employee Method)
  933. ====Tiers====
  934. - 1
  935. - 2
  936. ====Tools====
  937. - Sigma // The primary billing tool, Search Box's:First + Last Name, FQID, Address, MAC ID, Email
  938. - IRIS // The secondary billing tool, Search Box's:First + Last name, Address
  939. - CSR Admin
  940. - D.R.U.M // Main tool for modem provisioning tasks and it also can practically search by anything, Search Box's:CPE IP, MTA IP, Modem IP, MAC Address, Address, First + Last Name.
  941. - Netcool
  942. - MARS
  943. - Hammer
  944. - Webtop
  945. - Everstream
  946. - Tekmark Proviser
  947. ===IP Lookups===
  948. Method 1.: For Charter IP Lookups tell the agent to use the D.R.U.M tool and theres a search box labeled "CPE-IP", so tell the agent to type the IP in that box and it should search for the modem information and a name and mac address should pull up.You then have the agent search the mac address up in CSG and it will pull up the full account information.
  949. Charter Communications
  950. Chase - L3L
  951. =================================================================================
  952. Mediacom Communications ISP Doxing(Employee Method)
  953. ====Tools====
  954. - ASCR
  955. - RDP
  956. ====IP Lookups===
  957. Method 1.:?
  958. =================================================================================
  959. AT&T DSL ISP Doxing(Employee Method)
  960. ==Tools==
  961. - CSR Admin
  962. - Unisync
  963. - CPSauce
  964. - CRM
  965. - OSS
  966. ===IP Lookups===
  967. Method 1.: For AT&T DSL IP lookups tell the agent to type the IP Address in the main search criteria box on OSS and it will show if the connection is active and will pull up the current Username of whoever currently has the IP Address assigned to them, you then tell them to look up the username in CRM and it will pull up the rest of the account details.
  968. =================================================================================
  969. Clear Wireless ISP Doxing(Employee Method)
  970. ==Tools===
  971. - Boss
  972. - Salesforce
  973. - Blue Avalanche
  974. - Cheetah
  975. - Clear Fax
  976. ===IP Lookups===
  977. Method 1.:For Clear Wireless IP Lookups you transfer to tier 2 then see if they can do a cpe search if not they will transfer you to tier 3 that can do CPE searches.
  978. =================================================================================
  979. RCN ISP Doxing(Employee Method)
  980. ===Tools===
  981. - ICOMS // The notorious billing system that almost every ISP uses.
  982. - TEAD
  983. - Lighthouse
  984. - ASPECT
  985. - PWS
  986. - NPAC/LSOA
  987. - Lotus Notes // The primary feedback system used to write notes on things.
  988. ===IP Lookups===
  989. Method 1.:
  990. =================================================================================
  991. Fairpoint Communications ISP Doxing(Employee Method)
  992. ===Tools===
  993. ?
  994. =================================================================================
  995. TalkTalk ISP Doxing(Employee Method)
  996. ===Tools===
  997. - Singleview // The primary modem provisioning tool.
  998. - Subportal // The primary billing tool.
  999. - PortalPay // The secondary billing tool.
  1000. ===IP Lookups===
  1001. Method 1. : For TalkTalk IP lookups tell the agent to type the IP Address in singleview!
  1002. =================================================================================
  1003. Sky Broadband ISP Doxing(Employee Method)
  1004. ===Tools===
  1005. - Lama
  1006. - SPM (Superman) - IP Lookups
  1007. - Iris
  1008. ===IP Lookups===
  1009. Method 1. : For Sky Broadband IP lookups tell the agent to type the IP Address in superman.
  1010. =================================================================================
  1011. ====Law Enforcement Impersonation (Subpeona Method)====
  1012. The second way to ISP dox someone is to fake a cop or federal agency of law enforcement to gather information attached to an IP Address.This method is notoriously used by the blackhat hacker killerpop89 before he got owned by cosmo and the rest of ugnazi.Unlike
  1013. employee impersonation this method is a wee bit harder but it is possible.First you want to find the subpoeona compliance line or similiar law enforcement helpline which I will provide all the contact information below for all the common ISP's.Sometimes if you can't social engineer the legal department fully they may keep asking you to send in a subpeona which you can photoshop a legit looking one and to send it in you can use a service like efax (efax.com).After all that is done you should get the information sent to you over phone or over email.
  1014. TL;DR:
  1015. 1) Draft up a fake subpoena for the IP adress you're targeting
  1016. 2) send the subpoena into the ISP for the IP adress
  1017. 3) call legal department after hours, you will be transferred to general support
  1018. 4) tell general support you're calling RE: subpoena and tell them you need the information ASAP.
  1019. 5) They will happily disclose anything you want to know regarding the account
  1020. =================================================================================
  1021. Paypal
  1022. ====Tools====
  1023. - Compass
  1024. - Admin
  1025. =================================================================================
  1026. BellAliant
  1027. ====Tools====
  1028. - Singleview
  1029. - CSM
  1030. - INTERNET
  1031. - WEBCARE
  1032. - Infernet
  1033. Number: (888)214-7896
  1034. =================================================================================
  1035. Verizon DSL
  1036. ====Tools====
  1037. - Focus Net, STB - Search Billing, DSL Broadband, Customer Name, ZIP Code, Cirucit ID
  1038. - SSP360, Order Number, Billing Telephone, Account Number, Billing Account
  1039. - VDI Express, Telephone, Email ID
  1040. - Coffee,
  1041. -
  1042. =================================================================================
  1043. Verizon:
  1044. Z117601 -DAVID
  1045. Z411609 - Shawn
  1046. z614519 -John
  1047. Z613346 - DAVID
  1048. z250348 -Jim
  1049. v781z84 -(Vcode) -Tyler
  1050. z592009 -Chantelle
  1051. =================================================================================
  1052. Comcast:
  1053. 51812 -Travis
  1054. 4278 Roel
  1055. =================================================================================
  1056. Time Warner Cable:
  1057. EID - V454172 Ryan
  1058. Forge Pre-typed Method (TWC):
  1059. -----------------------------------------
  1060. Goodevening my name is Gabe and I'm from Timewarner Technical Support in
  1061. Raeleigh currently the client im talking with via live chat is having issues
  1062. accessing their account and the systems here in Raeleigh are down due to a storm
  1063. would you mind assisting me in pleasing this client in the most professional way
  1064. possible?
  1065. Use this if you use this method:
  1066. ***NOTE: DO NOT GIVE OUT YOUR EMPLOYEE ID UNLESS YOU ARE QUESTIONED IF THEY GET SUSPICIOUS HANG UP AND RECALL***
  1067. Employee Name: Gabe
  1068. EID: E12136
  1069. =================================================================================
  1070. Charter Communications
  1071. Chase-L3L
  1072. =================================================================================
  1073. Sasktel:
  1074. Portal:
  1075. Simon:
  1076. Customer Centre:
  1077. Martins:
  1078. =================================================================================
  1079. att:
  1080. JM038W -Jay
  1081. Account Look-up Tools, Support Lines, and Sites:
  1082. AT&T - http://www.att.com/
  1083. U-verse Support: 1-800-288-2020
  1084. Employee IDs - md905c
  1085. • Systems: G2, CCTP, SystemX, Clarify, Telegence, MyCSP, Phoenix, Torch, CSR Admin, CTI, Agent Verification System, CCC Tool, DLC, C-Care
  1086. Sky - http://www.sky.com/
  1087. Sky Tech Sppport: 0-844-241-1653
  1088. • Systems: Cloud
  1089. Cox - http://ww2.cox.com/residential/home.cox
  1090. Cox Support: 877-891-2899
  1091. • Systems: Polaris (IP), iNav, edgehealth, Icon, IDM, ICOMS, SL2
  1092. Charter - https://www.charter.com/?
  1093. Charter Support: 713-554-3669
  1094. • Systems: Sigma, IRIS
  1095. Comcast - http://www.comcast.com/
  1096. Comcast Support: 1-800-934-6489
  1097. • Systems: ACSR, Comtrac, CSG, Einstein, Grand-slam, Vision
  1098. Time Warner - http://www.timewarnercable.com/
  1099. Time Warner Support - 212-364-8300
  1100. • Systems: Real, Unify
  1101. Road Runner - http://www.rr.com/
  1102. Road Runner Support: 1-866-744-1678
  1103. • Systems: Real, Unify
  1104. Verizon - http://www.verizonwireless.com/
  1105. Verizon Support: 1-800-837-4966
  1106. • Systems: Coffee
  1107. Items that are capable for look up:
  1108. Name on file:
  1109. DOB on file:
  1110. SSN on file:
  1111. Phone on file:
  1112. Address on file:
  1113. ISP Account #:
  1114. Primary Account Email:
  1115. Credit Card on File:
  1116. -------------------------------------------------------------------------------------------------------------------------
  1117. Mega List (2) (Mainly Public methods in this one):
  1118. ---------------------------------------------------
  1119. Cox
  1120. Name: Shamari Jones
  1121. Employee ID: EY1347
  1122. Windstream
  1123. Name: Josh
  1124. Employee ID: n998488
  1125. Mediacom
  1126. Systems:
  1127. MTA \\ MTA can lookup the account via IP address.
  1128. Mistro \\ Other
  1129. Servicer \\ Other
  1130. Remedy \\ Other
  1131. Goodevening my name is Jonah and I'm from Cox Customer Support in
  1132. Akron currently the client im talking with via live chat is having issues
  1133. accessing their account and the systems here in Raeleigh are down due to a storm
  1134. would you mind assisting me in helping this client get the best service possible?
  1135. -----------------------------------------
  1136. AT&T
  1137. Phone Number: 1 (800) 288-2020
  1138. Systems: CCTP, G2, CARE, Telegence, Clarify, Phoenix, OMS, CRM, Enabler, OPUS, POSII, Compass, Ordertrack, myCSP, NBI, Ensemble, Xacct, PTT
  1139. Yahoo
  1140. Live Chat: https://io.help.yahoo.com/contact/index?...=PROD_ACCT
  1141. Systems: AMD, Star
  1142. Cox
  1143. Phone Number: 1 (800) 229-6542
  1144. Live Chat: https://www.cox.com/support/emailchat/chatusenglish.asp
  1145. Systems: SL2, iComs, iNav, Edgehealth, Remedy, Quikway, Tivia
  1146. Charter
  1147. Phone Number: 1 (888) 438-2427
  1148. Live Chat: http://www.myaccount.charter.com/Visitors/chatlive.aspx
  1149. Systems: Sigma, IRIS
  1150. Comcast
  1151. Phone Number: 1 (800) COMCAST
  1152. Live Chat: https://www.comcastsupport.com/chatentry/
  1153. Systems: ACSR, Comtrac, CSG, Einstien, Grandslam (No longer used by comcast; Main tool is Einstein now.), Vision (NOTE: Only Grandslam (No longer used by comcast; Main tool is Einstein now.) can do IP address lookups.)
  1154. Employee Name: Gilbert
  1155. Employee ID: 100-499-892
  1156. Employee Region: Boston
  1157. Employee SV: Anthony
  1158. Netflix
  1159. Phone Number: 1 (866) 579-7172
  1160. Live Chat: https://help.netflix.com/help#startChat
  1161. Systems: Obiwan
  1162. Sprint
  1163. Phone Number: 1 (866) 866-7509
  1164. Systems: CICS, DB2, MQ, ADABASE, REXX, VSAM
  1165. Time Warner / Road Runner
  1166. Username Retrieval: https://urt.rr.com/
  1167. Password Reset: http://pt.rr.com/
  1168. IP Management Tool: https://ipmt.rr.com/ipmt/login.jsp
  1169. Phone Number: 1 (855) 800-1925
  1170. Live Chat: http://www.timewarnercable.com/en/reside...ct-us.html
  1171. Systems: Real, Unified, AAD, ACSR, ATG Tools, iComs, DOCSIS. (DOCSIS, Unified, and Real do IP lookups)
  1172. Name: Darryl Estes
  1173. EID: E12145
  1174. Location: TW-Raleigh in Raleigh, NC
  1175. Verizon
  1176. Login: https://www22.verizon.com/cofee/content/...2Fcofee%2F
  1177. Phone Number: 1 (800) 837-4966
  1178. Live Chat: http://www.verizon.com/Support/Residenti.../index.htm
  1179. Systems: Cofee, Legend, DTI Express, iView, iGO, CPE Manager, Marval, Telegence
  1180. LCT Home Office:
  1181. Name: Brett
  1182. Location: Redmond, WA
  1183. OSID: gfa*667
  1184. Shaw:
  1185. Systems: TOGAF
  1186. Rogers:
  1187. Systems: ICM and STI
  1188. Bell:
  1189. Systems: Maxplus, CSM 1 Bill, Singleview (Singleview does IPs)
  1190. Name: Vipin
  1191. Employee ID: 604084
  1192. Name: Shamari
  1193. Employee ID: EY17429
  1194. T-Mobile:
  1195. Systems: QuickView, Remedy, SAMSON, NCI, T-COMMUNINITY, IHLR
  1196. Opt Online:
  1197. Systems: TDA
  1198. PenTeleData:
  1199. Login: http://www2.engr.ptd.net/
  1200. Login: http://server4.engr.ptd.net/login/login.cgi
  1201. Webmail: https://promail.ptd.net/
  1202. Usernames: admin
  1203. System: Smart System
  1204. Name: Joann
  1205. CFR: CSR2 (Employee ID)
  1206. Position: Supervisor 2 PenTeleData, Corporate Office
  1207. Paypal:
  1208. Systems: Compass & Admin
  1209. Fido / Micro-Cell
  1210. Systems: ICM - Looks up the account information, Citrix - log into the account
  1211. CenturyLink:
  1212. Systems: Ensemble
  1213. Frontier:
  1214. Systems: JWalk and iNet
  1215. Blue Ridge:
  1216. Systems: iComs
  1217. Cogent:
  1218. Systems: SSRS and Remedy Ticketing System
  1219. -------------------------------------------------------------------------------------------------
  1220. Comcast
  1221. Hello my name is Andrew and I'm from the Comcast Customer Support in
  1222. (VICTIMS AREA) and i cant access the clients information my
  1223. Grandslam (No longer used by comcast; Main tool is Einstein now.) cannot connect and im recieving errors. Will you please look up
  1224. the information on the client for me?
  1225. -----------------------------------

comments powered by Disqus