The Facts About Wingates

- by NiDgiD


Intro:

I was introduced to wingates a short time ago and have come to like them. Good proxies, socks, and firewalls are often hard to come by, where wingates you can find several in a short amount of time.


1. What a wingate is
2. How to use a wingate
3. How to find wingates
4. How to make sure your wingate is "hiding" your IP


1. What a wingate is

A wingate is a windows-based computer that can be used as a gateway to other computers. They are good for spoofing (hiding) your IP address for HTTP, IRC, telnet sessions, etc. Whether you are a hacker or someone who just values his privacy, wingates are a good way to go.


2. How to use a wingate

For HTTP:
- In Netscape 4.x go: Edit/Preferences/Advanced/Proxies/Manual Proxy Configuration/View, insert the wingate's IP and set the port to 80.
- In Internet Exploiter 4.x go: View/Internet Options/Connection/Access the Internet using a proxy server, insert the wingate's IP and set the port to 80.

For IRC:
I don't know about Wingate 2.0, but I installed 3.0 a while back and it has gateways for everything from FTP to Socks (IRC), Telnet, Cache- you name it. So if your Wingate is version 3.0 (maybe lower versions too), then in your IRC client look for proxy or sock server settings and input the wingate's IP with the port set to 1080. If you're using a more popular IRC server (e.g.: Dalnet) they usually ban wingates and sock servers so when you find one, hang on to it because it may or may not last that long.

For telnet sessions:
In this example, 200.13.19.78 is my wingate and 255.255.255.255 is my victom's IP.

bash$ telnet 200.13.19.78
Trying 200.13.19.78...
Connected to 200.13.19.78.
Escape character is '^]'.
WinGate>255.255.255.255
Connecting to host 255.255.255.255...Connected
 
 
Digital UNIX (something.something.de) (ttyp1)
 
Login incorrect
login: ubruege
Password:
Last login: Tue Sep 15 09:49:47 from something.something.de
 
Digital UNIX V4.0B  (Rev. 564); Wed Dec 10 16:41:30 MET 1997
 
****************************************************************************
 
On Wed Dec 10 16:33:52 MET 1997 your system was successfully updated from:
 
   Digital UNIX V4.0A  [Rev. 464]; Tue Mar 25 15:55:50 MET 1997


%
And so there you see that I logged in through the wingate.


3. How to find wingates

I do most of my scanning for wingates from my Windows computer and most of everything else from my Linux box. The wingate scanner I use is called wGateScan v2.2. You can get it at http://web.avo.fr/pixel/progs where it's homepage is located. To find wingate IP addresses, i usually go into IRC and do a /dns on everyone's nicks then scan them one by one. You usually wont get results scanning popular companies web sites.


4. How to make sure your wingate is "hiding" your IP

For HTTP:
Once you think you have the wingate set up right in your browser, go to one of those pages that log your IP address.
www.rootshell.org is one.. just type something in the search box and press enter and the next page shows you the IP it thinks you are using. Packet Storm Security is another.

For telnet sessions:
Once you are logged on to the machine that you have gotten to from the wingate, type: "finger <the username you logged in with>" (assuming you are on a UNIX machine). It should tell you the IP address you are logged in from (which we want it to be the same as the wingate's IP).


This text was composed by NiDgiD