full-disclosure - Google Private IP is 10.7.0.73 !!!!!!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: se_cur_ity at hotmail.com (morning_wood)
Subject: Google Private IP is 10.7.0.73 !!!!!!

Messagei kinda discoverd google's use as a proxy simply by doing 
http://translate.google.com/translate?u=http%3A%2F%2Fwhatismyip.com

and is essentally the basis of http://exploit.wox.org/tools/googleproxy.html 


Donnie Werner
Chief Technical Officer
E2 Labs Information Security Pvt. Ltd.

http://e2-labs.com 



  ----- Original Message ----- 
  From: Bojan Zdrnja 
  To: full-disclosure@...ts.netsys.com 
  Sent: Thursday, August 21, 2003 2:19 PM
  Subject: RE: [Full-Disclosure] Google Private IP is 10.7.0.73 !!!!!!


  Excuse my ignorance, but what's the point of this?

  If you read that page, you'll see that they use proxy.google.com, which adds X-Forwarded-For header, so that's how you got internal IP address, but I don't really see any use of this.

  So what, everyone knows they are using *INTERNAL* IPs on their *INTERNAL* network.

  You'll also see that IP changes with time, what is obvious as they probably have a server farm.

  Regards,

  Bojan Zdrnja
    -----Original Message-----
    From: full-disclosure-admin@...ts.netsys.com [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Gaurav Kumar
    Sent: Friday, 22 August 2003 7:11 a.m.
    To: full-disclosure@...ts.netsys.com
    Subject: [Full-Disclosure] Google Private IP is 10.7.0.73 !!!!!!


    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Hello friends!

    I have found private ip address used by google servers. here are the
    details.

    make sure you have google toolbar installed.

    1. go to www.showmyip.com
    2. it will show your ip address.
    3. now right click and select Translate Page
    4. it will now show your ip address in this format 1.2.3.4, unknown
    5. Now again right click and select Translate Page
    6. this time you will get google private ip address. the format is
    10.7.0.73,1.2.3.4,unknown

    This 10.7.0.73 is google private ip address.

    =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
    Gaurav Kumar
    Chief Information Security Analyst

    E2 Labs Information Security Pvt. Ltd.
    Road no. 3 , Banjara Hills
    Hyderbad-34
    AP
    India

    gaurav@...labs.com
    www.e2-labs.com

    PGP public key at-
    http://mycgiserver.com/~ethicalhackers/pgp.txt

    Phone(s)-
    Mobile    +91 40 31068650
    Tele/Fax +91 40 23555942 (ext-24)
    =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

    -----BEGIN PGP SIGNATURE-----
    Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

    iQA/AwUBP0UZKP7pOx+pP+hiEQK3mACdFKQE1ZW8ugMpxgOdjpaMYRayI6UAoOEB
    noQh/WR3ZZz2L2CR0ZxzbNls
    =iryU
    -----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030821/71d8e4cc/attachment.html