full-disclosure - UnAnonymizer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue Jun 27 09:49:30 2006
From: brate_sanders at yahoo.co.uk (Brate Sanders)
Subject: UnAnonymizer

Is there a security issue hidden somewhere in there or is it just a bug report sent to the wrong mailing list address? :-)

----- Original Message ----
From: Peter Besenbruch <prb@...a.net>
Cc: full-disclosure@...ts.grok.org.uk
Sent: Tuesday, 27 June, 2006 1:42:33 PM
Subject: Re: [Full-disclosure] UnAnonymizer

H D Moore wrote:
> A fun browser toy that depends on Java for complete results:
> - http://metasploit.com/research/misc/decloak/

Fun indeed:

Field            Data        Dependency
External Address:    24.199.198.152    None
Internal Host:        unknown        Java
Internal Address:    unknown        Java
DNS Server (API):    unknown        Java
DNS Server (HTTP):    24.199.198.158    None
External NAT:        unknown        Java

The "External Address" listed belongs to a TOR server hosted on 
RoadRunner. The DNS server is also part of that system. I'm assuming the 
"Internal Host" should have been mine? The "Internal Address" mine, 
also? The "DNS Server (API)" my ISP's? Something isn't working.

Here's another page that tries something similar with Java:
http://gemal.dk/browserspy/ipjava.html

I get similar results to the above. Yes, Java is installed (version 1.5).

-- 
Hawaiian Astronomical Society: http://www.hawastsoc.org
HAS Deepsky Atlas: http://www.hawastsoc.org/deepsky

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060627/474c1f58/attachment-0001.html