full-disclosure - UnAnonymizer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <44A0E871.7010609@lava.net>
Date: Tue Jun 27 09:12:33 2006
From: prb at lava.net (Peter Besenbruch)
Subject: UnAnonymizer

H D Moore wrote:
> A fun browser toy that depends on Java for complete results:
> - http://metasploit.com/research/misc/decloak/

Fun indeed:

Field			Data		Dependency
External Address:	24.199.198.152	None
Internal Host:		unknown		Java
Internal Address:	unknown		Java
DNS Server (API):	unknown		Java
DNS Server (HTTP):	24.199.198.158	None
External NAT:		unknown		Java

The "External Address" listed belongs to a TOR server hosted on 
RoadRunner. The DNS server is also part of that system. I'm assuming the 
"Internal Host" should have been mine? The "Internal Address" mine, 
also? The "DNS Server (API)" my ISP's? Something isn't working.

Here's another page that tries something similar with Java:
http://gemal.dk/browserspy/ipjava.html

I get similar results to the above. Yes, Java is installed (version 1.5).

-- 
Hawaiian Astronomical Society: http://www.hawastsoc.org
HAS Deepsky Atlas: http://www.hawastsoc.org/deepsky