Re: [Full-disclosure] UnAnonymizer

[Peter Besenbruch <prb@xxxxxxxx>]

H D Moore wrote:
> A fun browser toy that depends on Java for complete results:
> - http://metasploit.com/research/misc/decloak/

Fun indeed:

Field                   Data            Dependency
External Address:       24.199.198.152  None
Internal Host:          unknown         Java
Internal Address:       unknown         Java
DNS Server (API):       unknown         Java
DNS Server (HTTP):      24.199.198.158  None
External NAT:           unknown         Java

The "External Address" listed belongs to a TOR server hosted on 
RoadRunner. The DNS server is also part of that system. I'm assuming the 
"Internal Host" should have been mine? The "Internal Address" mine, 
also? The "DNS Server (API)" my ISP's? Something isn't working.

Here's another page that tries something similar with Java:
http://gemal.dk/browserspy/ipjava.html

I get similar results to the above. Yes, Java is installed (version 1.5).

--
Hawaiian Astronomical Society: http://www.hawastsoc.org
HAS Deepsky Atlas: http://www.hawastsoc.org/deepsky

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/