Your Elite Anonymous Proxy is LEAKING YOUR REAL IP TO WEBSITES (in popular browsers)

BloodyNinja

BloodyNinja

Power Member
Joined
Oct 28, 2013
Messages
663
Reaction score
749
Hi guys

In this topic I wanted to share something I wouldn't personally believe, hadn't I performed all testing by myself.

FACT: Firefox and Chrome (may be also other chrome/firefox based browsers) are LEAKING your real IP address to ANY website EVEN BEHIND ANONYMOUS PROXY. In non-modified Chrome it's IMPOSSIBLE to block this leakage.

For those of you who don't like reading, please watch this video:



If you don't believe me, do the following steps and see by yourself:

1. Go to http://whatismyip.com to check you real IP

whatismyip-test-myrealip.png



2. Get a "fully anonymous proxy". I don't care if it is elite, superb, awesome or whatever degree of anonymity it may have. Put this proxy into Firefox or Chrome settings.

2016-03-08_2131.png


3. Go to http://whatismyipaddress.com to make sure you are behind a proxy

2016-03-08_2134.png


4. Now go back to http://whatismyip.com and SEE YOUR ACTUAL IP REVEALED WHILE YOU ARE BEHIND AN ANONYMOUS PROXY

whatismyip-test-myrealip.png



5. To blow your mind completely, go here https://www.browserleaks.com/webrtc and see how not only your real IP is revealed but also LOCAL IP is known to some arbitrary website:




2016-03-08_1828.png




Questions? Ask me anything in this topic.
 
Last edited by a moderator:
Advertise on BHW
Hi,

You are not doing the correct proxies settings, this is why your IP is leaking. Check the field " use this proxy server for all protocols " and you won't have this issue again.

Thanks!
 
unr3al said:
Hi,

You are not doing the correct proxies settings, this is why your IP is leaking. Check the field " use this proxy server for all protocols " and you won't have this issue again.

Thanks!
Click to expand...

Dude, with all respect, did you test it on your own before telling me I did something wrong? I put "use this proxy server for all protocols" as you suggested:

2016-03-09_1151.png


The result is the same, my real ip is leaked (check the whole IP, it doesn't match, just by accident last 2 digits are the same)

2016-03-09_1151_001.png



Because this option tunnels ONLY ftp and ssl requests through http proxy. However, IP is leaking through UDP. It is NOT POSSIBLE to tunnel UDP through http proxy.
 
Last edited:
unr3al said:
Hi,

You are not doing the correct proxies settings, this is why your IP is leaking. Check the field " use this proxy server for all protocols " and you won't have this issue again.

Thanks!
Click to expand...

But I am guessing still our IP is leaked right?
 
abhi007 said:
But I am guessing still our IP is leaked right?
Click to expand...


"Use this proxy server for all protocols" does not prevent your real IP leakage because it leaks through UDP protocol, which can not be tunneled through http proxy.
 
 
 
BloodyNinja said:
Indeed seems these plugins work for Chrome.
Click to expand...

I've been disabling it manually for FF via about:config page, and have Disable webRTC box ticked in uBlock Origin for Chrome.

I'm still not clear, though... since very few people would have it disabled, does doing so provide some kind of signal that you are attempting to hid your identity? If this is used in conjunction with elite proxy, other types of fingerprinting aside, does the disabling itself throw up some kind of flag, or does it just appear like normal (non proxy) user when combined with proxy and webRTC off?

I see that some of the other Chrome plugins say they don't disable it, but rather limit some aspects. Can't tell if this is in part to appear as normal user, or if they are only doing that so that certain other browser features that require webRTC can function. Not clear about the pure anonymity aspects of one approach vs the other. Also, maybe it's just me, but I prefer the approach I'm taking in FF of just disabling it manually via the about:config. Can't confirm this, but my hunch is that this is more secure than using a plugin that may break at some point on browser update.
 
Last edited:
Rocking post OP, thanks for the share and please keep them coming.
 
punkinhead said:
I've been disabling it manually for FF via about:config page, and have Disable webRTC box ticked in uBlock Origin for Chrome.

I'm still not clear, though... since very few people would have it disabled, does doing so provide some kind of signal that you are attempting to hid your identity? If this is used in conjunction with elite proxy, other types of fingerprinting aside, does the disabling itself throw up some kind of flag, or does it just appear like normal (non proxy) user when combined with proxy and webRTC off?

I see that some of the other Chrome plugins say they don't disable it, but rather limit some aspects. Can't tell if this is in part to appear as normal user, or if they are only doing that so that certain other browser features that require webRTC can function. Not clear about the pure anonymity aspects of one approach vs the other. Also, maybe it's just me, but I prefer the approach I'm taking in FF of just disabling it manually via the about:config. Can't confirm this, but my hunch is that this is more secure than using a plugin that may break at some point on browser update.
Click to expand...

- Yes it does look suspicious if your browser is supposed to have WebRTC and it's disabled (don't have any stats on that but only a fraction of the people using proxy or VPN are doing so very it, so it's extremely small), but unless we are talking about companies that deal with serious fraud (banks, paypal, etc...) they won't really care about it, so if the question is will they ban my FB account because of that? the answer is no.

- Chrome simply do not want people to completely disable WebRTC, so people found other way to 'bypass' this block.

- Now for the debate is it better to use a browser extension or change settings manually, it's always better to use as little extension as possible.
 
Des_cartes said:
- Now for the debate is it better to use a browser extension or change settings manually, it's always better to use as little extension as possible.
Click to expand...

Definitely, changing the settings manually, as the the extensions can leak additional fingerprints. As OP suggested, MultiLoginApp does the trick in hiding WEBRTC without additional fingerprints being displayed to the website. I use it myself, a nifty tool.
 
Obviously use all Protocols and make sure not using Public IP use Fully Anonymous Proxy is good to go.
 
extremeboy said:
Obviously use all Protocols and make sure not using Public IP use Fully Anonymous Proxy is good to go.
Click to expand...

Even Fully Anonymous Elite Proxy will leak your Public Ip with WebRtc. Furthermore, even socks 4/5 proxies will work in only few instances.
 
Thanks for writing about this.
For all the people who're worried about their software & bots; as long as your software/bot uses the HTTP protocol and not a web browser (with Javascript enabled) then your IP cannot be revealed, unless it's a bad/transparent proxy.

Cheers!
Healzer
 
healzer said:
Thanks for writing about this.
For all the people who're worried about their software & bots; as long as your software/bot uses the HTTP protocol and not a web browser (with Javascript enabled) then your IP cannot be revealed, unless it's a bad/transparent proxy.

Cheers!
Healzer
Click to expand...

indeed you are very right, what do you see in the above video has nothing to with WebRTC, its all about flash, java and javascript.
place the proxy in windows control panel under java cpanel will proxify the java connections, using a software like proxifier or proxycap in order to avoid any leaks and so on.
avoid using g chrome cause there is no valid way that you can disable webrtc, use firefox with a plugin that will disable webrtc.
regarding pinbot software there is nothing to be worried about, there are simple http/https connections with headers without user interaction or browser plugins javascript or flash
 
Use a VPN and problem solved. If the anonymity is your concern you must avoid the use of proxies.

Now days the VPN servicies are very cheap and is so easy mount a vpn server.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top