deathx01
Registered Member
- Oct 23, 2012
- 97
- 21
So this is to show what I know about fingerprints (computing ) and to help us get a complete view of it. This can help in many ways , specialy for blackhat project 
.
It's shure that i dont know everything , so if you think you can add some relevent information , please do it.
So I'll talk about important things : IP, browser data/computer data, cookies , flash cookies (LSO ) , proxy ( java attack )
Well IP is the obvious one... everybody know that IP need to be change if you want to look like an other computer. In that case you'll need some good proxy. When you are choosing a proxy provider, you should ask for brand new IP that as never been use for your need. You can look if they have been blacklisted ( http://whatismyipaddress.com/blacklist-check ) , if so , maybe you should consider try an other proxy provider. An other thing to look is that javascript is disable on the proxy, if JavaScript is allowed, attacks on web proxies are quite easy: a website may simply override the JavaScript methods that should actually protect the proxy from any attacks, with this attack all website can easly know if you are hidding behind a proxy and know your real ip. You can look on http://www.whatismyip.com/ to know if it detect you are behind a proxy.
Now the browser data. A website can know a lot of informations about your computer :Your ip, your location(city) and your net provider, this will change if you using good proxy.
There's a lot of thing a browser transmit to a website : Cookies, Authentication, Cache (E-Tags), HTTP session, Referer, Signature, User-Agent, SSL_session_id, Language, Content types, Encoding, Do-Not-Track, JavaScript, Plugins, Mime types, Tab name, Tab history, Local storage, Screen Resolution, Browser window, Browser bars, Browser type, System,Fonts. I'll not describe everything in this , but all the info about each of the tracking possibility can be found on http://ip-check.info/description.php .
And one important thing that a lot of people forget , is the LSO ( flash cookies ). We have a thread that was talking about it and how to deactivated them ( http://www.blackhatworld.com/blackhat-seo/black-hat-seo/611826-flash-cookies.html) , you can use firefox Betterprivacy plugins to remove them or just delete them at the source (http://en.wikipedia.org/wiki/Local_shared_object).
So if you are coding a bot or making things manually , you'll have to consider all of these things . When coding a browser-base bot, all element have to be taken into consideration , if you are coding a bot that use mechanize or somme sorth of progammatic browsing , the IP and the User agent are the one to be carefull with.
If you want to test your browser and see what website can see about you : http://ip-check.info and you can download the JonDoFox to help get a bit more anonymous on the web : http://anonymous-proxy-servers.net/en/jondofox.html
If you have any updates or questions, go for it . Thanks
.It's shure that i dont know everything , so if you think you can add some relevent information , please do it.
So I'll talk about important things : IP, browser data/computer data, cookies , flash cookies (LSO ) , proxy ( java attack )
Well IP is the obvious one... everybody know that IP need to be change if you want to look like an other computer. In that case you'll need some good proxy. When you are choosing a proxy provider, you should ask for brand new IP that as never been use for your need. You can look if they have been blacklisted ( http://whatismyipaddress.com/blacklist-check ) , if so , maybe you should consider try an other proxy provider. An other thing to look is that javascript is disable on the proxy, if JavaScript is allowed, attacks on web proxies are quite easy: a website may simply override the JavaScript methods that should actually protect the proxy from any attacks, with this attack all website can easly know if you are hidding behind a proxy and know your real ip. You can look on http://www.whatismyip.com/ to know if it detect you are behind a proxy.
Now the browser data. A website can know a lot of informations about your computer :Your ip, your location(city) and your net provider, this will change if you using good proxy.
There's a lot of thing a browser transmit to a website : Cookies, Authentication, Cache (E-Tags), HTTP session, Referer, Signature, User-Agent, SSL_session_id, Language, Content types, Encoding, Do-Not-Track, JavaScript, Plugins, Mime types, Tab name, Tab history, Local storage, Screen Resolution, Browser window, Browser bars, Browser type, System,Fonts. I'll not describe everything in this , but all the info about each of the tracking possibility can be found on http://ip-check.info/description.php .
And one important thing that a lot of people forget , is the LSO ( flash cookies ). We have a thread that was talking about it and how to deactivated them ( http://www.blackhatworld.com/blackhat-seo/black-hat-seo/611826-flash-cookies.html) , you can use firefox Betterprivacy plugins to remove them or just delete them at the source (http://en.wikipedia.org/wiki/Local_shared_object).
So if you are coding a bot or making things manually , you'll have to consider all of these things . When coding a browser-base bot, all element have to be taken into consideration , if you are coding a bot that use mechanize or somme sorth of progammatic browsing , the IP and the User agent are the one to be carefull with.
If you want to test your browser and see what website can see about you : http://ip-check.info and you can download the JonDoFox to help get a bit more anonymous on the web : http://anonymous-proxy-servers.net/en/jondofox.html
If you have any updates or questions, go for it . Thanks
Last edited:
