BEWARE - Proxy Detector Script - used by several sites

is your flash or java ip address result is same with your proxy address you use after test with the site?
coz if not using tunneling and use software like proxifier your real ip address still detected by flash or java detector
 
Last edited:
Advertise on BHW
After some digging, I learned that some sites with proxy detection scripts use ActionScript Flash script (used for Flash based ad images) that will read PC network interface details (MAC address, IP address, etc.).

Here's the Flash based script link - that will raise your eyebrows:

Code: 
http://help.adobe.com/en_US/FlashPlatform/beta/reference/actionscript/3/flash/net/InterfaceAddress.html
You can disallow flash cookies here:
Code: 
[/URL][URL]http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager03.html[/URL]

View and remove your current cookies here:
[URL="http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html"]
Code: 
[/URL][URL]http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html[/URL]

As for Java (not Javascript), yes, the site with Java applet will read PC network interface details.

See the code examples here:

Code: 
http://www.javacodez.com/forums/how-get-mac-ip-address-using-java-t-92.html
 
portalweb said:
After some digging, I learned that some sites with proxy detection scripts use ActionScript Flash script (used for Flash based ad images) that will read PC network interface details (MAC address, IP address, etc.).

Here's the Flash based script link - that will raise your eyebrows:

Code: 
http://help.adobe.com/en_US/FlashPlatform/beta/reference/actionscript/3/flash/net/InterfaceAddress.html
You can disallow flash cookies here:
Code: 
[URL]http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager03.html[/URL]
View and remove your current cookies here:
Code: 
[URL]http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html[/URL]
As for Java (not Javascript), yes, the site with Java applet will read PC network interface details.

See the code examples here:

Code: 
http://www.javacodez.com/forums/how-get-mac-ip-address-using-java-t-92.html
Click to expand...



disabling flash would seem like an easy work around for this?
 
Yes they might have access to Public proxies which always follow a similiar pattern of ports but Private proxies which comes with Security are safe i guess contact me if u need any lol
 
Does anyone think tha Firefox add-on No Script will help in these types of situations?
 
Yes ofcourse, but what when sites tell you that you must enable Javascript for instance? (cause NoScript can also block Flash & Java, which isnt required so often as JS)

So - id better stick to good VPN/proxy.
 
What I'm saying is that - they can look at your PC to find the real IP address, along with the proxy IP address.

For demonstration purpose, I will write the simple proxy detection script, with the ActionScript Flash/Java widgets and put it on the test site to give us the idea how they would look at PC's connection to Internet. I will post my findings in one week.
 
portalweb said:
What I'm saying is that - they can look at your PC to find the real IP address, along with the proxy IP address.

For demonstration purpose, I will write the simple proxy detection script, with the ActionScript Flash/Java widgets and put it on the test site to give us the idea how they would look at PC's connection to Internet. I will post my findings in one week.
Click to expand...
waiting for you mate :)

i hope u can finish soon :)

regards
 
portalweb said:
What I'm saying is that - they can look at your PC to find the real IP address, along with the proxy IP address.

For demonstration purpose, I will write the simple proxy detection script, with the ActionScript Flash/Java widgets and put it on the test site to give us the idea how they would look at PC's connection to Internet. I will post my findings in one week.
Click to expand...

This would be interesting to see, will you post the script for us?
 
The proxy detection test site access will be free to anyone, as the test page will be on my site, using SSI to handle the backend scripts. Giving it away for free will not do good, as I believe that there are variables that need to be updated. My large site has the geoIP database server that will provide the worldwide IP information to the proxy detection test script. If you want to see my large site, PM me.

Until then - stay tuned.

PW
 
Status: 75% complete. It's bit complicated to develop the server-side scripts to deal with the access to user's PC via web browser. I believe we will have the test site ready for our testing.

Until then, stay tuned.
 
perhaps it detects transparent proxies, anonymous proxies shud be safe
 
goawayplease said:
Port, Hostname, IP Location, Headers, and User-Agent are all easy ways to check for proxy use, with Headers being the easiest and most common.

A "high-anonymity" proxy is just one that doesn't send the X-Forwarded-For or other Proxy headers.
Click to expand...

How can we check to see if our proxies are sending this info? I certainly don't want to pay for proxies that are just going to reveal who I am - what the hell would be the point in using a proxy at all then? It would add absolutely no anonymity and would only slow your connection, as going through a proxy is almost always (maybe even always) going to be slower than just connecting direct, right?

MarketerMac said:
disabling flash would seem like an easy work around for this?
Click to expand...
It would seem the work around would include disabling flash AND java, no?
 
Last edited:
dirtyc said:
How can we check to see if our proxies are sending this info? I certainly don't want to pay for proxies that are just going to reveal who I am - what the hell would be the point in using a proxy at all then? It would add absolutely no anonymity and would only slow your connection, as going through a proxy is almost always (maybe even always) going to be slower than just connecting direct, right?
Click to expand...
That is what the proxy detection script I'm working on right now, which will reveal everything (hopefully).

dirtyc said:
It would seem the work around would include disabling flash AND java, no?
Click to expand...
Yes...that is the possible avenue. It means you can't watch Flash based video clip without enabling Flash. Decisions, decisions. :D

Until then, stay tuned.
 
You what else would be super tight (maybe this goes beyond the proxy checking thing) but if your tool would tell a user whether a website was trying to download flash cookies or java applets to your computer. Since that's part of the whole "tracking/privacy" landscape, I think it would be super relevant, don't you?
 
The tool will see if the browser is using the java, javascript, etc.

Here's the "ALPHA VERSION" proxy detection script, which read the "browser" settings as listed here:

Frames enabled
IFrames enabled
Tables enabled
Cookies enabled
Java applets enabled
Javascript enabled
Support CSS enabled
CSS version 3
Alpha -
Beta -
VBscript enabled
Flash enabled

In few days, the network interface readout java applet will be added, as well as the network interface readout Flash actionscript too. These are the difficult parts - but it will be there. What's nice about this script is that it will work with any operating systems.

Until then, please stay tuned.
 
just wondering, back in the day we just had a script that would look for all the normal proxy ports if 8080 was open or 3128 and so on it would ban the ip.

dont really know why they still dont do that, you cant hide standard proxy ports. and unless your running the proxy you cant really change the port either.

my 2c'z
 
lost_tribe said:
just wondering, back in the day we just had a script that would look for all the normal proxy ports if 8080 was open or 3128 and so on it would ban the ip.
Click to expand...

This might be an incredibly stupid question - but why does a proxy have to listen on port 8080? BTW - do you think the process you describe is common practice? That as soon as a webserver receives an HTTP GET request, it attempts to connect to the machine requesting it on port 8080?
 
websicosys said:
Depending on the configuration of the proxy, it may actually be sending your IP address without your knowledge.

Some configurations of proxy servers inject a header called "X-Forwarded By: [Your IP]".

I suspect that the "proxy detector" is searching for that header as well as a database of known proxies.

Edit: Nevermind, I'm wrong.
Click to expand...

What do you mean you're wrong? I did some research on the net and that appears to be exactly how it works. See this site: Proxy Anonymity Test. Most proxies are configured by default to use X-Forwarded By and other similar headers. So when you say it *may* be sending your info, I think you really mean it *is* sending your info until configured otherwise.
 
Last edited:
Time
zone

America/Los_Angeles GMT-0800
local Wed Jan 27 2010 02:34 :55 GMT-0800 (PST)
system
Wed Jan 27 2010 03: 35:06 GMT-0700 (Mountain Standard Time)

Mismatch


Oh man....



-BH3M

:wink1:
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top