Hide IP from flash?

M

momschips

Registered Member
Joined
Sep 9, 2010
Messages
58
Reaction score
8
Hello
as far as i know i cant hide my original IP in a flash app, i would like to know a solution to hide my orihinal IP in flash with this constrains:


  • I want to run this flash app or flash content in 2 different browsers
  • 1 with my original IP
  • 2nd one with another Hided IP
a solution i had is a virtual dedicated server but its too costly, that way i can open this flash with 2 different IPs without being noticed
any other solution? is there desktop remote VPNs?
another solution?
 
Advertise on BHW
You can run two different browsers, for example IE and Firefox and set a proxy in Firefox. In that case you will achive what you intend to.
 
flash detects your original IP, doesnt hide it with a proxy,

ill buy virtual dedicated servers, any cheapper solution for that?
 
They can detect your real IP address via ActionScript (Flash).
Please see the articles discussed here on BHW: here and here.
 
I don't know where you guys get you information. Do you actually check stuff? What kind of fact checking is that?

Code: 
http://www.actionscript.org/forums/showthread.php3?t=161662

Flash cannot detect client's ip real address. If that was so, then all my work would fail momentairly. But Flash can deposit Flash cookies, which can contain information about ip address included from server side script, and you can get discovered if your proxy sends typical proxy headers in request.

One more thing: Recently I had to code my own proxy checker for one project. I dunno and don't care how other proxy checker work, but my was checking proxies by using them to check

Code: 
http://checkip.dyndns.org

site (it tells you what is your ip). What I discovered is that large number of proxies shared here and on other forums actually do nothing to proxify your requests, they just let them through, and that site can see your real ip address. Dunno if it will help you, but have that in mind too.

p.s. If someone knows how can Flash detect your real IP address, then share your code, don't just talk!
 
I actually thought that it will work. I doubt my self for a moment, and of course, I am right again (check attach).

When you will people understand that some of you are using shit tools to check your proxies and therefore end up with shit results.

portalweb said:
Please visit this site:

http://analyzemy.net

Click on "Flash" tab - it will see your real PC IP address, even with proxy IP address.
Click to expand...
 

Attachments

  • proxy.jpg
    proxy.jpg
    55.3 KB · Views: 47
minute80 said:
I actually thought that it will work. I doubt my self for a moment, and of course, I am right again (check attach).

When you will people understand that some of you are using shit tools to check your proxies and therefore end up with shit results.
Click to expand...

Do you have any proxy client running in your system?
Notes:
- This proxy checker tool is considered as an experimental stuff. It is not perfect - because certain computers can display the real IP address by reading from network properties directly. It has been mentioned in my earlier posts here.
- I tested your proxy IP : port using http://checkip.dyndns.org/ - which it blocks the proxy connections from my PC. I looked at the output result (using my real IP), which indicates that this service uses server-side php scripts. This is what I'm looking for - to help on improving the proxy tester scripts for AnalyzeMy.net site.
UPDATED:
- I learned recently that the latest Flash actionscript (CS4+) no longer support direct outgoing connections to determine the real computer IP address. Other than the minor "flash" issue, everything else in AnalyzeMy.Net is working pretty good due to the depth details of user's computer/browser type. We will re-visit the flash issue when we have a chance.
 
Last edited:
I don't understand the question about proxy client. I found a proxy on one of the sites that provide lists, I put it into my proxy checker to weed out the list from bad proxies and used the result to access your site.

checkip.dyndns.org is a subdomain of a well known provider of dynamic dns. The actual url is used by numerous script to get clients real ip adress in order to update that information for dyndns' service.

There is no Flash ActionScript CS4, there is only ActionScript 1,2,3 and numerous Flash clients. You said in the post above that your flash app can detect proxy IP. I just showed you that it can't, and if did it was only because proxy you were using didn't actually do any proxy functions.
Maybe there were some exploits that enabled you to get real ip, but exploits are patched.

THe other information you retrieved from the Flash app is not something I or anyone cares on hiding, and therefore is not a discovery.

Bottom line: If you are using functioning, working proxy, Flash cannot detect your real ip. Period. No more panic. If it could, than my account on websites that use Flash cookies would not last as long as they are.

portalweb said:
Do you have any proxy client running in your system?
Notes:
- This proxy checker tool is considered as an experimental stuff. It is not perfect - because certain computers can display the real IP address by reading from network properties directly. It has been mentioned in my earlier posts here.
- I tested your proxy IP : port using http://checkip.dyndns.org/ - which it blocks the proxy connections from my PC. I looked at the output result (using my real IP), which indicates that this service uses server-side php scripts. This is what I'm looking for - to help on improving the proxy tester scripts for AnalyzeMy.net site.
UPDATED:
- I learned recently that the latest Flash actionscript (CS4+) no longer support direct outgoing connections to determine the real computer IP address. Other than the minor "flash" issue, everything else in AnalyzeMy.Net is working pretty good due to the depth details of user's computer/browser type. We will re-visit the flash issue when we have a chance.
Click to expand...
 
Try this, seems to be working for me. I'm running 12 proxies

HTML: 
hxxps://addons.mozilla.org/en-US/firefox/addon/6623/


momschips said:
Hello
as far as i know i cant hide my original IP in a flash app, i would like to know a solution to hide my orihinal IP in flash with this constrains:


  • I want to run this flash app or flash content in 2 different browsers
  • 1 with my original IP
  • 2nd one with another Hided IP
a solution i had is a virtual dedicated server but its too costly, that way i can open this flash with 2 different IPs without being noticed
any other solution? is there desktop remote VPNs?
another solution?
Click to expand...
 
Does it depend on what kind of proxy / VPN / etc you are using.
I have heard about Flash detecting your IP but haven't tested it yet - the guys in this thread saying Flash does / does not detect your real IP, what kind of proxy are you using?

Maybe that will narrow things down :)
 
minute80 said:
There is no Flash ActionScript CS4, there is only ActionScript 1,2,3 and numerous Flash clients. You said in the post above that your flash app can detect proxy IP. I just showed you that it can't, and if did it was only because proxy you were using didn't actually do any proxy functions.
Maybe there were some exploits that enabled you to get real ip, but exploits are patched.

THe other information you retrieved from the Flash app is not something I or anyone cares on hiding, and therefore is not a discovery.

Bottom line: If you are using functioning, working proxy, Flash cannot detect your real ip. Period. No more panic. If it could, than my account on websites that use Flash cookies would not last as long as they are.
Click to expand...

I am surprised by the new Flash updates that fixed the real address lookup exploit. We will look into it.

As for the tool for managing the proxies via Firefox, we will be releasing the proxy tool plugin for FF in 1-2 days. It is mentioned in my sales thread.

Thanks for bringing up this matter. :)
 
No problemo mate. Just trying to bring some Fear, Uncertainty, Doubt down by stating some facts. Good luck with updates!

portalweb said:
I am surprised by the new Flash updates that fixed the real address lookup exploit. We will look into it.

As for the tool for managing the proxies via Firefox, we will be releasing the proxy tool plugin for FF in 1-2 days. It is mentioned in my sales thread.

Thanks for bringing up this matter. :)
Click to expand...
 
What kind of VPN you use is not important, since by default VPN by its definition should route all your network traffic through VPN ip. In other words, it functions like forces sockes proxy (+ encryption of course).
I expect that you pay for your VPN, since I highly doubt that free VPN services are created with good intentions: I really doubt (I am not stating this, just doubting) that they collect your passwords and stuff.

Regarding proxy I used in one of the examples above, I use normal anonymous proxy (not socks), but the trick was that I used my own tool for checking the functionallity of that proxy and because of that it worked.

fatboy said:
Does it depend on what kind of proxy / VPN / etc you are using.
I have heard about Flash detecting your IP but haven't tested it yet - the guys in this thread saying Flash does / does not detect your real IP, what kind of proxy are you using?

Maybe that will narrow things down :)
Click to expand...
 
actually minute80, i think the flash ip test you linked to just didn't work. i've tested with another one and it was able to read my real ip.

well i cant post the link heh. it says i havent been a member long enough. IVE BEEN ONE FOR 2 YEARS lol. when can I post a link?

HERE IS ANOTHER link, it's shorter so i can post it decloak dot net
 
Hm, I don't actually understand your point, but:

1) If you say that site doesn't work - it is not my site.
2) If you say that proxy doesn't work - do you really expect that proxy shared on a public forum would last for days?

Anyways, you can always share a link by writing

link dot com

force66 said:
actually minute80, i think the flash ip test you linked to just didn't work. i've tested with another one and it was able to read my real ip.

well i cant post the link heh. it says i havent been a member long enough. IVE BEEN ONE FOR 2 YEARS lol. when can I post a link?

HERE IS ANOTHER link, it's shorter so i can post it decloak dot net
Click to expand...
 
actually minute80, i think the flash ip test you linked to just didn't work. i've tested with another one and it was able to read my real ip.

well i cant post the link heh. it says i havent been a member long enough. IVE BEEN ONE FOR 2 YEARS lol. when can I post a link?

flash-db dot com/remoting/?serviceID=12&category=Location/Geography
 
Last edited:
As I said site was not mine, so I don't care if it works or not.

I will check this other test later, I don't have time right now. Will post results here.

Nah, I won't check it later...you see in the meantime, I went to the site and they actually publish code they use for retrieving your IP address, PHP script and Flash applet.

Now, Flash applet is retrieving address from PHP script, which receives information from header requests. This part of code:

Code: 
        } else if (getenv("HTTP_X_FORWARDED_FOR")) {
        
            $ip = getenv("HTTP_X_FORWARDED_FOR");
            
        } else if(getenv("REMOTE_ADDR")) {
        
            $ip = getenv("REMOTE_ADDR");

which actually discovered your ip address, targets headers which are not sent by truly anonymous proxies.

So, your test doesn't work, as you used useless proxy.

force66 said:
actually minute80, i think the flash ip test you linked to just didn't work. i've tested with another one and it was able to read my real ip.

well i cant post the link heh. it says i havent been a member long enough. IVE BEEN ONE FOR 2 YEARS lol. when can I post a link?

flash-db dot com/remoting/?serviceID=12&category=Location/Geography
Click to expand...
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top