Need to defeat browser/device fingerprinting

J

johnnymalik

Newbie
Joined
Mar 15, 2016
Messages
6
Reaction score
0
Like the title says...I have read up a bit about how this type of identification works, it appears quite hard to fool. I take surveys on a certain website and even though I change my IP address, the website can still identify me. How do I beat this?
 
Advertise on BHW
Yup. Clear cookies, flash cookies, use a addon for firefox to spoof the user agent to look like everything from playstation to chrome...and no luck. Also tried using different proxies, no success. The survey doesn't require payment info, its for a customer satisfaction site. Yes, lame, so go ahead and judge me ;)
 
The survey doesn't go by email. I'd post the address but it gets blocked by the auto-mod software. I thought that by using a proxy that anything with IP or MAC address would be filtered out? There is definitely a way that the company is filtering surveys by some sort of device and browser fingerprinting.
 
Depends really on the kind of proxy and program you use. They could also blacklist your DNS, if you dont resolve hostnames through the proxy.

Assuming it is not the texts you are trying to post, I would recommend trying it in a VM (virtual machine) with a VPN and proxy (different subnet) after it. The proxy IP should also not be blacklisted (use mxtoolbox to check)
 
I've tried once to download a VM and do the whole proxy bit, but it somehow still recognized me. Is there any kind of program out there which would spoof a device/browser fingerprint out there for free or cheap? I've seen a couple of programs out there but they were exorbitantly expensive.
 
Use this to make sure the IP is not leaking >> https://whoer.net/ (make sure to use the extended test and to click on the run button).
WebRTC must be disabled, the timezone of the machine and ip must be the same, the IP should be residential, etc...


And for fuck's sake stop telling people to spoof their MAC address!
 
I tested a couple of the proxies that I have used, and IP address does not appear to leak thru. I know that a couple of the places involved in the fingerprinting or tracking are Browserhawk and New Relic, if that's good for anything. I figured that out when I dissected the traffic coming in from the survey site and then looked the people up. Thanks for the IP tool, I will use this again in the future.
 
BTW I have already tried to disable JavaScript, but doing so automatically blocks you from even taking the survey
 
johnnymalik said:
BTW I have already tried to disable JavaScript, but doing so automatically blocks you from even taking the survey
Click to expand...

If you want a real solution to avoid defeat most fingerprinting securities you should search for AntiDetect (you should be able to find a cracked version) and FraudFox (only available on the DarkNet but easy to find, at ~$100/month), both are software made especially for that.
 
Des_cartes said:
If you want a real solution to avoid defeat most fingerprinting securities you should search for AntiDetect (you should be able to find a cracked version) and FraudFox (only available on the DarkNet but easy to find, at ~$100/month), both are software made especially for that.
Click to expand...
Really no need for that. A VM, a VPN, Proxifier (using non blacklisted residential dynamic! Socks5 or SSH socks5 proxy after the VPN and resolving hostnames through proxy!), UserAgent Switcher for Firefox, deleting cookies (CCleaner), deactivate Java (not javascript), deactivating WebRTC, maybe using Perfect Privacy VPN Manager (together with their VPN service), should cover everything.
and here the direct link: http://whoer.net/ext
blacklist check: http://mxtoolbox.com/blacklists.aspx
 
Has anyone figured out a way to remain undetected with WebRTC and Flash/Java enabled?
 
Wow so much thanks for your tut guys.
BTW can I ask some questions?
1. Does Chrome can send my MAC address to Google?
2. Does Wireshark help you keeping you anonymous?
3. When I checked my VPN at http://ipleak.net it says my DNS is leaking. How to technically fix this?
4. When I remote connect Amazon Web Service (AWS) VPS, and go to survey site, It says "You are using proxy!" But it should have said "You are using VPS!"
So controlling VPS from my home some how leaks my ip?
But I doubt this and my best guess so far is that The survey site's owner blacklisted famous VPS zone (ip range or hostname)
Question is, How can I disguise AWS VPS as 'Normal PC'?

Sorry for too many questions, but I am really curious :p
 
johnnymalik said:
I've tried once to download a VM and do the whole proxy bit, but it somehow still recognized me. Is there any kind of program out there which would spoof a device/browser fingerprint out there for free or cheap? I've seen a couple of programs out there but they were exorbitantly expensive.
Click to expand...

There are some certain fingerprints that depend on your hardware. So if you have multiple VMs on the same hardware, the fingerprints will stay the same.

You may want to check http://whoer.net, http://browserleaks.com/canvas tests and also play a bit with the free version of Multiloginapp http://multiloginapp.com

I plan to make a brief common browser fingerprint overview soon
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top