[Beowolf]

Hello Hackforums,

So,are you using a paid or free vpn?
Which doesn't have dns leaks?
And your vpn doesn't log?
Well,it doesn't matter!
What if I told you websites can still track your IP address?
Yes,they can!No phun intended.

WebRTC:-WebRTC (Web Real-Time Communication) is an API definition drafted by the World Wide Web Consortium (W3C) that supports browser-to-browser applications for voice calling, video chat, and P2P file sharing without the need of either internal or external plugins.The WebRTC initiative is a project supported by Google, Mozilla and Opera, amongst others.WebRTC can be used to discover a user’s local IP, even under the presence of a VPN, it has been around since 2013. Since WebRTC uses javascript requests to get your IP address, users of NoScript or similar services will not leak their IP addresses.

If you are using a VPN or a Proxy and you would like to test this WebRTC Local IP leak, click Here or Here
So,is your ip leaking?Most probably it is.

But the good news is I'm going to tell you how to fix this. 🤗

Chrome Users:-Currently, the only way to defeat this WebRTC IP leak in Google Chrome on Windows is to use Script Safe.

Download it Here

And there is another addon for chrome called "WebRTC Block" but it DOES NOT WORK! So,make sure you are using safe script and not any other extension for chrome.

FireFox Users:- Mozilla Firefox users can

Download Disable WebRTC extension Here

(or)
You can actually turn off the default WebRTC functionality directly in Firefox settings by typing ‘about:config’ into the search bar and browsing to the ‘media.peerconnection.enabled’ option and setting it to FALSE.

Safari Browser and Internet Explorer users:-You need not worry as WebRTC is not enabled by default in Safari and IE. 🙂

After trying any of the above fixes WebRTC test results must be something like this on https://www.perfect-privacy.com/webrtc-leaktest/
[img]http://theimagehost.net/upload/7fecc7ca67a76620a9268a1641d9932a.png[/img]
and on https://diafygi.github.io/webrtc-ips/ it must look like this
[img]http://theimagehost.net/upload/a87984376f08d78a77a1a63c20b60935.png[/img]

And One more thing after installing No-Script addon on chrome you need to allow scripts for hackforums to access it to do that visit hackforums.net and click on the No script extension on the top right and click 'allow' the same goes for any other trusted website you want to allow scripts on!
[img]http://theimagehost.net/upload/d8c4d81283253195b04952f5613e6daf.png[/img]
So,have I helped you staying a bit more secure online?
If yes then say thanks 🤝

[xeonx]

Good tutorial I suppose, even tho most people know about this and there's multiple threads on this :)

[nepHaXOr]

Good Tutorials. Thanks mate ::: Good luck ::: God Bless you

[Beowolf]

Good tutorial I suppose, even tho most people know about this and there's multiple threads on this :)

Really?I didn't find anything on this so I made one.
anyways,my tutorial is HQ and detailed so easy to understand 🙂

Good Tutorials. Thanks mate ::: Good luck ::: God Bless you

No problem mate,Stay Safe! :)

[The All Seeing Eye]

Really?I didn't find anything on this so I made one.
anyways,my tutorial is HQ and detailed so easy to understand 🙂
No problem mate,Stay Safe! :)

Can you also make a tutorial on if I wanna dox someone with VPN to get their real IP instead of vpn. Would be great ^^

[Beowolf]

Can you also make a tutorial on if I wanna dox someone with VPN to get their real IP instead of vpn. Would be great ^^

Yeah,we can do that with webRTC if the victim allows scripts then we can use THIS code on our hosting site and when the victim clicks it we can log his ip with some modifications to the code. 🤝

[The All Seeing Eye]

Yeah,we can do that with webRTC if the victim allows scripts then we can use THIS code on our hosting site and when the victim clicks it we can log his ip with some modifications to the code. 🤝

Can you make an tut on that pleas, would be so nice. Can you use SPAM for it and then show us from step-2-step :)

So even if he has VPN on we get his real IP. It should be impossible, do you think it may will work for skype or other communication applications?

[Beowolf]

Can you make an tut on that pleas, would be so nice. Can you use SPAM for it and then show us from step-2-step :)

So even if he has VPN on we get his real IP. It should be impossible, do you think it may will work for skype or other communication applications?

Yes,it must work with skype and others because it's just like phishing but no need to enter anything just opening the link,it works like ip grabber script to give a best example,didn't think about the code but I will do later I guess. 😉

[The All Seeing Eye]

Yes,it must work with skype and others because it's just like phishing but no need to enter anything just opening the link,it works like ip grabber script to give a best example,didn't think about the code but I will do later I guess. 😉

Dude we can take doxing to another level if this works. I know some methods myself but this is crazy!

Pleas show me, or link me to an tut on the internet. I am ready 2 learn! :D

[Beowolf]

Dude we can take doxing to another level if this works. I know some methods myself but this is crazy!

Pleas show me, or link me to an tut on the internet. I am ready 2 learn! :D

http://www.javascriptsource.com/user-details/ip.html you need to combine this with the script I gave earlier.
It must work then. 🙂
another one:-http://osdir.com/ml/web.privoxy.user/2003-12/msg00001.html
Just google about ip grabbing javascripts you'll find plenty.

[The All Seeing Eye]

http://www.javascriptsource.com/user-details/ip.html you need to combine this with the script I gave earlier.
It must work then. 🙂
another one:-http://osdir.com/ml/web.privoxy.user/2003-12/msg00001.html
Just google about ip grabbing javascripts you'll find plenty.

Okay it seems a bit complicated, I will wait until you have time. If you wanna teach me ofcourse ^^ It would be nice if you would.

[Beowolf]

Okay it seems a bit complicated, I will wait until you have time. If you wanna teach me ofcourse ^^ It would be nice if you would.

I would love to,but I have exams in a few days so not coding/hacking and stuff atm,I will work on it after exams! 👍

[The All Seeing Eye]

I would love to,but I have exams in a few days so not coding/hacking and stuff atm,I will work on it after exams! 👍

Sure man, I had exams this week. It's not to bring fear in your mind, but I heard crieng during my math exams...

JK good luck with the exams ^^

[ramo55]

I would love to,but I have exams in a few days so not coding/hacking and stuff atm,I will work on it after exams! 👍

Thanks for the tutorial OP! I honestly did not know about it.

Quick question, how do I protect myself from the little script you and the other guy want to make? You said something about if the user allows scripts, so if I disable scipts will your script for example not work on me?

[Beowolf]

Thanks for the tutorial OP! I honestly did not know about it.

Quick question, how do I protect myself from the little script you and the other guy want to make? You said something about if the user allows scripts, so if I disable scipts will your script for example not work on me?

Just follow the tutorial you will be safe,we were talking everything related to the tutorial.
I meant if WebRTC is not disabled in the victims computer then we can send the same script used by websites to track to the victim,but in this we would track(find real ip of) the user by using webhosting service.

Summary:-Just use NO script in chrome and disable WebRTC in firefox to be safe from the script we were talking about. 🤝