Renk
17.03.09, 01:05
I have discovered 2 sites pretending able to Unanonymyzing proxies:
1) proxy-check.squabbel.com/
2) decloak.net/
The first indeed manages to unanonymize some proxy, such as ChinaMommy.cn. But it fails with some others, as Megaproxy or Ninjaproxy. More precisely, when I am connecting with Megaproxy, the "unanonymizer" manages to see that I use a proxy, but is unable to find my "real" IP (or more exactly my VPN IP, my real IP being known only from my ISP and my VPN provider, at least I suppose it). When I am connecting with Ninjaproxy, the Unanonymiser neither detects that I use a proxy, nor manages to find my real IP.
So, it allows some classification concerning the level of anonymity provided by some proxies.
The second, Decloak, was apparently much more promising: Along its developer, Decloak identifies the real IP address of a web user, regardless of proxy settings, using a combination of client-side technologies and custom services (such as java), and only a properly configured Tor +Privoxy connection is able to defeat it.
(cf Metasploit: Metasploit Decloak v2 (UnAnonymizer) (http://blog.metasploit.com/2008/12/metasploit-decloak-v2-unanonymizer.html)).
But I am very disappointed with its performance: Decloack has been unable to find my "real" IP address, even when I used the weak proxy ChinaMommy.
Does anyone know some well-working unanonymyzing tool ??
1) proxy-check.squabbel.com/
2) decloak.net/
The first indeed manages to unanonymize some proxy, such as ChinaMommy.cn. But it fails with some others, as Megaproxy or Ninjaproxy. More precisely, when I am connecting with Megaproxy, the "unanonymizer" manages to see that I use a proxy, but is unable to find my "real" IP (or more exactly my VPN IP, my real IP being known only from my ISP and my VPN provider, at least I suppose it). When I am connecting with Ninjaproxy, the Unanonymiser neither detects that I use a proxy, nor manages to find my real IP.
So, it allows some classification concerning the level of anonymity provided by some proxies.
The second, Decloak, was apparently much more promising: Along its developer, Decloak identifies the real IP address of a web user, regardless of proxy settings, using a combination of client-side technologies and custom services (such as java), and only a properly configured Tor +Privoxy connection is able to defeat it.
(cf Metasploit: Metasploit Decloak v2 (UnAnonymizer) (http://blog.metasploit.com/2008/12/metasploit-decloak-v2-unanonymizer.html)).
But I am very disappointed with its performance: Decloack has been unable to find my "real" IP address, even when I used the weak proxy ChinaMommy.
Does anyone know some well-working unanonymyzing tool ??