Hacking Articles Tips Tricks Videos Tutorials

Advice
https://www.reddit.com/r/Pentesting/comments/xrcvg3/advice/

I am a guy that wants to get into pentesting and ethickal hacking for free or at least cheaply. Do you have any advice on where to start ? The amount of info is absolutely daunting to me, and i do not have a clue as to where i should get my info. Thank you in advance kind strangers. P.S. English hard language and not my first language :) submitted by /u/TheYvAaKK (https://www.reddit.com/user/TheYvAaKK)
[link] (https://www.reddit.com/r/Pentesting/comments/xrcvg3/advice/) [comments] (https://www.reddit.com/r/Pentesting/comments/xrcvg3/advice/)

___________________________
@hacking_Attack
@Hacking_Video

Advice

I am a guy that wants to get into pentesting and ethickal hacking for free or at least cheaply. Do you have any advice on where to start ? The...

9 viewsedited 18:57

hacking: security in practice
How do you know If your browser is leaking your IP?

Simply put WebRTC leak is the visibility of an IP address. Most modern web browsers now support and enable WebRTC by default, including desktop browsers like Chrome, Firefox, Safari, and Edge, as well as mobile browsers on Android and iOS, for more clarity (the ‘RTC’ in WebRTC, means Real Time Communication)

I know the standard suggestion is to use a VPN. The issue is that WebRTC undermines the security afforded by VPNs (virtual private networks). I previously worked on a private contract and almost had a massive breach while utilizing a web service provider, even with VPNs turned on.

My geo-location may have been exposed if it weren't for my IP leak alarms.

When a user connects to a VPN server, all of their internet traffic should be routed over an encrypted tunnel to the VPN server. This, among other things, prevents websites and applications from detecting the user's true IP address, which is concealed by the VPN server's.

Which begs to differ that webRTC leak severity depends on the permissions granted to websites

When you visit a website that uses WebRTC, your browser will usually ask your permission before allowing a website access to your camera or microphone.

If a VPN leaks your IP address before you’ve even granted that website permission to use your camera or microphone, that’s a big red flag.

That means any website could use some simple javascript to monitor your IP address and expose your real location. we label this a “persistent vanilla leak,”

At the very least, most VPNs that guarantee against WebRTC leakage can avoid this. Which brings me to my topic for discussion. I use a variety of methods to check for leaks, some of which are a bit overly complicated while others are incredibly basic.

For instance, when you connect to a VPN, your WebRTC IP address should either change to that of the VPN or be completely disabled; your standard IP address and WebRTC address should be the same.

If they differ, it's because WebRTC traffic does not transit via the VPN and your true IP address is visible as a result.

Which brings me to my question......

What are the tricks you use to check for IP leaks when trying to connect to browers? I would appreciate valuable inputs

submitted by /u/Simonvilla1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How do you know If your browser is leaking your IP?

Simply put WebRTC leak is the visibility of an IP address. Most modern web browsers now support and enable WebRTC by default, including desktop...

8 viewsedited 20:28

About

Blog

Apps

Platform