Browsers that support WebRTC like Chrome, Edge, Brave, etc. Vulnerability Testing Site Leaking User’s Local IP Address – GIGAZINE

The “WebRTC” function, which is used to reduce the time interval when video and audio calls are made between a user’s web browsers, may return the user’s local IP address to a malicious site. It was reported some time ago. A new test site has been launched where you can try out IP address leaks.

WebRTC Local IP Leak Test 🍌 – github.com/niespodd/webrtc-local-ip-leak
https://niespodd.github.io/webrtc-local-ip-leak/

GitHub – niespodd/webrtc-local-ip-leak: Oh no, stop this. You can see my local ip address 😲! Use the “Foundation” attribute against the CRC32 lookup table to detect the local IP address of a Chrome/Chromium visitor.
https://github.com/niespodd/webrtc-local-ip-leak

In 2015, security researcher Daniel Rossler said that websitesSTUN . serverThe STUN server sends a ping containing the IP address and the client port. This allows the user’s local and public IP addresses to be retrieved from these requests by JavaScript.shown。

This issue mainly affects users who are using Google Chrome or Mozilla Firefox on Windows. “If advertisers create a domain instead on their STUN servers, this type of request could be used for online tracking, leading to more confusion and advertisers being able to identify users further,” Rossler said. It will be easier.” Cautious. In Chrome, etc., a method has been created to later convert the local IP address to the UUID.local format using mDNS to prevent it from being obtained.

However, since this issue persists, GitHub user Dariusz Niespodziany has created and posted an explanatory page showing the local IP address from WebRTC reference parameters. This page is below. This script uses a pre-built lookup table to find the local IP address of the ICE filter, which makes the local mDNS hostname display as “xx-xxx-xxx-xx.local”. maybe. Click Start Test to run the test and check the local IP address.

This will display your IP address, protocol, etc.