Collected research

Cross-Browser Proxy Unmasking

ma1 · hackademix.net

ma1 (Giorgio Maone) answers RSnake's LiveConnect Tor deanonymiser with a plugin-agnostic version: Flash's XMLSocket ignores the browser's proxy settings and connects straight to a Perl server on port 9999 that echoes the client IP. Works in any browser with Flash, no JavaScript needed. Lesson: turn plugins off to stay anonymous.

Record

Researcher

ma1

Published by

hackademix.net

Topic

HTTP

In the archive

• Collected in the 2007 research round

Related sources

• Java proxy unmasking
• Cross-browser proxy unmasking

Tags

• flash
• deanonymization
• proxy
• info-leak
• sop-bypass
• javascript
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of ma1, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.