Ukuhlola i-WebRTC Leak (Qhathanisa i-IP ye-HTTP Proxy nama-UDP STUN Candidate)
Updated:
I-WebRTC (Web Real-Time Communication) yakhelwe ku-Chrome, Edge, Firefox, Brave, neziphequluli zeselula zamakholi wezwi nevidiyo. Ngenxa yokuthi i-WebRTC isebenzisa amaseva e-UDP STUN (stun.l.google.com, stun.cloudflare.com) ukuthola izindlela zenethiwekhi, ivamise ukweqa ukucushwa okujwayelekile kwe-HTTP(S) proxy bese idalula i-IP yakho yangempela ye-ISP yasekhaya noma ikheli lendawo le-LAN kumawebhusayithi. Leli khasi lihlola isiphequluli sakho ngokuzenzakalelayo lapho livuleka.
Your browser either blocks UDP STUN completely or masks WebRTC candidates.
Indlela Yokuhumusha Imiphumela Yakho Yokuhlola i-WebRTC Leak
Izikripthi ezilwa nokukhwabanisa ku-TikTok Shop, Facebook Business Manager, Shopee, Amazon, naku-Etsy zisebenzisa uphenyo oluthule lwe-RTCPeerConnection lapho ungena ngemvume. Qhathanisa izimo ezintathu zamakhandidethi ezingaba khona ngezansi:
| Uhlobo lwe-Candidate | Lokho Okubonwa Izikripthi Zewebhusayithi | Izinga Lobungozi | Isenzo Esiphakanyisiwe |
|---|---|---|---|
| I-IP Yomphakathi ye-STUN ≠ i-IP ye-HTTP | Kokubili i-IP Yakho ye-Proxy kanye ne-IP Yakho Yangempela Yasekhaya | KUBI KAKHULU (Ukuxhumana Kwe-akhawunti ngo-100%) | Vula i-WebRTC Spoofing/Replace Kusiphequluli Esilwa Nokutholwa noma vala i-WebRTC |
| I-IP Yomphakathi ye-STUN = i-IP ye-HTTP | Kuphela i-IP Yakho ye-Proxy (srflx ifana ne-HTTP) | KUPHEPHILE (Iphrofayili Yesiphequluli Semvelo) | Isimo esikahle esikhiqizwa yi-Genlogin, GoLogin, AdsPower, ne-Multilogin |
mDNS .local / Ivaliwe | I-UUID .local efihliwe noma akukho candidate | KUPHEPHILE (Ivikelwe) | Kuhle ekuphequluleni okujwayelekile kwe-Chrome/Firefox ngezandiso |
Indlela Yokulungisa Ukuvuza Kwe-WebRTC Kuziphequluli Zonke
- Iziphequluli Ezilwa Nokutholwa (Genlogin, GoLogin, AdsPower, Dolphin{anty}): Setha imodi ye-WebRTC ku-'Alter / Replace' ukuze i-
RTCPeerConnectionibuyisele i-IP yakho ye-proxy ye-VinaProxy njenge-candidate yomphakathi ye-STUN. - Mozilla Firefox: Vula i-
about:config, sesha i-media.peerconnection.enabled, bese uyishintshela ku-false. - Google Chrome & Microsoft Edge: Faka isandiso esisemthethweni se-WebRTC Network Limiter bese uvula i-
Anonymize local IPs exposed by WebRTCku-chrome://flags/edge://flags.
Isinyathelo ngesinyathelo
- 1
Xhuma usebenzisa i-proxy yakho noma iphrofayili elwa nokutholwa
Vula leli khasi ngaphakathi kwephrofayili yesiphequluli ngqo oyisebenzisela ukuphatha ama-akhawunti.
- 2
Qhathanisa ikhadi le-IP ye-HTTP nekhadi le-WebRTC STUN
Qinisekisa ukuthi ikhadi elingakwesokudla libonisa 'No Public WebRTC IP Exposed' noma lifana ne-IP Yakho ye-HTTP Proxy engakwesokunxele.
- 3
Bheka ithebula le-ICE Candidate ukuze uthole ukuvuza kwe-LAN
Qinisekisa ukuthi amakheli endawo e-
192.168.x.xnoma e-10.x.x.xambozwe ngamagama osingathi e-mDNS e-.local. - 4
Chofoza u-'Re-Test WebRTC' ngemuva kokulungisa izilungiselelo
Qinisekisa ukuthi ibhano eliluhlaza elithi 'No WebRTC Public IP Mismatch Detected' liyavela ngaphambi kokungena kunkundla yakho eqondiwe.
Imibuzo evame ukubuzwa
Kungani i-WebRTC ivuza i-IP yami yangempela lapho ngisebenzisa isandiso se-proxy se-Chrome esifana ne-SwitchyOmega noma i-FoxyProxy?
Izandiso ze-proxy ze-HTTP(S) zihambisa kuphela ithrafikhi ye-TCP HTTP/HTTPS. Ngokuzenzakalelayo, i-Chrome ithumela izicelo zokubopha ze-WebRTC STUN nge-UDP engahlungiwe ngaphandle komhubhe we-proxy ngaphandle uma umzila we-UDP we-WebRTC uvimbelwe yisandiso noma isiphequluli esilwa nokutholwa.
Ingabe kungcono ukucisha ngokuphelele i-WebRTC noma ukuyisetha ku-'Replace / Alter' kuziphequluli ezilwa nokutholwa?
Ezinkundleni ezidinga ukwethenjwa okuphezulu njenge-Facebook Ads, TikTok Shop, ne-Amazon, ukusetha i-WebRTC ku-'Replace / Alter' (lapho i-STUN ibuyisela i-IP yakho ye-proxy) kubonakala kungokwemvelo kakhulu kunokucisha ngokuphelele i-API ye-RTCPeerConnection.
Yini i-candidate ye-mDNS ye-`.local` ethebuleni?
Iziphequluli zesimanje zishintsha ama-IP ayimfihlo e-LAN (njenge-192.168.1.5) nge-UUID yesikhashana egcina ngo-.local ukuze amawebhusayithi angakwazi ukuthola izigxivizo zeminwe zesistimu ye-subnet yomzila wendawo.
Xhumanisa Amaphrofayili Esiphequluli Angavuzi nama-IP Amile Ahlanzekile
Ama-proxy azinikele e-IPv4 kanye nalawo amile e-Residential ISP enzelwe i-Genlogin, GoLogin, ne-AdsPower.
Thenga Ama-proxy Alwa Nokutholwa