https://github.com/diafygi/webrtc-ips

Demo: https://diafygi.github.io/webrtc-ips/
https://github.com/diafygi/webrtc-ips

Last synced: 12 days ago
JSON representation

Demo: https://diafygi.github.io/webrtc-ips/

• Host: GitHub
• URL: https://github.com/diafygi/webrtc-ips
• Owner: diafygi
• License: mit
• Created: 2015-01-26T05:55:12.000Z (almost 10 years ago)
• Default Branch: master
• Last Pushed: 2023-12-27T11:07:09.000Z (12 months ago)
• Last Synced: 2024-11-28T02:25:10.284Z (14 days ago)
• Language: HTML
• Size: 279 KB
• Stars: 3,438
• Watchers: 169
• Forks: 598
• Open Issues: 30
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-peer-to-peer - webrtc-ips
• awesome-peer-to-peer - webrtc-ips
• starred-awesome - webrtc-ips - Demo: https://diafygi.github.io/webrtc-ips/ (HTML)

README

        
# STUN IP Address requests for WebRTC

Demo: https://diafygi.github.io/webrtc-ips/

### What this does

Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript, so you can now obtain a users local and public IP addresses in javascript. This demo is an example implementation of that.

Additionally, these STUN requests are made outside of the normal XMLHttpRequest procedure, so they are not visible in the developer console or able to be blocked by plugins such as AdBlockPlus or Ghostery. This makes these types of requests available for online tracking if an advertiser sets up a STUN server with a wildcard domain.

### Code

Here is the annotated demo function that makes the STUN request. You can copy and paste this into the Firefox or Chrome developer console to run the test.

```javascript

//get the IP addresses associated with an account

function getIPs(callback){

    var ip_dups = {};

    //compatibility for firefox and chrome

    var RTCPeerConnection = window.RTCPeerConnection

        || window.mozRTCPeerConnection

        || window.webkitRTCPeerConnection;

    var useWebKit = !!window.webkitRTCPeerConnection;

    //bypass naive webrtc blocking using an iframe

    if(!RTCPeerConnection){

        //NOTE: you need to have an iframe in the page right above the script tag

        //

        //

        //...getIPs called in here...

        //

        var win = iframe.contentWindow;

        RTCPeerConnection = win.RTCPeerConnection

            || win.mozRTCPeerConnection

            || win.webkitRTCPeerConnection;

        useWebKit = !!win.webkitRTCPeerConnection;

    }

    //minimal requirements for data connection

    var mediaConstraints = {

        optional: [{RtpDataChannels: true}]

    };

    var servers = {iceServers: [{urls: "stun:stun.services.mozilla.com"}]};

    //construct a new RTCPeerConnection

    var pc = new RTCPeerConnection(servers, mediaConstraints);

    function handleCandidate(candidate){

        //match just the IP address

        var ip_regex = /([0-9]{1,3}(\.[0-9]{1,3}){3}|[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7})/

        var ip_addr = ip_regex.exec(candidate)[1];

        //remove duplicates

        if(ip_dups[ip_addr] === undefined)

            callback(ip_addr);

        ip_dups[ip_addr] = true;

    }

    //listen for candidate events

    pc.onicecandidate = function(ice){

        //skip non-candidate events

        if(ice.candidate)

            handleCandidate(ice.candidate.candidate);

    };

    //create a bogus data channel

    pc.createDataChannel("");

    //create an offer sdp

    pc.createOffer(function(result){

        //trigger the stun server request

        pc.setLocalDescription(result, function(){}, function(){});

    }, function(){});

    //wait for a while to let everything done

    setTimeout(function(){

        //read candidate info from local description

        var lines = pc.localDescription.sdp.split('\n');

        lines.forEach(function(line){

            if(line.indexOf('a=candidate:') === 0)

                handleCandidate(line);

        });

    }, 1000);

}

//Test: Print the IP addresses into the console

getIPs(function(ip){console.log(ip);});

```