mataprasad · March 1, 2017 05:15 · ipetermac · Nov 6, 2021
diff --git a/get-local-ip.html b/get-local-ip.html
 <!--https://diafygi.github.io/webrtc-ips/ -->

 <!DOCTYPE html>
 <html>
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
    </head>
    <body>
        <h4>
            Demo for:
            <a href="https://github.com/diafygi/webrtc-ips">
                https://github.com/diafygi/webrtc-ips
            </a>
        </h4>
        <p>
            This demo secretly makes requests to STUN servers that can log your
            request. These requests do not show up in developer consoles and
            cannot be blocked by browser plugins (AdBlock, Ghostery, etc.).
        </p>
        <h4>Your local IP addresses:</h4>
        <ul></ul>
        <h4>Your public IP addresses:</h4>
        <ul></ul>
        <h4>Your IPv6 addresses:</h4>
        <ul></ul>
        <iframe id="iframe" sandbox="allow-same-origin" style="display: none"></iframe>
        <script>
            //get the IP addresses associated with an account
            function getIPs(callback){
                var ip_dups = {};

                //compatibility for firefox and chrome
                var RTCPeerConnection = window.RTCPeerConnection
                    || window.mozRTCPeerConnection
                    || window.webkitRTCPeerConnection;
                var useWebKit = !!window.webkitRTCPeerConnection;

                //bypass naive webrtc blocking using an iframe
                if(!RTCPeerConnection){
                    //NOTE: you need to have an iframe in the page right above the script tag
                    //
                    //<iframe id="iframe" sandbox="allow-same-origin" style="display: none"></iframe>
                    //<script>...getIPs called in here...
                    //
                    var win = iframe.contentWindow;
                    RTCPeerConnection = win.RTCPeerConnection
                        || win.mozRTCPeerConnection
                        || win.webkitRTCPeerConnection;
                    useWebKit = !!win.webkitRTCPeerConnection;
                }

                //minimal requirements for data connection
                var mediaConstraints = {
                    optional: [{RtpDataChannels: true}]
                };

                var servers = {iceServers: [{urls: "stun:stun.services.mozilla.com"}]};

                //construct a new RTCPeerConnection
                var pc = new RTCPeerConnection(servers, mediaConstraints);

                function handleCandidate(candidate){
                    //match just the IP address
                    var ip_regex = /([0-9]{1,3}(\.[0-9]{1,3}){3}|[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7})/
                    var ip_addr = ip_regex.exec(candidate)[1];

                    //remove duplicates
                    if(ip_dups[ip_addr] === undefined)
                        callback(ip_addr);

                    ip_dups[ip_addr] = true;
                }

                //listen for candidate events
                pc.onicecandidate = function(ice){

                    //skip non-candidate events
                    if(ice.candidate)
                        handleCandidate(ice.candidate.candidate);
                };

                //create a bogus data channel
                pc.createDataChannel("");

                //create an offer sdp
                pc.createOffer(function(result){

                    //trigger the stun server request
                    pc.setLocalDescription(result, function(){}, function(){});

                }, function(){});

                //wait for a while to let everything done
                setTimeout(function(){
                    //read candidate info from local description
                    var lines = pc.localDescription.sdp.split('\n');

                    lines.forEach(function(line){
                        if(line.indexOf('a=candidate:') === 0)
                            handleCandidate(line);
                    });
                }, 1000);
            }

            //insert IP addresses into the page
            getIPs(function(ip){
                var li = document.createElement("li");
                li.textContent = ip;

                //local IPs
                if (ip.match(/^(192\.168\.|169\.254\.|10\.|172\.(1[6-9]|2\d|3[01]))/))
                    document.getElementsByTagName("ul")[0].appendChild(li);

                //IPv6 addresses
                else if (ip.match(/^[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7}$/))
                    document.getElementsByTagName("ul")[2].appendChild(li);

                //assume the rest are public IPs
                else
                    document.getElementsByTagName("ul")[1].appendChild(li);
            });
        </script>
    </body>
 </html>
	<!--https://diafygi.github.io/webrtc-ips/ -->

	<!DOCTYPE html>
	<html>
	<head>
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
	</head>
	<body>
	<h4>
	Demo for:
	<a href="https://github.com/diafygi/webrtc-ips">
	https://github.com/diafygi/webrtc-ips
	</a>
	</h4>
	<p>
	This demo secretly makes requests to STUN servers that can log your
	request. These requests do not show up in developer consoles and
	cannot be blocked by browser plugins (AdBlock, Ghostery, etc.).
	</p>
	<h4>Your local IP addresses:</h4>
	<ul></ul>
	<h4>Your public IP addresses:</h4>
	<ul></ul>
	<h4>Your IPv6 addresses:</h4>
	<ul></ul>
	<iframe id="iframe" sandbox="allow-same-origin" style="display: none"></iframe>
	<script>
	//get the IP addresses associated with an account
	function getIPs(callback){
	var ip_dups = {};

	//compatibility for firefox and chrome
	var RTCPeerConnection = window.RTCPeerConnection
	\|\| window.mozRTCPeerConnection
	\|\| window.webkitRTCPeerConnection;
	var useWebKit = !!window.webkitRTCPeerConnection;

	//bypass naive webrtc blocking using an iframe
	if(!RTCPeerConnection){
	//NOTE: you need to have an iframe in the page right above the script tag
	//
	//<iframe id="iframe" sandbox="allow-same-origin" style="display: none"></iframe>
	//<script>...getIPs called in here...
	//
	var win = iframe.contentWindow;
	RTCPeerConnection = win.RTCPeerConnection
	\|\| win.mozRTCPeerConnection
	\|\| win.webkitRTCPeerConnection;
	useWebKit = !!win.webkitRTCPeerConnection;
	}

	//minimal requirements for data connection
	var mediaConstraints = {
	optional: [{RtpDataChannels: true}]
	};

	var servers = {iceServers: [{urls: "stun:stun.services.mozilla.com"}]};

	//construct a new RTCPeerConnection
	var pc = new RTCPeerConnection(servers, mediaConstraints);

	function handleCandidate(candidate){
	//match just the IP address
	var ip_regex = /([0-9]{1,3}(\.[0-9]{1,3}){3}\|[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7})/
	var ip_addr = ip_regex.exec(candidate)[1];

	//remove duplicates
	if(ip_dups[ip_addr] === undefined)
	callback(ip_addr);

	ip_dups[ip_addr] = true;
	}

	//listen for candidate events
	pc.onicecandidate = function(ice){

	//skip non-candidate events
	if(ice.candidate)
	handleCandidate(ice.candidate.candidate);
	};

	//create a bogus data channel
	pc.createDataChannel("");

	//create an offer sdp
	pc.createOffer(function(result){

	//trigger the stun server request
	pc.setLocalDescription(result, function(){}, function(){});

	}, function(){});

	//wait for a while to let everything done
	setTimeout(function(){
	//read candidate info from local description
	var lines = pc.localDescription.sdp.split('\n');

	lines.forEach(function(line){
	if(line.indexOf('a=candidate:') === 0)
	handleCandidate(line);
	});
	}, 1000);
	}

	//insert IP addresses into the page
	getIPs(function(ip){
	var li = document.createElement("li");
	li.textContent = ip;

	//local IPs
	if (ip.match(/^(192\.168\.\|169\.254\.\|10\.\|172\.(1[6-9]\|2\d\|3[01]))/))
	document.getElementsByTagName("ul")[0].appendChild(li);

	//IPv6 addresses
	else if (ip.match(/^[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7}$/))
	document.getElementsByTagName("ul")[2].appendChild(li);

	//assume the rest are public IPs
	else
	document.getElementsByTagName("ul")[1].appendChild(li);
	});
	</script>
	</body>
	</html>