Thursday, 26 April 2012

Skype User IP-address Disclosure

Hello,

Some anonymous user made a comment with a link to an interesting text. I tested this stuff and it really works.


Skype user IP-address disclosure

1. Download this patched version of Skype 5.5:
http://skype-open-source.blogspot.com/2012/03/skype55-deobfuscated-version-released.html

2. Turn on debug-log file creation via adding a few registry keys.
https://github.com/skypeopensource/skypeopensource/wiki/skype-3.x-4.x-5.x-enable-logging

3. Make "add a Skype contact" action, but do not send add request, just click on the user to view his vcard.

4. Have a look at the log file to find the desired skypename.
The record will be like this for real user ip: -r195.100.213.25:31101
And like this for user internal network card ip: -l172.10.5.17

21:16:45.818 | T#3668 PresenceManager: | noticing skypetestuser1 0x3e54a539a91a19fc-s-s65.55.223.23:40013-r195.100.213.25:31101-l172 .10.5.17:22960 23d23109 82f328ff

5. Catch that skype user via whois service.
http://nic.ru/whois/?query=195.100.213.25

The mentioned steps will help you to get the following information about a skype user: City, Country, Internet provider and internal user ip-address.
Now, you can troll him about CIA and Mossad, he-he.


Orginal link:
Skype user IP-address disclosure
http://pastebin.com/rBu4jDm8

33 comments:

  1. Why does the client need to know the remote clients public IP?

    Does Skype use a central hub where all clients connect to?

    ReplyDelete
    Replies
    1. Because of peer2peer network nature.

      Delete
  2. Any way to defend myself from this stupid hole?

    ReplyDelete
    Replies
    1. Use VPN or skype under freecap tool with socks/proxy.

      Delete
  3. Web-service for find out skype users ip.
    http://skype-ip-finder.tk/

    ReplyDelete
    Replies
    1. http://skype-ip-finder.in/

      Delete
  4. http://bo0om.ru/bezopasnost/probivaem-ip-v-skype.html
    Yes-yes

    ReplyDelete
  5. http://www.theverge.com/2012/4/30/2988313/skype-skypekit-ip-address-hack

    ReplyDelete
  6. http://www.pcmag.com/article2/0,2817,2403758,00.asp

    ReplyDelete
  7. Skype strikes back: "Its not our network bug, its feature!"

    http://alouche.net/2012/04/29/the-so-called-skype-sdk-ip-leaks/

    Okey, they are rights. But why the heck ANYONE need to know you public ip? If you not from my contact list, go away with you ip address request. Its simple.

    And contact sharing request you may send using supernode as proxy. Fairly easy.

    ReplyDelete
    Replies
    1. Nah.
      Looks like usual 'security expert' butthurt.

      Delete
  8. Anyone has cloned skypeopensource git repo? GitHub took it down.

    ReplyDelete
    Replies
    1. https://github.com/skypeopensource/epycs

      Delete
  9. has somebody cloned the http://skype-ip-finder.tk/ site too??? it's down allready

    ReplyDelete
    Replies
    1. http://skype-ip-finder.in/

      Delete
  10. anyone know where a copy of skype55-deob can be obtained from, the relevant sites are down

    ReplyDelete
    Replies
    1. http://thepiratebay.se/torrent/7238404/

      Delete
  11. magnet:?xt=urn:btih:2a93d303ce538a1f5894f93086255837ccc3eeff&dn=skype55_59_deobfuscated_binaries&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80&tr=udp%3A%2F%2Ftracker.publicbt.com%3A80&tr=udp%3A%2F%2Ftracker.ccc.de%3A80

    ReplyDelete
    Replies
    1. Or http://thepiratebay.se/torrent/7238404/

      Delete
  12. What are the registry keys ??

    ReplyDelete
  13. I think that here is described how to enable logging on all OSs:
    http://developer.skype.com/SkypeGarage/LogFile

    ReplyDelete
  14. So ridiculous that people even feel the need to disclose this type of information that they know full well will be abused by a bunch of assholes. Way to go.

    ReplyDelete
  15. there are tools for getting the skype user's IP address, i dont know what the tool was. But it was working. I get my friends IP address. Also i hope there's a skype themes so that we enjoy skype more!

    ReplyDelete
  16. That Skype itself can be used for video calls, but this plugin is just to receive voice calls via Skype.Skype Technical Help

    ReplyDelete