Full Disclosure mailing list archives
Re: Google Private IP is 10.7.0.73 !!!!!!
From: Jordan Wiens <jwiens () nersp nerdc ufl edu>
Date: Sun, 24 Aug 2003 17:47:53 -0400 (EDT)
fyi, the googleproxy will only proxy html, not images or other files. So for example, checking my logs after testing the proxy produces: 216.239.39.5 - - [24/Aug/2003:17:40:50 -0400] "GET / HTTP/1.0" 200 1556 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4a) Gecko/20030401,gzip(gfe) (via translate.google.com)" my.re.al.ip - - [24/Aug/2003:17:40:50 -0400] "GET /style.css HTTP/1.1" 200 796 "http://216.239.39.104/translate_c?hl=en&u=http://psifertex.com/&prev=http://translate.google.com/language_tools" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4a) Gecko/20030401" my.re.al.ip - - [24/Aug/2003:17:40:50 -0400] "GET /images/psifertex.jpg HTTP/1.1" 200 7264 "http://216.239.39.104/translate_c?hl=en&u=http://psifertex.com/&prev=http://translate.google.com/language_tools" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4a) Gecko/20030401" Plus, google does pass along X-Forwarded-For headers: GET / HTTP/1.0 User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4a) Gecko/20030401,gzip(gfe) (via translate.google.com) Accept-Language: en Accept-Charset: utf-8,* Accept: text/html, text/plain, */* Via: 1.0 translate.google.com (TWS/0.9), 1.0 proxy.google.com:80 (Squid/2.3.STABLE4) X-Forwarded-For: my.re.al.ip, unknown Host: psifertex.nerdc.ufl.edu Cache-Control: max-age=259200 Connection: keep-alive Interesting that they're using squid for their translation. -- Jordan Wiens, CISSP UF Network Incident Response Team (352)392-2061 On Sat, 23 Aug 2003, morning_wood wrote:
Messagei kinda discoverd google's use as a proxy simply by doing http://translate.google.com/translate?u=http%3A%2F%2Fwhatismyip.com and is essentally the basis of http://exploit.wox.org/tools/googleproxy.html Donnie Werner Chief Technical Officer E2 Labs Information Security Pvt. Ltd. http://e2-labs.com
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Google Private IP is 10.7.0.73 !!!!!!, (continued)
- Re: Google Private IP is 10.7.0.73 !!!!!! Nicolas Cartron (Aug 21)
- Re: Google Private IP is 10.7.0.73 !!!!!! martin f krafft (Aug 21)
- Re: Google Private IP is 10.7.0.73 !!!!!! Servicios de Seguridad Informatica (Aug 21)
- Re: [fd] Re: Google Private IP is 10.7.0.73 !!!!!! Mike V (Aug 21)
- Re: Google Private IP is 10.7.0.73 !!!!!! idoru (Aug 21)
- Re: Google Private IP is 10.7.0.73 !!!!!! conde0 (Aug 21)
- RE: Google Private IP is 10.7.0.73 !!!!!! Bojan Zdrnja (Aug 21)
- Re: Google Private IP is 10.7.0.73 !!!!!! morning_wood (Aug 21)
- Re: Google Private IP is 10.7.0.73 !!!!!! Valdis . Kletnieks (Aug 21)
- Re: Google Private IP is 10.7.0.73 !!!!!! morning_wood (Aug 23)
- Re: Google Private IP is 10.7.0.73 !!!!!! Jordan Wiens (Aug 24)
- R: Google Private IP is 10.7.0.73 !!!!!! edp (Aug 22)
- Re: R: Google Private IP is 10.7.0.73 !!!!!! Edward Rustin (Aug 22)
- Re: Google Private IP is 10.7.0.73 !!!!!! micah mcnelly (Aug 23)
- RE: Google Private IP is 10.7.0.73 !!!!!! Bassett, Mark (Aug 22)
- RE: Google Private IP is 10.7.0.73 !!!!!! MacDougall, Shane (Aug 22)
- Re: Google Private IP is 10.7.0.73 !!!!!! Gaurav Kumar (Aug 22)
- RE: Re: Google Private IP is 10.7.0.73 !!!!!! Parker, Jeff (MSE) (Aug 22)
- Re: Google Private IP is 10.7.0.73 !!!!!! Nicolas Cartron (Aug 21)