Re: Metasploit Decloak Project v2

[H D Moore <torspam@xxxxxxxxxxxxxx>]

On Sunday 14 December 2008, Roc Admin wrote:
> It doesn't seem like there are any new attack vectors but I wanted to
> pass it along to see if anyone had comments.

I am looking for feedback as well -- right now, the reporting side is 
pretty weak, but that should improve this evening. Roger pointed me at the 
torbutton design notes, so I will continue adding coverage/techniques 
there. This test should work on all browsers regardless of security 
settings or scripting. No test requires javascript, which should give an 
accurate view for folks who run noscript/torbutton. My own testing with 
torbutton shows it to be really solid (only tor exit and tor exit's DNS 
servers show up).

-HD