mktg / browser-privacy Goto Github PK

Links to web browser privacy and hardening resources, as well as browser fingerprinting and identification developer tools.

• Анонимность в каждый ZennoPoster. От Useragent'a до шрифтов. Часть 1.
• Анонимность в каждый ZennoPoster. От Useragent'a до шрифтов. Часть 2.

• Multi Login App Multi profile anonymising browser. Awesome!
• SRWare Iron (Chrome) Chrome with the eye of sauron removed.
• Pale Moon (Firefox) Custom-built and optimized Firefox browsers for Windows.
• Midori Open source webkit.

• CanvasFingerprintBlock
• Scriptsafe
• Ublock
• uMatrix Content blocking overkill.

chrome://flags/#disable-webrtc  (doesn't work, do your spamming in another browser)

Firefox is a bit of a dog, but it's certainly less invasive than modern chrome builds.

• Ghacks Hardened FF user.js Well maintained privacy-focused user.js
• ConfigFox - Firefox config management utility.
• Firefox Profilemaker Github - Makes FF profiles with secure/private defaults.
• Firefox Environment Backup Extension - FEBE allows you to quickly and easily backup your Firefox extensions. Rebuilds extensions individually into installable .xpi files.

• Firefox bullshit removal via about:config - Lots of config tweaks with explanations
• Firefox Hardening - This user.js is a bit over the top to be useable day to day, but it's a good start.

	media.peerconnection.enabled;false // disable webrtc
	media.peerconnection.turn.disable;true // disable webrtc
	media.peerconnection.use_document_iceservers;false // disable webrtc
	media.peerconnection.video.enabled;false // disable webrtc
	media.peerconnection.identity.timeout;1 // disable webrtc

• BeEF - The Browser Exploitation Framework Project / https://github.com/beefproject/beef.
• Sniffing browser history using HSTS + CSP - Demo.

• http://browserspy.dk/
• https://www.browserleaks.com/
• https://panopticlick.eff.org/
• https://ipleak.net/
• http://www.dnsleaktest.com/ DNS Leaks test .
• https://www.grc.com/dns/dns.htm Another DNS Leaks test .

• Evercookie - Produces extremely persistent, respawning cookies in a browser.
• Google Analytics It's kinda scary how much data they collect daily.
• fingerprintjs2 - Modern & flexible browser fingerprinting library, a successor to the original fingerprintjs.
• UserAgentInfo - PHP class for parsing user agent strings (HTTP_USER_AGENT). Includes mobile checks, bots and banned bots checks, browser types/versions and more.
• http://mobiledetect.net/ Mobile Detect is a lightweight PHP class for detecting mobile devices (including tablets). Stacks of plugins.
• Browscap - browscap contains a huge database of incredibly detailed specific user agents information but it sucks with newer user agents and sucks even more for mobile detection.

OpenDNS
	208.67.222.222 
	208.67.220.220 

Level 3
	209.244.0.3
	209.244.0.4 
	4.2.2.1 
	4.2.2.2 
	4.2.2.3 
	4.2.2.4

Comodo Secure DNS
	8.26.56.26 
	8.20.247.20
DNS Watch
	82.200.69.80 
	84.200.70.40 
	resolver1.dns.watch
	resolver2.dns.watch
	2001:1608:10:25::1c04:b12f
	2001:1608:10:25::9249:d69b 
Google
	8.8.8.8
	8.8.4.4

• SSL Private Proxy All sorts of great stuff.
• Squid Proxies Very fast proxies.
• Fineproxy.org Good for cheap and short term proxies.

• privacytools.io Privacytools.io provides knowledge and tools to protect your privacy .against global mass surveillance. Because as it turns out, they really are watching.
• OS-X-Security-and-Privacy-Guide - This is a collection of thoughts on securing a modern Apple Mac computer using OS X 10.11 "El Capitan", as well as steps to improving online privacy.

• Client Fingerprinting via Analysis of Browser Scripting Environment
  • https://www.sans.org/reading-room/whitepapers/testing/client-fingerprinting-analysis-browser-scripting-environment-33503 .
• **The Web Never Forgets: Persistent Tracking Mechanisms in the Wild **
  • https://securehomes.esat.kuleuven.be/~gacar/persistent/the_web_never_forgets.pdf
• New browser fingerprinting tricks / http://zyan.scripts.mit.edu/sniffly