Security Basics: Re: Private IP address with yahoo messenger

[Pranay Kanwar <warl0ck () metaeye org>]

Hi,

Looking at the services section in the

http://libyahoo2.sourceforge.net/ymsg-9.txt

YAHOO_SERVICE_P2PFILEXFER      = 0x4d
YAHOO_SERVICE_PEERTOPEER       = 0x4f

P2PFILEXFER   - transfer a file between two peers, yahoo server not used
PEERTOPEER    - check if peer to peer connections are possible

Sometimes pidgin (http://www.pidgin.im/) displays the internal IP
address of a user when we do Get Info from menu. One of
my friends is shown 192.168.1.3 right now!.

Digging into the source

pidgin-2.0.1/libpurple/protocols/yahoo/yahoo.c

The function yahoo_process_p2p, at line 2020
shows that the p2p service packet does contain the
IP address and it is base64 encoded.


regards

warl0ck // MSG
http://www.metaeye.org