Guide | How To The ultimate Online Privacy Test Resource List

[Exterminator]

The following is an awesome resource of tests to check your online privacy courtesy of Martin Brinkmann at ghacks.net

Source: The ultimate Online Privacy Test Resource List - gHacks Tech News

Basic Tests

• Bad SSL Tests how the browser handles certain SSL certificates and other SSL-types badssl.com
• Battery Status API Tests the status of the battery Battery Status API
• BrowserRecon Fingerprinting test based on user agent browserrecon project / online scan
• Browser Referer Headers Browser referer headers test suite. Test Browser Referer Headers « Dark Launch
• Canvas Fingerprinting Checks whether Canvas can be used to fingerprint the browser Canvas Fingerprinting — BrowserLeaks.com
• Check my Torrent IP Check which IP address is revealed to peers and trackers when you use torrent clients. Check My Torrent IP | Proxy & VPN Verification | TorGuard
• Content Filters and Proxy Test Tests network filters, TOR browser and local content filters Content Filtering Proxy Detection — AdBlock Detection, TOR Detection, Proxomitron & Privoxy Detection — BrowserLeaks.com
• DNS Leak Test Tests whether your IP address is leaked by DNS DNS leak test
• DNS Spoofability Test Comprehensive analysis of DNS resolving nameservers GRC | DNS Nameserver Spoofability Test
• Do Not Track Detects support for Do Not Track Do Not Track — Testing Web-Browser for DNT, doNotTrack, and msDoNotTrack Support — BrowserLeaks.com
• Email IP Leak Finds out whether your email provider leaks your IP address Email Leak Tests
• Email Privacy Tester Tests whether your email client leaks back information to the sender of an email Email Privacy Tester
• Email Trace Run reverse email look ups or email header traces Trace Email & Tracking - Our Tool Will Trace To Locate A Email Owner
• Evercookie Test Checks if persistent data can be saved to the local user system. Samy Kamkar - evercookie - virtually irrevocable persistent cookies
• Firefox Addon Detector Checks if certain Firefox add-ons are installed Firefox Addon Detector
• Flash Player System Test Lists information about Flash Player Flash Player System Capabilities — System Info via Flash — BrowserLeaks.com
• Flash Player Test Checks whether Adobe Flash Player is installed Adobe - Flash Player
• FREAK Attack: Client Check Tests whether your browser is vulnerable to the Freak Attack FREAK Attack: Client Check
• Heartbleed test Tests a server for the Heartbleed vulnerability Test your server for Heartbleed (CVE-2014-0160)
• How's My SSL Checks SSL support and provides a rating How's My SSL?
• HTML5 Features Detection Checks HTML5 capabilities HTML5 Features Detection — Modernizr Helper — All Browser Features Detections in One Page — BrowserLeaks.com
• HTML5 Geolocation Test Tries to look up your location in the world HTML5 Geolocation API — Google Reverse Geocoding — W3C Geolocation API Demo Example — BrowserLeaks.com
• HTML5 Test Tests the browsers HTML5 capabilities The HTML5 test - How well does your browser support HTML5?
• IP Magnet Reveal which IP address BitTorrent clients reveal to peers and trackers. http://ipmagnet.services.cbcdn.com/
• Java Test Tests whether Java is installed Verify Java Version
• JavaScript Browser Information Lots of information about the browser's JavaScript capabilities JavaScript Browser Information — Installed Plug-Ins — IE Components — BrowserLeaks.com
• Mozilla Plugin Check Checks which plugins are installed in the Firefox web browser Keep your Firefox healthy with a quick checkup
• Popup Blocking Tests Tests how well your browser handles (blocks) popups Test your pop-up killer here! Find out if it your popup blocker stops all popup windows.
• RC4 Fallback Test Runs a Fallback Vulnerability test RC4.IO
• Redirect test page Run a series of redirect tests to find out how your browser handles those Redirect test page
• Silverlight Test Reveals information about Silverlight Silverlight Browser Information — Get System & Browser Information In Silverlight — BrowserLeaks.com
• SSL Check Reveals the SSL cipher used to connect to the website Fortify - SSL Encryption Check
• SSL Cipher Suite Details Lists all cipher suites supported by the browser https://cc.dcsec.uni-hannover.de/
• System Fonts Detection Uses CSS+JS, Flash, Silverlight or Java to detect fonts https://www.browserleaks.com/fonts
• The Joys of HTML Tests whether sites can fill your hard drive with data http://www.filldisk.com/
• Universal Plug n'Play (UPnP) Internet Exposure Test Tests whether your computer rejects UPnP probes https://www.grc.com/x/ne.dll?rh1dkyd2
• WebRTC Leak Test Tests whether local or public IP addresses are leaked https://www.perfect-privacy.com/webrtc-leaktest/
• http://whatismyipaddress.com/webrtc-test
• WebRTC Test Tests WebRTC capabilities https://test.webrtc.org/
• Whois Test Reveals IP address, host name, IP address location information and other IP related information https://www.browserleaks.com/whois
• Weak Diffie-Hellman and the Logjam Attack Tests whether your browser is vulnerable to the Logjam attack https://weakdh.org/

Advanced Tests

• Am I Unique Tests whether the browser is unique by checking the following information: User-agent, Accept, Content Encoding, Content Language, List of Plugins, Platform, Cookies, Do Not Track, Timezone, Screen Resolution, Use of local storage, Use of session storage, Canvas, WebGL, Fonts, Screen resolution, Language, Platform, Use of Adblock https://amiunique.org/fp
• Browser Spy Runs the following individual tests: Accepted Filetypes, ActiveX, Adobe Reader, Ajax Support, Bandwidth, Browser, Capabilities, Colors, Components, Connections, Cookies, CPU, CSS, CSS Exploit, Cursors, Date and Time, DirectX, Document, Do Not Track, .Net Framework, Email Verification, Flash, Fonts via Flash, Fonts via Java, Gears, Gecko, Geolocation, Google Chrome, Google Apps, GZip Support, HTTP Headers, HTTP, Images, IP Address, Java, JavaScript, Languages, Mathematical, MathML Support, MIME Types, Mobile, Network, Objects, Object Browser, Online/Offline, OpenDNS, OpenOffice.org, Opera Browser, Opreating System, Google PageRank, Ping, Plugins, Plugs, Prefetech, Proxy, Proxy, Personal Security Manager, QuickTime Player, RealPlayer, Resolution, Screen, Security, Shockwave, Silverlight, Sound Card, SVG, Text Formatting, File Upload, User/Agent, VBScript, WAP Device, WebKit, Web Server, Window, Windows Media Player http://browserspy.dk/
• Cross Browser Fingerprinting Test Tests locality, operating system, screen resolution, time zone, User Agent string, HTTP Accept, Plugins, Fonts http://fingerprint.pet-portal.eu/#
• IP Leak Runs the following tests: IP address, location, WebRTC IP detection, Torrent address detection, Geolocation detection, IP details, Geek details (user agent, referer, language, content encoding, document, system information, screen information, plugins, HTTP Request headers https://ipleak.net/
• IP Lookup Checks IP address, browser user agent, referer http://www.ghacks.net/ip/
• Five Star Privacy Checker Checks IP address, location, ISP, DNs, Blacklisted or Proxy use, IP location, Script usage such as ActiveX, JavaScript, Java and Flash. http://5who.net/
• Jondonym Full Anonymity Test Tests IP, location, net provider, Reverse DNS, Cookies, Authentication, Cache (E-Tags), HTTP Session, Referer, Signature, User-Agent, SSL Session ID, Language, Content Types, Encoding, Do Not Track, Upgrade-Insecure-Requests http://ip-check.info/?lang=en
• Panopticlick Tests Supercookies, Canvas Fingerprinting, Screen size and color depth, browser plugins, time zone, DNT header, HTTP Accept headers, WebGL fingerprinting, language, system fonts, platform, user agent, touch support and cookies https://panopticlick.eff.org/
• PC Flank A whole battery of tests including: Stealth Test, Browser Test, Trojans Test, Advanced Port Scanner, Exploits Test, PC Flank Leaktest http://www.pcflank.com/index.htm
• Onion Leak Test For CORS and WebSocket Requests http://cure53.de/leak/onion.php
• Whoer Comprehensive test suite that tests for IP address, location, ISP, OS, Browser, Anonymity settings such as DNS, Proxy, Tor, Anonymizer or Blacklist, Browser headers, whether JavaScript, Flash, Java, ActiveX or WebRTC are enabled, time zone, language settings, screen information, plugins, navigator information and HTTP headers https://whoer.net/

 

[Cats-4_Owners-2]

Thank you Martin Brinkmann at ghacks.net for all of these, and thank you exterminator20 at malwaretips.com for posting them!

 

[frogboy]

Well that was interesting and i did better than i thought i would.

 

[JasmineJasmine]

As I see it, in terms of privacy the keystone remains the user's IP. If it's not faked than all other privacy tools are somewhat useless, but if it is faked (with a good and reliable VPN) then all other privacy tools can make the difference and even the very pertinence of a hidden IP : not only a VPN user would be recognized if other tools are not active but moreover that user would be spotted as hiding himself, which is like a double slap! I may be wrong but, consequently, if IP is true then privacy tools aren't really worth it. Am I wrong? I forgot one thing though : how can a site be sure the user's spotted IP is not faked? if it has no means to be totally sure than my above argumentation would be invalidated. Reminds me "Secret Agent Man" sung by Austin Powers, way back in time

 

[hjlbx]

LOL... if anyone tries to successfully "pass" every single one of these tests - every single time - then they will drive themselves insane.

 

[tom-programmer]

Please add one more tool to your list
DNS Leak Test - bash.ws - tests for dns IP leak and other kind of IP leaks (email leak, torrent leak and browser leak). Supports IPv6 testing and has a command line interface.