Location remains revealed

[YesTrustMe]

When I select Hong Kong for example, and my physical location is in Los Angeles, TOP WINDOW and INITIAL LOAD remain unchanged and show Los Angeles. Only FRAME and WEB WORKER show Hong Kong.

[z0ccc]

There is a slight delay between when a new tab is opened and the debugger starts mocking the data. This allows for websites to get the original value of the data before it is changed. After the initial loading of a tab, this will no longer be an issue.

Does it continue to be an issue when you reload the page?

[NDevTK]

Yep :)

w = open();
w.eval('alert(navigator.userAgent)');

[z0ccc]

w = open();
w.eval('alert(navigator.userAgent)');

That only works because its an alert opening in a new tab (tab initialized issue). But how can you save the data from an alert? If you can't then its not very useful.

When you console.log it, Vytal spoofs it.

w = open();
w.eval(console.log(navigator.userAgent));

[NDevTK]

onmessage = console.log;
w = open();
w.eval('opener.postMessage(navigator.userAgent)');

[z0ccc]

Very interesting. I will look into fixing this. Although since it opens a new blank tab its not a very discrete method.

Thanks