« Vulnerability Scanning Web 2.0 Client-Side Components | Main | Microsoft Anti-Cross Site Scripting Library V1.5 is Released »

Browser Port Scanning without JavaScript

Jeremiah 'Lord Nikon' Grossman Writes "Since my Intranet Hacking Black Hat (Vegas 2006) presentation, I've spent a lot of time researching HTML-only browser malware since many experts now disable JavaScript. Imagine that! Using some timing tricks, I've discovered a way to perform Intranet Port Scanning with a web browser using only HTML. I ts really hacky, but it can do the job."

Article Link: http://jeremiahgrossman.blogspot.com/2006/11/browser-port-scanning-without.html


Feed You can follow this conversation by subscribing to the comment feed for this post.

All Comments are Moderated and will be delayed!