Jeremiah 'Lord Nikon' Grossman Writes "Since my Intranet Hacking Black
Hat (Vegas 2006) presentation, I've spent a lot of time researching
HTML-only browser malware since many experts now disable JavaScript.
Imagine that! Using some timing tricks, I've discovered a way to
perform Intranet Port Scanning with a web browser using only HTML. I
ts really hacky, but it can do the job."
Article Link: http://jeremiahgrossman.blogspot.com/2006/11/browser-port-scanning-without.html