Top 10 winner

CSS History Hack In Firefox Without JavaScript for Intranet Portscanning

The CSS visited-link history hack is combined with forced browsing to portscan an intranet with JavaScript disabled. Because the visited test is instant and needs no reload, styled links to candidate internal hosts reveal which ones the browser reached. It worked only in Firefox, was slow, and was noisy when auth prompts fired.

Record

Date

25 January 2010

In the archive

• Ranked #9 in the 2010 Top 10 Web Hacking Techniques

Related sources

• Companion demonstration

Tags

• css
• info-leak
• side-channel
• xsleak

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.