Other nomination

Internet Archiver Port Scanner

WhiteAcid's finding that archive.org fetches any host and port on demand, speaking HTTP at an FTP service and logging the crawler's IP as the source. Response time separates the cases, 6-9s open against 23-25s closed, giving a TCP port scanner run through the archive that can also be aimed at RFI targets.

In the archive

• Nominated for the 2007 Top 10 Web Hacking Techniques

Tags

• ssrf
• abuse-of-functionality
• timing-attack
• side-channel
• proxy
• detection
• owasp-a04-2021
• owasp-a09-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.