Web Hack List

Other nomination

itms Decloaking

An iframe pointing at itms:www.apple.com:80@ha.ckers.org bypasses the iTunes handler's restriction on which domain it may contact. Because the handler follows the operating system's network settings rather than the browser's proxy, the request leaves the user's real external IP, decloaking someone browsing through a proxy. It was added to HD Moore's decloak.net.

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.