Top 10 winner

Cross-Site Port Attacks

Riyaz Ahemed Walikar · riyazwalikar.com

Part one of three naming Cross Site Port Attacks (XSPA): an application that fetches a user-supplied URL can be driven to port-scan intranet and Internet hosts, grab banners, fingerprint internal apps and read local files. Shows the vulnerable PHP patterns file_get_contents, fsockopen and curl_exec, and lists finds in Facebook, Google, Mozilla, Yahoo and Pinterest.

Record

Researcher

Riyaz Ahemed Walikar

Published by

riyazwalikar.com

In the archive

• Ranked #6 in the 2012 Top 10 Web Hacking Techniques

Related sources

• Part 2
• Part 3

Tags

• ssrf
• php
• info-leak
• url-parsing
• bug-bounty
• lfi
• owasp-a01-2021
• owasp-a03-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of Riyaz Ahemed Walikar, first published at the original source. Preserved copies are kept so the citation survives its host.