Web Hack List

Top 10 winner

CSS History Hack In Firefox Without JavaScript for Intranet Portscanning

The CSS visited-link history hack is combined with forced browsing to portscan an intranet with JavaScript disabled. Because the visited test is instant and needs no reload, styled links to candidate internal hosts reveal which ones the browser reached. It worked only in Firefox, was slow, and was noisy when auth prompts fired.

Record

Published by
ha.ckers.org
Date
Topic
Browser

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .