Collected research

Using CSS to De-Anonymize

ha.ckers.org web application security lab

Applies Grossman's CSS history hack to internal hostnames such as intranet.company.com to identify which organisation a visitor belongs to, defeating network-level anonymisers and referrer stripping. If the history is clear, the victim's browser can be forced to the intranet URL first to seed it. Enables organisation-targeted attacks.

Record

Document

ha.ckers.org web application security lab

Published by

ha.ckers.org

Topic

Other

In the archive

• Collected in the 2006 research round

Tags

• css
• deanonymization
• info-leak
• side-channel
• browser-fingerprinting
• proxy
• prior-art-extension

This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.