Collected research

Network Scanning with HTTP without JavaScript

Ilia Alshanetsky extends Grossman's JavaScript-free port scan by serving multipart/x-mixed-replace from PHP, so each segment replaces the page with a new <link> probe plus a beacon <img>, giving a 3-second timeout per host without iframes. A companion scan.php logs IP and arrival time per session, and the last-scanned IP can be resumed across visits to sweep a whole subnet.

Record

Published by

iBlog - Ilia Alshanetsky

Topic

HTTP

In the archive

• Collected in the 2006 research round

Tags

• prior-art-extension
• php
• http
• timing-attack
• side-channel
• info-leak

This page is the archive's own catalogue record. The research is the work of iBlog - Ilia Alshanetsky, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 August 2026.