Collected research
Mapping a web browser to GPS coordinates via router XSS + Google Location Services without prompting the user
samy kamkar - advanced geolocation (physical address from router exploitation)
An XSS in the Verizon FiOS router reads the router's own MAC address over AJAX and sends it to the attacker, who submits it to Google Location Services. That HTTP service maps router MACs to coordinates, so the victim is geolocated accurately with no browser prompt, no GPS and no IP-based guessing. Google later blocked the tool and changed the service.
Record
- Document
- samy kamkar - advanced geolocation (physical address from router exploitation)
- Researcher
- Samy Kamkar
- Published by
- sa.my
- Topic
- XSS
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Samy Kamkar, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .