Collected research

Res:// Protocol Local File Enumeration

Billy (BK) Rios » More URI Stuff… (IE’s Resouce URI)

xssniper · xs-sniper.com

Internet Explorer's built-in res:// protocol reads resources out of local DLLs and executables, so a remote page can probe for a given file and report back whether it exists. That enumerates installed software and often its exact version, letting an attacker select targeted exploits. The file need not be installed, only present.

Record

Document

Billy (BK) Rios » More URI Stuff… (IE’s Resouce URI)

Researcher

xssniper

Published by

xs-sniper.com

Topic

Other

In the archive

• Collected in the 2007 research round

Related sources

• IE local software enumeration
• URI Use and Abuse Whitepaper

Tags

• info-leak
• url-parsing
• browser-fingerprinting
• cve
• detection
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of xssniper, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.