Re: Checking existence of firewalled URLs via javascript's script.onload

[Jeremy Stanley <fungi () yuggoth org>]

On 2023-04-20 10:58:42 +0300 (+0300), Georgi Guninski wrote:
[...]
> I can't imagine how can you check for open port/URL without
> javascript, can you give reference or explanation? You can make
> request, but without javascript you can't read the result.

If the attacker controls the destination, they can simply record
whether the connection is successfully established at the remote
end. While this may not tell them much about what specific hosts the
victim has access to reach, it can easily leak general egress
filtering information.
-- 
Jeremy Stanley

Attachment: signature.asc
Description: