Prrof of concept of port scanning arbitary IP addresses from nothing but client side Javascript. From the code it looks like creating IFRAMEs and setting the SRC attribute to try to connect to ports, and has a list of web server signatures to check against. Pretty scary in what client side JS can do. I think I’ll keep on surfing in w3m and skip all Ajax goodies. Via Security Now.
Scott Yang's Playground
Faith, Technology and Randomness in Life, According to Scott
Aug 14 2006