3 ms·
does teamviewer start any webserver on a local port which the banking page could connect to and check a _running_ instance? Would be much more interesting for f
by cyptus 4y ago
does teamviewer start any webserver on a local port which the banking page could connect to and check a _running_ instance? Would be much more interesting for fraud detection than a _installed_ instance
- thefreeman 4y agoyou can't query local services from a remote webpage unless you use a dns rebinding attack which is probably a bit over the top for "whitehat" activity.
- cyptus 4y agoshouldn’t it work by using websockets to localhost?
- smallerfish 4y agoSort of, and only with a lot of effort: https://incolumitas.com/2021/01/10/browser-based-port-scanning/ https://incolumitas.com/2021/01/10/browser-based-port-scanni...
- cyptus 4y agobut only because the local service in this example is not prepared to accept the websocket connection, the teamviewer client would be able to do this to enable some functions on the teamviewer website if a instance is running
- TillE 4y agoThe point of a check like this wouldn't be to bypass a firewall, just to see if the port is open on your public IP.
- ev1 4y agoI have encountered numerous sites that port scan localhost via websocket/img onerror/etc.
- mattw2121 4y agoI can confirm 100% that there are banks checking to see if teamviewer ports are open.