3 ms·
you can't query local services from a remote webpage unless you use a dns rebinding attack which is probably a bit over the top for "whitehat" activity.
by thefreeman 4y ago
you can't query local services from a remote webpage unless you use a dns rebinding attack which is probably a bit over the top for "whitehat" activity.
- cyptus 4y agoshouldn’t it work by using websockets to localhost?
- smallerfish 4y agoSort of, and only with a lot of effort: https://incolumitas.com/2021/01/10/browser-based-port-scanning/ https://incolumitas.com/2021/01/10/browser-based-port-scanni...
- cyptus 4y agobut only because the local service in this example is not prepared to accept the websocket connection, the teamviewer client would be able to do this to enable some functions on the teamviewer website if a instance is running
- TillE 4y agoThe point of a check like this wouldn't be to bypass a firewall, just to see if the port is open on your public IP.
- ev1 4y agoI have encountered numerous sites that port scan localhost via websocket/img onerror/etc.