Comments on: JavaScript Port Scanner http://www.gnucitizen.org/blog/javascript-port-scanner/ Information Security Think Tank Sat, 02 Feb 2013 17:50:40 +0000 hourly 1 http://wordpress.org/?v=3.4.1 By: Teching » Javascript portscanner http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-132434 Teching » Javascript portscanner Fri, 27 May 2011 11:46:09 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-132434 [...] is de url waar ik het stukje javascript heb gevonden http://www.gnucitizen.org/blog/javascript-port-scanner/ volgens deze post moet dit het javascriptje het doen in de meeste browsers alleen firefox staat [...] [...] is de url waar ik het stukje javascript heb gevonden http://www.gnucitizen.org/blog.....t-scanner/ volgens deze post moet dit het javascriptje het doen in de meeste browsers alleen firefox staat [...]

]]> By: Security vs. Accessibility | GNUCITIZEN http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-130023 Security vs. Accessibility | GNUCITIZEN Tue, 26 Apr 2011 21:23:32 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-130023 [...] The problem with the CSS History Hack is that malicious JavaScript code that silently dumps your history is not malicious at all. The code makes use of a feature which has never been designed with security in mind and it effects everything that supports CSS and DOM. Removing this feature will cause a lot of accessibility problems. The same applies to many other techniques that recently have been dev-elo-ped. [...] [...] The problem with the CSS History Hack is that malicious JavaScript code that silently dumps your history is not malicious at all. The code makes use of a feature which has never been designed with security in mind and it effects everything that supports CSS and DOM. Removing this feature will cause a lot of accessibility problems. The same applies to many other techniques that recently have been dev-elo-ped. [...]

]]> By: MalaRIA – Estoy en tu navegador, navegando tus webs. « LeonarDocs http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-129765 MalaRIA – Estoy en tu navegador, navegando tus webs. « LeonarDocs Tue, 15 Mar 2011 20:42:31 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-129765 [...] el atacante puede usar encabezados referencia(referer headers), scanners de puerto Javascript (javascript port scanners), hacks historial CSS (CSS history hacks), etc. Jeremiah Grossman habló de atacar a la intranet [...] [...] el atacante puede usar encabezados referencia(referer headers), scanners de puerto Javascript (javascript port scanners), hacks historial CSS (CSS history hacks), etc. Jeremiah Grossman habló de atacar a la intranet [...]

]]> By: MalaRIA – Estoy en tu navegador, navegando tus webs. « LeonarDocs http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-128478 MalaRIA – Estoy en tu navegador, navegando tus webs. « LeonarDocs Thu, 08 Apr 2010 23:40:57 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-128478 [...] el atacante puede usar encabezados referencia(referer headers), escáneres de puerto Javascript (javascript port scanners), hacks historial CSS (CSS history hacks), etc. Jeremiah Grossman habló de atacar a la intranet [...] [...] el atacante puede usar encabezados referencia(referer headers), escáneres de puerto Javascript (javascript port scanners), hacks historial CSS (CSS history hacks), etc. Jeremiah Grossman habló de atacar a la intranet [...]

]]> By: » MalaRIA – nowe “hackerskie” narzÄ™dzie -- Niebezpiecznik.pl -- http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-128474 » MalaRIA – nowe “hackerskie” narzÄ™dzie -- Niebezpiecznik.pl -- Wed, 07 Apr 2010 17:46:10 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-128474 [...] można skorzystać z opisywanego przez nas CSS-History-Hack lub uruchomić jeden z javascriptowych skanerów. Erlend, twórca MalaRII, jako pożyteczne źródÅ‚o wiedzy w tym zakresie wskazuje na BlackHatowÄ… [...] [...] można skorzystać z opisywanego przez nas CSS-History-Hack lub uruchomić jeden z javascriptowych skanerów. Erlend, twórca MalaRII, jako pożyteczne źródÅ‚o wiedzy w tym zakresie wskazuje na BlackHatowÄ… [...]

]]> By: JavaScript Authorization Forcer | GNUCITIZEN http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-124976 JavaScript Authorization Forcer | GNUCITIZEN Thu, 01 Jan 2009 18:23:09 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-124976 [...] on your IP, a class C range is enumerated using the Port Scanning or Visited Link Scanning [...] [...] on your IP, a class C range is enumerated using the Port Scanning or Visited Link Scanning [...]

]]> By: XSSing the Lan | GNUCITIZEN http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-124497 XSSing the Lan | GNUCITIZEN Fri, 28 Nov 2008 15:44:58 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-124497 [...] LAN and where the border router is located. This is usually achieved in a way similar to how the JavaScript port scanner [...] [...] LAN and where the border router is located. This is usually achieved in a way similar to how the JavaScript port scanner [...]

]]> By: Jason Miller http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-124344 Jason Miller Sat, 15 Nov 2008 01:27:39 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-124344 Perhaps try using a script, link or style tag to test - I don't think there are as many port restrictions for the HTTP Request methods used in those implementations. Perhaps try using a script, link or style tag to test – I don’t think there are as many port restrictions for the HTTP Request methods used in those implementations.

]]> By: Jason Miller http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-124343 Jason Miller Sat, 15 Nov 2008 01:25:56 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-124343 The port scanner cannot detect ports that are blocked by your browser. The only way you could scan ports like 25 and 443 would be to use a server-side proxy. The port scanner cannot detect ports that are blocked by your browser. The only way you could scan ports like 25 and 443 would be to use a server-side proxy.

]]> By: yvrelna http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-123953 yvrelna Tue, 07 Oct 2008 19:06:09 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-123953 Worse, I scanned port <code>jfivsdcd</code> and it's open... I wonder whether there is an alphabet port Worse, I scanned port jfivsdcd and it’s open… I wonder whether there is an alphabet port

]]> By: Laboratorios DragonJAR » Laboratorios: Hacking - Técnicas y contramedidas - Scanning IV http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-121736 Laboratorios DragonJAR » Laboratorios: Hacking - Técnicas y contramedidas - Scanning IV Tue, 13 May 2008 15:24:58 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-121736 [...] 39 - Escaneo de puertos abiertos Herramienta: JavaScript Port Scanner Prerequisitos:Ninguno Contramedidas: Firewalls Descripción: El recurso JavaScript Port [...] [...] 39 – Escaneo de puertos abiertos Herramienta: JavaScript Port Scanner Prerequisitos:Ninguno Contramedidas: Firewalls Descripción: El recurso JavaScript Port [...]

]]> By: willem http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-119067 willem Sat, 19 Apr 2008 17:12:01 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-119067 I've tested Firefox in safemode, but same result. Thanks anyway for your response :) I’ve tested Firefox in safemode, but same result. Thanks anyway for your response :)

]]> By: pdp http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-119052 pdp Sat, 19 Apr 2008 15:19:49 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-119052 hmm, not sure. It could be because of NoScript or any other plugin that you may have installed. However, I've already suggested that browser port-scanning is not extremely accurate. hmm, not sure. It could be because of NoScript or any other plugin that you may have installed. However, I’ve already suggested that browser port-scanning is not extremely accurate.

]]> By: willem http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-119050 willem Sat, 19 Apr 2008 15:07:43 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-119050 Hi Is it possible that some kind of protection is built in into Firefox to prevent JS portscanning? Whatever port I scan, I always get the answer open. Even with completly different hosts and timeout values. TIA Willem. Hi

Is it possible that some kind of protection is built in into Firefox to prevent JS portscanning? Whatever port I scan, I always get the answer open. Even with completly different hosts and timeout values.

TIA

Willem.

]]> By: pdp http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-117382 pdp Tue, 25 Mar 2008 12:10:15 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-117382 JavaScript port scanning is not very accurate as you can see :) but it does work in most of the cases. though, I haven't updated this code for a long time. also, adjust the timeout value as this is crucial in order to perform more accurate scans. moreover, <code>333333333333333333333333333</code> is kind of a big number. :) JavaScript port scanning is not very accurate as you can see :) but it does work in most of the cases. though, I haven’t updated this code for a long time. also, adjust the timeout value as this is crucial in order to perform more accurate scans. moreover, 333333333333333333333333333 is kind of a big number. :)

]]> By: thisiswrong http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-117377 thisiswrong Tue, 25 Mar 2008 10:44:40 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-117377 this is all wrong ........ i get <pre><code>www.gnucitizen.org:333333333333333333333333333 open</code></pre> how could this be possible..... this is all wrong …….. i get

http://www.gnucitizen.org:3333.....3333333333 open

how could this be possible…..

]]> By: Laboratorio: Hacking - Técnicas y contramedidas - Scanning IV | La Comunidad DragonJAR http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-89880 Laboratorio: Hacking - Técnicas y contramedidas - Scanning IV | La Comunidad DragonJAR Fri, 21 Dec 2007 20:35:26 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-89880 [...] 39 - Escaneo de puertos abiertos Herramienta: JavaScript Port Scanner Prerequisitos:Ninguno Contramedidas: Firewalls Descripción: El recurso JavaScript Port [...] [...] 39 – Escaneo de puertos abiertos Herramienta: JavaScript Port Scanner Prerequisitos:Ninguno Contramedidas: Firewalls Descripción: El recurso JavaScript Port [...]

]]> By: La Organización DragonJAR | Laboratorio: Hacking - Técnicas y contramedidas - Scanning IV http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-87986 La Organización DragonJAR | Laboratorio: Hacking - Técnicas y contramedidas - Scanning IV Mon, 17 Dec 2007 18:44:57 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-87986 [...] 39 - Escaneo de puertos abiertos Herramienta: JavaScript Port Scanner Prerequisitos:Ninguno Contramedidas: Firewalls Descripción: El recurso JavaScript Port [...] [...] 39 – Escaneo de puertos abiertos Herramienta: JavaScript Port Scanner Prerequisitos:Ninguno Contramedidas: Firewalls Descripción: El recurso JavaScript Port [...]

]]> By: pdp http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-44677 pdp Fri, 31 Aug 2007 09:31:01 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-44677 kwela, yes port scanning techniques with JavaScript are not as accurate as the traditional ones. However, by tunning the script a bit you may get more accurate results. Keep in mind that this is still a very experimental field. kwela, yes port scanning techniques with JavaScript are not as accurate as the traditional ones. However, by tunning the script a bit you may get more accurate results. Keep in mind that this is still a very experimental field.

]]> By: kwela http://www.gnucitizen.org/blog/javascript-port-scanner/comment-page-1/#comment-44394 kwela Thu, 30 Aug 2007 09:20:59 +0000 http://www.gnucitizen.org/PHP-INF/wordpress/?p=20#comment-44394 it seems that port 25 is always open? it seems that port 25 is always open?

]]>