Comments on: JavaScript Visited Link Scanner

By: Security vs. Accessibility | GNUCITIZEN

Security vs. Accessibility | GNUCITIZEN — Thu, 01 Jan 2009 21:30:12 +0000

[...] lot of noise has been generated around the CSS History Hack. Some people are skeptical about it and think that it can be fixed by installing the latest Firefox [...]

By: JavaScript Authorization Forcer | GNUCITIZEN

JavaScript Authorization Forcer | GNUCITIZEN — Thu, 01 Jan 2009 18:23:39 +0000

[...] on your IP, a class C range is enumerated using the Port Scanning or Visited Link Scanning [...]

By: pdp

pdp — Wed, 09 Apr 2008 15:06:16 +0000

the technique has been improved drastically since its discovery. You should be able to find better code in AttackAPI. Nevertheless, the current version of AttackAPI is a bit broken. I will try to fix it at some point in the future when I have got some time.

By: dude1

dude1 — Wed, 09 Apr 2008 14:52:20 +0000

yeah no go in ie6 windows for me… kind of pissed I didn’t test it on the site beforehand. :(

By: kalyani

kalyani — Thu, 29 Nov 2007 22:29:32 +0000

Hey, I looked at java script, can you explain me where are you stealing the history from, I didn’t get the trick

By: pdp

pdp — Mon, 29 Oct 2007 19:46:12 +0000

alf, that might be the case. keep in mind though that the latest stuff are inside AttackAPI.

By: alf

alf — Sun, 28 Oct 2007 23:17:26 +0000

Your demo doesn’t work in Safari. (the approach works, though)

By: pdp

pdp — Sat, 29 Sep 2007 07:33:42 +0000

jk, it is useful if you want to detect where the user has been before arriving on the malicious site.

By: jk

jk — Fri, 28 Sep 2007 06:46:43 +0000

what is this use for?

By: Nadav

Nadav — Tue, 28 Aug 2007 09:32:26 +0000

Hi, I have tested this javascript-visited-link-scanner on several computers that have IE7 installed. Unfortuantly it didn’t worked. Am i doing something wrong, Or this a known problem with this java script scanner?

By: pdp

pdp — Thu, 07 Jun 2007 19:10:19 +0000

Well, you need a server that will handle all the gathered data and then store it into a simple text file. You can use PHP or any other scripting language for this purpose.

By: Kalyani

Kalyani — Thu, 07 Jun 2007 18:08:32 +0000

Wow, the code looks awesome, but is there any way that I store all the visited pages to a text document. I need it for my project.

By: Rizm Interaction » Blog Archive » Where have you been recently ?

Rizm Interaction » Blog Archive » Where have you been recently ? — Thu, 12 Oct 2006 08:53:21 +0000

[...] http://blog.slimc.com/prototyp.....at-a-time/ http://blog.slimc.com/javascript-css-no-privacy/ http://www.gnucitizen.org/blog.....k-scanner/ http://www.desordre.net/blog/blog-archives.php3 http://www.cs.indiana.edu/~sstamm/projects/recon/ http://crypto.stanford.edu/sameorigin/ http://seclists.org/bugtraq/2002/Feb/0271.html https://bugzilla.mozilla.org/show_bug.cgi?id=57351 http://milov.nl/2520 http://www.doxdesk.com/persona.....4-css.html http://www.quirksmode.org/dom/getstyles.html [...]