Minor IE System Info Disclosure

• Previous message: Bruce Campbell: "vulnerability diagnosis in "nessus" incorrect..."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I just stumbled across this the other day when i was playing... a remote
server can poll a surfers computer and determin some applications they
have installed by trying a load an image with the file:// protocol.

if the file is found on disk the javascript onload event fires..if not
the onerror event fires..

http://geocities.com/dzzie/sys_snoop1.html


you can also check out the remote system by setting an iframe src=file://
to common paths to txt or xml files..if they are found they will raise
the onload event (oddly enough .html extension wont raise event)

http://geocities.com/dzzie/sys_snoop2.html

• Next message: Renaud Deraison: "Re: vulnerability diagnosis in "nessus" incorrect..."
• Previous message: Bruce Campbell: "vulnerability diagnosis in "nessus" incorrect..."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Nov 04 2001 - 19:45:02 PST