Re^4: BLOGGING and/or WIKI modules for Dancer2

Using ~~WebRTC~~ WebSockets, you can instruct the browser to connect to arbitrary IP addresses within your local network to arbitrary ports and speak arbitrary TCP protocols to it. So you don't even need DNS rebinding but can write and deliver a port scanner in HTML+Javascript.

Comment on Re^4: BLOGGING and/or WIKI modules for Dancer2

Replies are listed 'Best First'.
Re^5: BLOGGING and/or WIKI modules for Dancer2 by Anonymous Monk on Dec 14, 2016 at 09:47 UTC
From what I can tell WebRTC isnt the same as WebSockets, so, not really seeing the issue :)	[reply]
Re^6: BLOGGING and/or WIKI modules for Dancer2 by Corion (Patriarch) on Dec 14, 2016 at 09:49 UTC
Sorry, my error - I meant to write WebSockets, not WebRTC.	[reply]
Re^7: BLOGGING and/or WIKI modules for Dancer2 by Anonymous Monk on Dec 14, 2016 at 10:18 UTC
:) ok, I see, its the old iframe information gathering thing :) Excuse Me Sir, Your WebRTC Is Leaking \| Hacker News / http://security.stackexchange.com/questions/94783/why-is-my-internal-ip-address-private-visible-from-the-internet	[reply]