Re^4: BLOGGING and/or WIKI modules for Dancer2

[Corion]

Using WebRTC WebSockets, you can instruct the browser to connect to arbitrary IP addresses within your local network to arbitrary ports and speak arbitrary TCP protocols to it. So you don't even need DNS rebinding but can write and deliver a port scanner in HTML+Javascript.

[Anonymous Monk]

From what I can tell WebRTC isnt the same as WebSockets, so, not really seeing the issue :)

[Corion]

Sorry, my error - I meant to write WebSockets, not WebRTC.

[Anonymous Monk]

:) ok, I see, its the old iframe information gathering thing :) Excuse Me Sir, Your WebRTC Is Leaking | Hacker News / http://security.stackexchange.com/questions/94783/why-is-my-internal-ip-address-private-visible-from-the-internet