views:

68

answers:

2

For many years now, it has been known that a website can use CSS/JS to determine websites that have been visited by a user, e.g.

http://news.softpedia.com/news/Mozilla-to-Fix-8-Year-Old-Browser-History-Leak-Issue-139015.shtml http://yro.slashdot.org/story/09/07/02/1317205/Your-Browser-History-Is-Showing

There are sites that will use the CSS/JS hack to figure out which websites you have displayed, but I was wondering if anybody knew of a service that will create a URL that I can send to somebody (or put in an invisible iframe) and will then surreptitiously do the browser history hack when the URL is visited and e-mail the results to me?

I know I can set up my own site with BEEF (browser exploitation framework), but I'm lazy.

Thank you.

Frank

A: 

I don't see a reason not to help this man.

Here ya go: http://securityvulns.com/

hitautodestruct
A: 

Did you guys even read my question?

All I wanted to know of was a site where I can point a user to, and then the site will then perform the CSS/JS history hack and e-mail the results to me.

I can do this with BEEF, but then I'd have to host it and I don't want to do this.

Frank

Frank Puccino