Headless Browser · passage 6 of 8

Port Scanning

Text · Headless Browser/README.md

For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.

Port Scanning: Timing attack * Dynamically insert an `<img>` tag pointing to a hypothetical closed port. Measure time to onerror. * Repeat at least 10 times → average time to get an error for a closed port * Test random port 10 times and measure time to error * If `time_to_error(random_port) > time_to_error(closed_port)*1.3` → port is opened **Consideration**: * Chrome blocks by default a list of "known ports" * Chrome blocks access to local network addresses except localhost through 0.0.0.0

Every one of the 8 is a mark on the map. Named now: 1 to 8, reading order first.

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Source: PayloadsAllTheThings by Swissky and contributors, MIT License. For authorised testing only.