[WEB SECURITY] javascript based network scanners

[allodoxa]

Hello list,

I was playing with the idea making a JavaScript based network scanner /
CSRF exploiting tool. I know the idea in itself isn't very new, but I
feel somehow it never really got the credit that it deserved and still
believe it's a valid attack vector and with some preparation and minimal
tweaking/configuring of the scanning engine before sending it to a
target will yield very good results.
Anyways; I made a quick write-up of my ideas/findings. Any feedback on
the matter would be greatly appreciated.

http://allodox.wordpress.com/2012/04/21/javascript-based-network-scanners/

Regards,

Raf