Browser History Length.
Publicated on :
1182458294
This next snippet may sound n00b simple, but I'm actually amazed that browsers let me read out the history length these days. I never actually tried it out since maybe 4 years because I always figured it was blocked nowadays, wrong. The history length in browsers are only set when page history is set to be remembered. So I thought about using this to determine if someone has enabled page history yes or no. Which is good reconnaissance because we now can base attacks on this info without a lot of analyzing and testing with the CSS browser history test. It's a small one, and I am still thinking of more ways to abuse this info. Anyway, it could come in handy someday.