Using the victim's browser as a proxy, the code can reach internal hosts and ... open-source tools available. The HTML file with our embedded port scanning JavaScript is placed on some other ...