Hacking Intranet Websites from the Outside – “JavaScript malware just got a lot more dangerous”, will be particularly special and well beyond anything previously demonstrated in the past. JavaScript Malware grabs your web browsers cookies/history, discovers your internal NAT’ed IP address, port scans behind the firewall, and exploits intranet web-enable devices from the inside. Of course the PoC code also acts like a trojan horse by keystroke recording and tracking your every move. No browser exploits required.”]
Source: https://blog.jeremiahgrossman.com/2006/07/my-black-hat-usa-2006-presentation.html