What all information can a website get about your computer?

 

I know, IP

what else?

What all information can a website get about your computer?

 

I know, IP

what else?

 

Provider + which browser he is using.

 

And cookies I guess

Edited July 24, 201510 yr by Skizow

Provider + which browser he is using.

 

And cookies I guess

Can a website get my modem information? My PC hardware information? MAC address?

Can they see the massive amount of porn I watch?

Can a website get my modem information? My PC hardware information? MAC address?

Without an additional download:

  a) No.

  b) No.

  c) No.

Without an additional download:

  No.

  No.

  No.

 

You can use ActiveXObject objects in js and get the MAC and hardware info if the PC is using IE  (not sure about the other browsers), I've also read about WebGL exploits to get hardware info (primarily GPU stuff but I think the article also mentioned CPU info) and that API is cross-browser so...

 

Not sure if JavaScript scripts count as additional downloads either considering you can embed them in HTML files.

 

The web ain't all that safe :x

You can use ActiveXObject objects in js and get the MAC and hardware info if the PC is using IE  (not sure about the other browsers), I've also read about WebGL exploits to get hardware info (primarily GPU stuff but I think the article also mentioned CPU info) and that API is cross-browser so...

 

Not sure if JavaScript scripts count as additional downloads either considering you can embed them in HTML files.

 

The web ain't all that safe :x

That only works in IE and probably requires user to allow plugin to run, if you figure out how to do it in a modern browser golf clap for you.

 

Just double checked, you can get some hardware info in some browsers, but not a complete picture afaik.

Through use of various flash/java exploits you can get a lot of information. Been a long time since I looked into this stuff but I believe CVE-2014-0543 (not even sure if that's the right CVE) could grab hardware info since it could execute arbitrary code.

 

The standard information someone can get from visiting a website without exploits includes:

• Whether or not you have JS enabled
• Whether or not you have a form of adblock
• Your IP
• Your country and rough area (through your IP)
• Your browser
• Your OS
• Your .NET version (some user agents submit this information, I believe only IE does this but no idea)
• Whether or not you are using a transparent proxy
• Your screen resolution and the resolution of your browser window
• Your local time + timezone
• Your referrer (the last site you visited)

Here's a little example of the sheer amount of information you can grab from your user agent string:

Mozilla/5.0 (Windows NT 6.1; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0

-I am using Firefox, version 39.0

-I am using Windows 7 (NT 6.1)

-I am running a 32-bit browser on 64-bit architecture (WOW64)

-I use the Gecko CSS engine (default firefox engine)

-My Gecko engine is version "2010-01-01"

Can they get a computer ID / serial number off a website?

Like what if i format my PC, will it still be the same?

Can they get a computer ID / serial number off a website?

Like what if i format my PC, will it still be the same?

i dont think your MAC Address can change (correct me if im wrong)

Everything. One minute you're feeling relatively safe, then you enter OSBot.org and then @Maldesto is sat in the tree outside your bedroom window with binoculars in his hands.