/devtools-timing-attack

timing attack to check if devtools are open
  1. JavaScript 71.7%
  2. HTML 28.3%
Switch branches/tags
Nothing to show
Find file
Clone or download

Clone with HTTPS

Use Git or checkout with SVN using the web URL.

Open in Desktop Download ZIP

Launching GitHub Desktop...

If nothing happens, download GitHub Desktop and try again.

Launching GitHub Desktop...

If nothing happens, download GitHub Desktop and try again.

Launching Xcode...

If nothing happens, download Xcode and try again.

Launching Visual Studio...

If nothing happens, download the GitHub extension for Visual Studio and try again.

Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
README.md
attack.js
index.html

README.md

devtools presence detector

(chrome and firefox, latest versions only)

This is a PoC timing attack of detecting if devtools are open or not on web browsers. It exploits the fact that slow code is generated by the JS VM when a debugger is present.

Live demo at: http://awal.js.org/devtools-timing-attack

License

WTFPL

Author

Awal Garg