SMRTR ProgrammingJan 17, 2025Dev.to

100% CSS: Fetch and Exfiltrate 512 bits of Server-Generated Data Embedded in an Animated SVG

SMRTR summary

This summary outlines a new technique for extracting 512 bits of data from an animated SVG using only CSS, without JavaScript. The method encodes data in the SVG's viewBox height, which is then read and processed by CSS. Key steps include generating an SVG with animated viewBox heights, using CSS view-timeline and a "CPU Hack" to measure and extract data, implementing a checksum algorithm, and storing and processing 32 16-bit values plus length and checksum. This technique demonstrates advanced capabilities of modern web technologies, using only HTML and CSS for complex data exfiltration.

SMRTR provides this summary for quick context. The original article belongs to Dev.to.

Read the original article
SMRTR Programming

Get the next batch of curated summaries in your inbox.

This archive is built from SMRTR newsletter summaries. Subscribe for hand-picked stories without the extra noise.