Assessing Internal Network with JavaScript, Despite Same-Origin Policy March 19, 2019 https://www.bleepingcomputer.com/ne...k-with-javascript-despite-same-origin-policy/ Forcepoint: "Attacking the internal network from the public Internet using a browser as a proxy" (PDF - 880 KB): https://www.forcepoint.com/resources/reports/attacking-internal-network-public-internet-using-browser-proxy