---
id: 7360
title: "XSLeaking with my best bud SOP"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/searching-against-the-flow/"
published_at: "2022-04-15T11:30:46Z"
tags: ["browser-security", "side-channel", "xs-leak", "cross-origin", "sop", "dynamics-crm"]
phying_url: "https://phying.com/item/7360"
lang: en
---

# XSLeaking with my best bud SOP

## Summary

The author revisits an XS-Leak based on the browser's global connection pool - timing the 256th socket to infer victim request duration - and applies it to Microsoft Dynamics CRM on-premise.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2022-04-15T11:30:46Z
- **Original:** https://blog.viettelcybersecurity.com/searching-against-the-flow/
- **Phying News:** https://phying.com/item/7360