4 ms·
It probably goes without saying, but you should definitely use some kind of sandboxed browser/session if you want to try this. One annoying URL someone could su
by Retr0spectrum 10y ago
It probably goes without saying, but you should definitely use some kind of sandboxed browser/session if you want to try this. One annoying URL someone could submit is superlogout.com, which uses logout CSRF to log you out of a whole ton of websites at once.
However, I couldn't get it to work in a private tab, because apparently the invisible captcha fails.
- bigbugbag 10y agoAh! this is a fun one, thanks for sharing. Luckily I'm immune to this as I don't have an account on any of these websites but one and I only log there once every 2 years for about 5 minutes.
- oxguy3 9y agoLol, thanks for the suggestion, just submitted superlogout.com; got a Kotaku article in return