4 ms·

I'm also curious as to how he's managing to call to the router via javascript. Anyone have more details on the hack? edit: Here's more info... http://samy.pl

by revicon 16y ago

I'm also curious as to how he's managing to call to the router via javascript. Anyone have more details on the hack? edit: Here's more info... http://samy.pl/mapxss/ http://samy.pl/mapxss/ The hack relies on a specific XSS vulnerability in the Verizon FiOS router. It requires that you're already logged into your router or that you're using default username/password.

jdc 16y ago
The page linked is a proof of concept -- a minimal demonstration. The same process can be applied to any XSS vulnerable router. That said, I've upvoted you for the link.