3 ms·

This seems to require a lot of trial-and-error. How did they do it? Did they send tons of crappy content to their teacher before finding the vulnerability that

by d--b 7y ago

This seems to require a lot of trial-and-error. How did they do it? Did they send tons of crappy content to their teacher before finding the vulnerability that passed the filter?

hippich 7y ago
From the video it seems they had instructor's access. But in the real life they could save a draft and view it a student to see if they can hijack the session. Another perhaps lesson - if security really matters - perhaps instructors and students should have completely different decoupled apps to do the job. (security through obscurity)