3 ms·
A lot of popular password managers share them across subdomains by default, so if you manage to get this on a subdomain of the target domain it'll work fine.
by Nextgrid 5y ago
A lot of popular password managers share them across subdomains by default, so if you manage to get this on a subdomain of the target domain it'll work fine.
- lxgr 5y agoIf an attacker can get arbitrary content on a subdomain of your site, isn't that pretty much game over for credentials on the apex domain?