3 ms·
What I'm not getting is how a running executable can log into a website and initiate a transaction. It won't have your password right? Or is it just a keylogg
by tocomment 14y ago
What I'm not getting is how a running executable can log into a website and initiate a transaction. It won't have your password right? Or is it just a keylogger to catch your password?
- dariopy 14y agoLike your regular XSRF, it relies on the user already being logged in some browser tab. It probabley has a keylogger too.