3 ms·
A CSRF attack is essentially a local attack. All an attacker needs to do is have an array of [192.168.0.1, 192.168.1.1, 192.168.2.1, ...] and attempt the CSRF
by meowface 12y ago
A CSRF attack is essentially a local attack.
All an attacker needs to do is have an array of [192.168.0.1, 192.168.1.1, 192.168.2.1, ...] and attempt the CSRF against all of them. 5 different local IPs will probably cover 90% or more of consumer routers, since nearly all of them are on 192.168 RFC 1918 networks and will generally always be a .1 host.
If they were going after a small or large business, it'd be a different story. But even then there'd be a lot of opportunity for likely guesses.