3 ms·
It looks like it could be done with a DNS rebinding attack (as you need to set a special HTTP header, so normal CSRF stuff doesn't work). This would mean the vi
by finnn 12y ago
It looks like it could be done with a DNS rebinding attack (as you need to set a special HTTP header, so normal CSRF stuff doesn't work). This would mean the victim would simply need to visit an attacker controlled webpage
- jschwartzi 12y agoSweet, even better. Is there any mitigation for that?
- finnn 12y agoSure! Install OpenWRT or some other alternative firmware.