4 ms·
Well, I'm not sure about XSS, but imagine you know someone's home IP is: 192.168.1.10 Based on this, you can probably guess the router is 192.168.1.1 and mayb
by chadrs 11y ago
Well, I'm not sure about XSS, but imagine you know someone's home IP is:
192.168.1.10
Based on this, you can probably guess the router is 192.168.1.1 and maybe even have a clue about the vendor based on the IP assigning patterns.
Then you can direct them to a page with an submitting POST <form> that makes modifications to their router settings. This is more like CSRF than XSS though.
- malka 11y agofunny, of all the routers I used (all were provided by my ISP), their IP were 192.168.1.254