News for hackers. Stuff that matters.

A comment on Open redirects – a vulnerability class no one but attackers cares about. Parent comment

Re:Open redirects – a vulnerability class no one but attacke... by tedunangst on Thursday January 03, 2019 @11:43PM (#18822020)
I suppose there's some potential for SSRF abuse, although it's easy to argue the fault lies elsewhere.
[ Parent | on HN ]
Re:Open redirects – a vulnerability class no one but attacke... by tptacek on Thursday January 03, 2019 @11:52PM (#18822051)
Right, and also internal CSRF is in fact an underrated vulnerability.
[ Parent | on HN ]