My Interaction with Microsoft Security Team :- I gave them account-takeover XSRF in one of their domain , they rejected it . I explained them completely what XSRF is and how it works and showed them step by step process for re-producing vulnerability , the steps were toooo detailed and any kid could also understand it . Now they reply me saying, Will the victim in the below scenario just click a single hyperlink and then have his or her account settings changed, or does he or she have to perform other steps? Thanks for your prompt replies. WTF -_- It is like , producing a movie , directing the same movie, acting in the same movie , and being also being the audience of that same movie -_- -_-
Posted on: Sat, 05 Apr 2014 13:21:36 +0000
Trending Topics
Recently Viewed Topics
© 2015