Other nomination
DNS Rebinding for Credential Brute Force
Second part of a DNS rebinding series: rebinding gives read access to a firewalled login page, so an attacker can brute-force weak, guessable authentication cookies such as username=bob or id=1234567 without ever learning a password. The recovered credential can then be used to fix the victim's session.
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.