when a website allows you to authenticate using HTTP (PlainText), it is very simple to capture that traffic and later analyze that from any machine over LAN (and even Internet). How else you’re going to authenticate yourself to the website? But, (yes, there’s a small BUT here). Did you knew every time you fill in your username and password on a website and press ENTER, you are sending your password.
0 Comments
Leave a Reply. |