Hacker News new | ask | show | jobs
by efdee 4729 days ago
How about curl http://domain.com/attemptlogin?username=[aaaaa-zzzzz]&passwo..., followed by curl http://domain.com/admin/wipeeverything?username=x&password=y ?
1 comments

Couldn't we draw a line between retrieving information and modifying it?