Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Why not simply execute remote procedure calls inside the token?

April 26, 2017execute procedure remote token

0

Posted

Why not simply execute remote procedure calls inside the token?

1 Answer

0

Posted

By sniffing the traffic and studying the arguments and results of a procedure an attacker can often learn a great deal about its internal behavior and then bypass the token by simulating it or even in some case by just “replaying” previously recorded request/response pairs.