Telegram API Cross Site Request Forgery

[Imimezedmob]

Telegram API Cross Site Request Forgery
Данный сплойт позволяет выполнить код который удалит акк телеги.

********************************************************************************
***
** Exploit Title: Telegram API Cross Site Request Forgery
**
** Exploit Author: C4T
**
** Vendor Homepage : http://my.telegram.org
**
** Google Dork: none
**
** Date: 06/27/2015
**
** Tested on: Windows 7
**
********************************************************************************
****
** Exploit Code:
******************







********************************************************************************
*****
** Description:
******************

when a user is logging in telegram API just by openning a web page
containing this exploit his account will be deleted.


Discovered by C4T
@ Ashiyane Digital Security Team.

 

[VoL]

Ого, спасибо))

 

[BedoGafe]

А на ХР можно?