alt Hacker NewsYeah, I only found it by accident when I asked it to make a change against my web app and it modified the code then popped open Chrome and started trying different common user/pass combinations to log into the app so it could validate the changes.
Yeah, I only found it by accident when I asked it to make a change against my web app and it modified the code then popped open Chrome and started trying different common user/pass combinations to log into the app so it could validate the changes.
Wait, It was brute forcing passwords? This sounds extremely dangerous in the wrong hands. Seems like a boon for malicious users