DEV Community

Discussion on: Stealing Accounts with an IMG Tag

Collapse
zoedreams profile image
☮️✝️☪️🕉☸️✡️☯️

.favicons are notorious for this too. There are tools, which i will not list, that allow you to inject code or viri after the magic bits of these types of files.