# Stealing passwords via browser refresh | Full Guide

**URL:** <https://onehack.st/t/stealing-passwords-via-browser-refresh-full-guide/96115>\
**Category:** Tutorials & Methods\
**Tags:** hacking\
**Created:** [July 13, 2020, 10:55am UTC](https://onehack.st/t/stealing-passwords-via-browser-refresh-full-guide/96115 "2020-07-13T10:55:40Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![RoohNooh](https://onehack.st/user_avatar/onehack.st/roohnooh/32/166257_2.png) [@RoohNooh](https://onehack.st/u/RoohNooh)\
**Post date:** [July 13, 2020, 10:55am UTC](https://onehack.st/t/stealing-passwords-via-browser-refresh-full-guide/96115/1 "2020-07-13T10:55:41Z")

</div>

The browser’s back and refresh features can be used to steal passwords from  
insecurely written applications.

This paper discusses the problem and the solution.

- We will show how a bad guy can access the user credentials of the previously logged in user by exploiting this feature, if the web application has not been developed securely

 ![image](https://onehack.st/uploads/default/original/3X/8/a/8aa31871061f5742ed2443d5b8e625900e450bbe.jpeg)

[Stealing\_passwords\_via\_browsers.pdf](https://onehack.st/uploads/short-url/xgx6Q9mtEIbkyFFllWHiMbR70OT.pdf) (177.3 KB)