I discovered a CSRF vulnerability in AxeOS the Web Application used by the BitAxe Bitcoin Miners -
Simply clicking a link onnyiur home network can change your Stratum username and therefore your payout address. POC - http://poc.snotra.cloud:8888/bitaxe.html #bitcoin #hacking #pentesting #bitaxe #mining

Snotra
AxeOS CSRF Vulnerability
Using CSRF Attack to update the Payout Address on BitAxe Bitcoin Miners

