Used to obtain a web resource from the server by passing parameters via URL
Easily manipulated by attackers
Could be dangerous for authentication-related and session tracking parameters
Easier to script against an app using GET
Enables an attacker to test requests without waiting for payload
Comments