CORS Exploit

Опубликовано: 04 Апрель 2022
на канале: All about Hacking

5,169

Summary(What is CORS): Cross-origin resource sharing (CORS) is a browser mechanism that enables controlled access to resources located outside of a given domain. However, it also provides the potential for cross-domain-based attacks, if a website's CORS policy is poorly configured and implemented. CORS can be exploited to trust any arbitrary domain attacker-controlled domain name and send the data to it. Attackers can make an exploit and ask the domain to send data of the victim to the attacker domain.
Severity: High
Impact: An Adversary can carry out CORS attack to exfiltrate the sensitive details of a victim
Recommendations: All the REST Api's should be authenticated and the domain should not trust any other domains. Allow only selected, trusted domains in the Access-Control-Allow-Origin header.

Commands: curl https://Domain -I -H Origin:evil.com

★★★ Contact me ★★★

📍Medium:   / karandarjishack

📍 Instagram:   / karandarjishack

📍Twitter:   / karandarjishack

📍Github: https://github.com/karandarjishack

На этой странице сайта вы можете посмотреть видео онлайн CORS Exploit длительностью часов минут секунд в хорошем качестве, которое загрузил пользователь All about Hacking 04 Апрель 2022, поделитесь ссылкой с друзьями и знакомыми, на youtube это видео уже посмотрели 5,169 раз и оно понравилось like зрителям. Приятного просмотра!

3,763