+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Web Application] CORS- Cross Origin Resource Sharing (/showthread.php?tid=4239476)
[Web Application] CORS- Cross Origin Resource Sharing - pwntoken - May 20, 2014
Has anyone got a good resource to study CORS based web application attack vectors with exploitation POC? I believe CORS and Client Side Storages are vectors coming from HTML5. Sh4rk is the best known research I had seen which was presented in Defcon, I still need more exploitable resources or POC where I could study these vectors? anyone has any idea about the exploitation methodology?
* - n31ght0 - May 20, 2014
i think it's Cross Origin Resource Sharing not request
2minutes googling n found this
https://hackforums.net/showthread.php?tid=3931991
http://inventorsparadox.blogspot.com/2014/02/cors-cross-origin-resource-sharing.html
* - pwntoken - May 20, 2014
(May 20, 2014 03:42 PM)n31ght0 Wrote: i think it's Cross Origin Resource Sharing not request
2minutes googling n found this
https://hackforums.net/showthread.php?tid=3931991
http://inventorsparadox.blogspot.com/2014/02/cors-cross-origin-resource-sharing.html
Code
https://hackforums.net/showthread.php?tid=3931991Was me. Check it.