Hellow guys, Welcome to my website, and you are watching CORS - Lab #4 CORS vulnerability with internal network pivot attack | Long Video. and this vIdeo is uploaded by Rana Khalil at 2022-04-10T10:00:03-07:00. We are pramote this video only for entertainment and educational perpose only. So, I hop you like our website.
| Name | CORS - Lab #4 CORS vulnerability with internal network pivot attack | Long Video |
| Video Uploader | Video From Rana Khalil |
| Upload Date | This Video Uploaded At 10-04-2022 17:00:03 |
| Video Discription | In this video, we cover Lab #4 in the CORS module of the Web Security Academy. The website has an insecure CORS configuration in that it trusts all internal network origins. To solve the lab, we craft malicious JavaScript that locates an endpoint on the local network (192.168.0.0/24, port 8080) that we then use to identify and create a CORS-based attack to delete a user. ▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬ Buy my course: https://bit.ly/30LWAtE ▬ 📖 Contents of this video 📖 ▬▬▬▬▬▬▬▬▬▬ 00:00 - Introduction 00:14 - Web Security Academy Course (https://bit.ly/30LWAtE) 01:23 - Navigation to the exercise 02:00 - Understand the exercise and make notes about what is required to solve it 03:17 - Exploit the lab 35:37 - Summary 36:30 - Thank You ▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬ HTML scripts: https://github.com/rkhal101/Web-Security-Academy-Series/tree/main/cors/lab-04 Notes.txt document: https://github.com/rkhal101/Web-Security-Academy-Series/blob/main/cors/lab-04/notes.txt Web Security Academy Exercise Link: https://portswigger.net/web-security/cors/lab-internal-network-pivot-attack Rana's Twitter account: https://twitter.com/rana__khalil |
| Category | Science & Technology |
| Tags | security | web security | owasp | open web application security project | Cross-Origin Resource Sharing (CORS) | Complete Guide | portswigger | web security academy | python | offensive security | bug bounty | scripting | burp | burp suite | oswe | offensive security web expert | same-origin policy | cross-origin resource sharing | sop | cors | cors misconfigurations | cors vulnerabilities |
