CORS Vulnerability in Facebook | Bug bounty poc

in this video i am going to show to cors misconfiguration vulberability in facebook
This video is only for education purpose.
#fb #facebook #bugbounty
Disclaimer: This video is for strictly educational and informational purpose only. I own all equipment used for this demonstration. Hacking without permission is illegal so always ensure you have proper authorization before using security tools in any network environment. thanks.

[@IllIIIIIIllll]

Then why you are not in FB hof?

[@studyrelaxwithme4564]

This Page has not sensitive data, so the cors Is not harmful. No reward for that

[@lostsecc]

uri8

[@user-yu3hx2lw8s]

Rewards and Hall of fame?

[@sirajgamer7977]

What is those "fonction" and how to used in xss because I want to scaning for xss velnrebely but they He suddenly appeared to me in xsstrike

[@lostsecc]

join telegram i will explain more @lostsec

[@H4cker_Nafeed]

How to find end points like that ?

[@lostsecc]

use corsy tool or my custom nuclei templates i share in my telegram channel t.me/lostsec

[@mbithi_ke]

so if its not a wordpress site you cant exploit cors? 😆

[@lostsecc]

you can exploit in all sites

[@user-il8yq4po1o]

اسطورة حبيبي اكمل

[@lostsecc]

❤️😇

[@jeneelshah2946]

🔥🔥

[@pavor01]

Bounty?

[@marco1337-PT]

can we have that cors exploit script?

[@lostsecc]

ys

[@lostsecc]

github.com/coffinxp/CorsExploit

[@abhishekkumar_981]

king

[@lostsecc]

😇

[@user-ju6fi7vh7n]

medium or high

[@lostsecc]

medium

[@akroidofficial]

bounty?

[@lostsecc]

hof

[@linux..]

i can't understand it can you tell me

[@lostsecc]

if you logged in this site and visit any attacker site then your all login crendential were stored in the attacker server...and then he use it for your account takeover

[@iq_rasco]

وين خطورتها !

[@apple_00]

Key
Name
Password

[@lostsecc]

Attackers can use CORS vulnerabilities to steal sensitive data from applications like API keys, SSH keys, Personal identifiable information (PII), or users' credentials.

[@zedvn3792]

Can you give me the exploit Cors .html file?
Thanks a lot

[@lostsecc]

github.com/coffinxp/CorsExploit/

[@studyrelaxwithme4564]

@@lostsecc link not work