Это видео недоступно.
Сожалеем об этом.
CORS Vulnerability in Facebook | Bug bounty poc
HTML-код
- Опубликовано: 15 ноя 2023
- in this video i am going to show to cors misconfiguration vulberability in facebook
This video is only for education purpose.
#fb #facebook #bugbounty
Disclaimer: This video is for strictly educational and informational purpose only. I own all equipment used for this demonstration. Hacking without permission is illegal so always ensure you have proper authorization before using security tools in any network environment. thanks.
Then why you are not in FB hof?
This Page has not sensitive data, so the cors Is not harmful. No reward for that
uri8
Rewards and Hall of fame?
What is those "fonction" and how to used in xss because I want to scaning for xss velnrebely but they He suddenly appeared to me in xsstrike
join telegram i will explain more @lostsec
How to find end points like that ?
use corsy tool or my custom nuclei templates i share in my telegram channel t.me/lostsec
so if its not a wordpress site you cant exploit cors? 😆
you can exploit in all sites
اسطورة حبيبي اكمل
❤️😇
🔥🔥
Bounty?
can we have that cors exploit script?
ys
github.com/coffinxp/CorsExploit
king
😇
medium or high
medium
bounty?
hof
i can't understand it can you tell me
if you logged in this site and visit any attacker site then your all login crendential were stored in the attacker server...and then he use it for your account takeover
وين خطورتها !
Key
Name
Password
Attackers can use CORS vulnerabilities to steal sensitive data from applications like API keys, SSH keys, Personal identifiable information (PII), or users' credentials.
Can you give me the exploit Cors .html file?
Thanks a lot
github.com/coffinxp/CorsExploit/
@@lostsecc link not work