Covering The Under Rated Vulnerabilities: CORS Misconfiguration #1

[@MianHizb]

4:10 there is no such thing as request 2 3, its not websockets its http stateless, preflight requets dont occur here, if you can correct that, it will be great, it only happens in non common http methods like delete still that is something else. Cheers

[@bkg2190]

Nice explanation 👍

[@AttackerShihab]

Hey make portswigger all labs complete video .

[@jawathossainrian]

Really an Great Educational Material Openly Available

[@bugstester9919]

which user's cookie is sent by poc.html code, even though there is session_id:admin was the cookie session of the user, which user is deleted by this code of poc

[@jawathossainrian]

Bro can u use KZbin transcript to add subtitles to your video? Automated subtitle are really pain

[@akhilreddy9753]

What if it is in the forget password endpoint . I can send the request through cors .is it valid or informative

[@BePracticalTech]

Informative. You need to find an endpoint that is handling something sensitive. For example: An endpoint that can fetch users, edit profile, delete user etc

[@om3726]

Hi Bro/sis please make videos on High Severity bugs P1,P2,P3 Starting from easy to find & understand to complex

[@kasihagustinus4922]

Informative closed

[@ZaraRashidKhan]

Thank you for sharing

[@BePracticalTech]

Glad you liked it!

[@pawankandu914]

sir can you please can you share your nu.of experience in bug bounty

[@BePracticalTech]

@@pawankandu914 I started bug bounty in 2020

[@nedurunaveen0417]

Thanks broo

[@Mr.3cho]

I want to be your student to learn bug bounty guruji😅

[@BePracticalTech]

I am glad to hear this! We will be planning something soon for this one!

[@pratyushkashyyy]

Heyyy

[@BePracticalTech]

Heyy

[@SecureByBhavesh]

First !!!!!

[@BePracticalTech]

Thanks for the support Bhavesh!