CORS - Lab #1 CORS vulnerability with basic origin reflection | Long Video

In this video, we cover Lab #1 in the CORS module of the Web Security Academy. The website has an insecure CORS configuration in that it trusts all origins. To solve the lab, we craft malicious JavaScript that uses CORS to retrieve the administrator's API key.
▬ ✨ Support Me ✨ ▬▬▬▬▬▬▬▬▬▬
Buy my course: bit.ly/30LWAtE
▬ 📖 Contents of this video 📖 ▬▬▬▬▬▬▬▬▬▬
00:00 - Introduction
00:12 - Web Security Academy Course (bit.ly/30LWAtE)
01:23 - Navigation to the exercise
01:56 - Understand the exercise and make notes about what is required to solve it
03:00 - Exploit the lab
15:53 - Summary
16:23 - Thank You
▬ 🔗 Links 🔗 ▬▬▬▬▬▬▬▬▬▬
HTML script: github.com/rkh...
Notes.txt document: github.com/rkh...
Web Security Academy Exercise Link: portswigger.ne...
Rana's Twitter account: / rana__khalil

[@RanaKhalil101]

Don't want to wait for the weekly release schedule to gain access to all the videos and want to be added to a discord server where you can ask questions? Make sure to sign up to my course: bit.ly/30LWAtE ✨✨

[@dragoschiperi8090]

Great work! Thanks for explaining how to solve the lab without the "Go to exploit server" functionality.

[@sarasevdari7159]

Girl your explanation is fantastic. Much love, keep going

[@wizix9877]

I love your videos. keep up the good work. Thank you.

[@medogamer8524]

the GOAT of explainig

[@Guilhermecpv762]

Thanks from Brasil, you are amazing!!

[@suryatejakalidindi485]

thank you madam , please make a video on information disclosure

[@TheBroadwood]

Since in the fetch method, there is not the full uri given, how does the fetch method know that it has to GET-Request the exploit server? 🤯

[@acronproject]

Thanks

[@xoro163]

what if the request is using only post method? how to create the payload??

[@tiago7w_583]

top

[@user-cq3fu1df7o]

you are amazing ^_

[@pranjalruhela1103]

There was never ...even once anything mentioned related to the admin account in our script...still how come the logs display the admin info??

[@yashchaudhary6146]

Since its just a lab so burpsuite labs have made it in such a way that simulates a real hacking behaviour.

[@burptester8761]

It's very difficult for to send email to an admin when you don't have his email. I tried to do a pentesting on website, I found the admin username but not his email. Is there any other solution @Rana ?

[@wadadparker957]

Buddy this is just for information, don't actually send phishing links to admins 💀

[@Fahodinho]

what's the significance of apikeys why is it a secret information? what can you do with it? and wouldn't the session key be more critical because you can steal it and impersonate a user?

[@domssilva1752]

api keys are usually used by developers to access paid services. leaking the api key could lead not only to private users info leak but also business financial loss

[@itsm3dud39]

@@domssilva1752 where can i learn api vulnerabilities and attack?

[@UBNA671]

@Rana Khalil is it necessary that i must write a script to go through i dont know how to code im trying to get started in bug bounty

[@wolfrevokcats7890]

bug bounty is very competitive. You should learn how to code

[@UBNA671]

@@wolfrevokcats7890 what languages, I’m learning python steadily , recently I googled what programming languages are used by osi model do you think finding that information is any good

[@TANKBM]

لايك وانا مغمض