CORS - Lab #1 CORS vulnerability with basic origin reflection | Short Video

[@RanaKhalil101]

Don't want to wait for the weekly release schedule to gain access to all the videos and want to be added to a discord server where you can ask questions? Make sure to sign up to my course: bit.ly/30LWAtE ✨✨

[@曹曹嘉旭]

In this experiment, why can't I see the log after I input the poc according to your method and click Send to the victim api key in

[@TheBroadwood]

Can you explain how the fetch("/log?key=" + xhr.responseText) forges a GET-Request from the administrator to our server? Because since we got two GET-Requests in our access log from the admin, i'm wondering where the second one with the submitted data was forged in the code.

[@edwinmendoza8981]

Thanks!

[@RanaKhalil101]

Thank you!

[@Fahodinho]

is it me or this doesn't work anymore?

[@Skaxarrat]

Not working for me either.

[@adinaliana8071]

same

[@itssmezeddd]

@@adinaliana8071 any updates? have u fully resolved this problem? its not working for me too

[@itssmezeddd]

@@adinaliana8071 what you need to do is to obfuscate the whole script within the srcdoc, you could use the burp decoder to url-encode it

[@faique2995]

Hi, Can we send other headers excluding cookies with the cors request

[@whisperthewolf1724]

Hey Rana,can you solve and explain portswigger's xss labs?,i m really having trouble with it

[@kanishksharan]

Yeah right. Rana is at your service, your Majesty.

[@gyangaha109]

thank you

[@alexwell5340]

👍👍👍👍👍

[@faique2995]

incorrect thumbnail used

[@RanaKhalil101]

Thank you! I fixed it :)

[@TANKBM]

لايك وانا مغمض عيوني

[@Eric-EMP]

Hey! Did you know that you Look like that beautiful Women From Mr Robot Who was also a Hacker?.😍😍

[@Skaxarrat]

Take it down a notch, fam