Covering The Under Rated Vulnerabilities: CORS Misconfiguration #1

[@MianHizb]

4:10 there is no such thing as request 2 3, its not websockets its http stateless, preflight requets dont occur here, if you can correct that, it will be great, it only happens in non common http methods like delete still that is something else. Cheers

[@AttackerShihab]

Hey make portswigger all labs complete video .

[@jawathossainrian]

Really an Great Educational Material Openly Available

[@om3726]

Hi Bro/sis please make videos on High Severity bugs P1,P2,P3 Starting from easy to find & understand to complex

[@jawathossainrian]

Bro can u use KZbin transcript to add subtitles to your video? Automated subtitle are really pain

[@ZaraRashidKhan]

Thank you for sharing

[@BePracticalTech]

Glad you liked it!

[@bugstester9919]

which user's cookie is sent by poc.html code, even though there is session_id:admin was the cookie session of the user, which user is deleted by this code of poc

[@akhilreddy9753]

What if it is in the forget password endpoint . I can send the request through cors .is it valid or informative

[@BePracticalTech]

Informative. You need to find an endpoint that is handling something sensitive. For example: An endpoint that can fetch users, edit profile, delete user etc

[@nedurunaveen0417]

Thanks broo

[@pawankandu914]

sir can you please can you share your nu.of experience in bug bounty

[@BePracticalTech]

@@pawankandu914 I started bug bounty in 2020

[@Mr.3cho]

I want to be your student to learn bug bounty guruji😅

[@BePracticalTech]

I am glad to hear this! We will be planning something soon for this one!

[@pratyushkashyyy]

Heyyy

[@BePracticalTech]

Heyy

[@SecureByBhavesh]

First !!!!!

[@BePracticalTech]

Thanks for the support Bhavesh!