Prerequisites of Exploitation
It is important to know that sometimes due to Same Origin Policy (SOP) you can trigger actions but it restrict the web page from sharing its content.
Prerequisites
Required headers:
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: (Method type that we want to use)
Access-Control-Allow-Credentials: trueAccess-Control-Allow-Origin
Works in some cases where application is misconfigured
Instead of Access-Control-Allow-Origin: * you can use header:
Origin: http://evil.comIn order to specify your origin.
Access-Control-Allow-Methods
Sometimes you are not able to use type of request that performs important actions. In this case try triggering the endpoint with other type of request and see what happens.
Access-Control-Allow-Credentials
This header allows you to send requests as authenticated user. Without this you cannot reach functionalities as logged in user.
Last updated