Collected research
Exploiting CORS Misconfigurations for Bitcoins and Bounties
Exploiting CORS misconfigurations for Bitcoins and bounties
Servers that reflect the Origin header into Access-Control-Allow-Origin while sending Allow-Credentials true let any website read a victim's authenticated cross-domain responses. The post covers sloppy origin matching, whitelisting the null origin that any sandboxed iframe can produce, and a missing Vary: Origin enabling client-side and server-side cache poisoning; the targets were bitcoin exchanges.
Record
- Document
- Exploiting CORS misconfigurations for Bitcoins and bounties
- Researcher
- James Kettle
- Published by
- PortSwigger Research
- Date
- Topic
- Other
In the archive
Related sources
- Exploiting CORS misconfigurations Whitepaper
- James Kettle - Exploiting CORS Misconfigurations for Bitcoins and Bounties - AppSecUSA 2016
- AppSec EU 2017 Exploiting CORS Misconfigurations For Bitcoins And Bounties by James Kettle
- AppSec EU 2017 Exploiting CORS Misconfigurations For Bitcoins And Bounties by James Kettle
Tags
This page is the archive's own catalogue record. The research is the work of James Kettle, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .