>Home>Labs>New labs>Creators>Ranking>Learn>Business>Pricing
ES
Sign inCreate account
Home·Academy·Topics·cors
Topic · 2 articles

cors

CORS misconfigurations: wildcard with credentials, null origin accepted, weak regex.

Quick answer

What is cors?

CORS misconfigurations: wildcard with credentials, null origin accepted, weak regex.

Articles

2

Beginner

0

Intermediate

1

Advanced

1

Intermediate level

1
Free

CORS misconfigurations — null origin, wildcard credentials and subdomain trust

When ACAO reflects any Origin with ACAC=true, when null is accepted, when subdomains are wildcarded — cross-site leak of authenticated data.

11 mincorscsrfbrowser-security
Read article

Advanced level

1
Premium

CSP bypass + CORS misconfig + XSS — a complete exploitation chain

How to chain CSP misconfiguration (unsafe-inline, wildcard sources, whitelisted JSONP endpoints), CORS with credentials and XSS for unrestricted data exfiltration.

17 mincspcorsxss
Read article

Practice cors with real labs

Apply the techniques in safe environments based on real bug bounty reports.

See cors labs
All topicsAcademy
2,482

hunters training

62

labs from real hacks

1,630

completions

$14,790

paid out for these bugs

11 flags captured this week·Real hacks from HackerOne · YesWeHack · Bugcrowd·No commitment·Free Academy
Free · no account

The checklist I run on every new target

47 checks ordered by cost: first what can get you in trouble, then the cheap stuff, and finally the expensive stuff — which is where the big bounties are. I'll send it to your inbox right now.

Unsubscribe in one click, from any email.

BBLabs · bug bounty training

Stop reading about bugs and start hunting them

Create your free account and practice on labs based on real hacks that paid out thousands of euros. The Academy is free forever.

Create free accountSee the labs

No card · free Academy · cancel anytime