maride/hacktricks
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks.git synced 2025-10-10 18:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #993 from souravvvv123/master

Browse Source 
Update other-web-tricks.md
This commit is contained in:
SirBroccoli 2025-02-03 16:41:35 +01:00 committed by GitHub
commit 338218de1f
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/other-web-tricks.md
View File

@ -36,3 +36,6 @@ Developers might forget to disable various debugging options in the production e
{{#include ./banners/hacktricks-training.md}}
### Same-Site Scripting
It occurs when we encounter a domain or subdomain which resolves to localhost or 127.0.0.1 due to certain DNS misconfigurations.It allows an attacker to cheat the RFC2109 (HTTP State Management Mechanism) same origin restrictions, and therefore hijack state management data. It may also allow cross-site scripting. You can read more about it from [here](https://seclists.org/bugtraq/2008/Jan/270)