maride/hacktricks
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks.git synced 2025-10-10 18:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update other-web-tricks.md

Browse Source 
added same site scripting
This commit is contained in:
Sourav Chakraborty 2025-01-04 15:31:10 +05:30 committed by GitHub
parent 6eca4dfedd
commit 439fd9a1a4
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/other-web-tricks.md
View File

@ -36,3 +36,6 @@ Developers might forget to disable various debugging options in the production e
{{#include ./banners/hacktricks-training.md}}
### Same-Site Scripting
It occurs when we encounter a domain or subdomain which resolves to localhost or 127.0.0.1 due to certain DNS misconfigurations.It allows an attacker to cheat the RFC2109 (HTTP State Management Mechanism) same origin restrictions, and therefore hijack state management data. It may also allow cross-site scripting. You can read more about it from [here](https://seclists.org/bugtraq/2008/Jan/270)