maride/hacktricks
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks.git synced 2025-10-10 18:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
hacktricks/src/pentesting-web/xs-search/cookie-bomb-+-onerror-xs-leak.md

7.1 KiB
Raw Blame History

Cookie Bomb + Onerror XS Leak

{{#include ../../banners/hacktricks-training.md}}

Hierdie tegniek kombineer:

  • Cookie bombing: die slagoffer se blaaier met baie/groot cookies vir die teiken-origin volstop sodat opvolgende versoeke bediener-/versoeklimiete tref (request header size, URL size in redirects, ens.).
  • Error-event oracle: peil 'n cross-origin endpoint met 'n