8 ms·
So, why does the browser send yahoo.com cookies to a request to abysswhatever.com when the user clicks on the link in the email? he just created a pretty valid
by gcb0 14y ago
So, why does the browser send yahoo.com cookies to a request to abysswhatever.com when the user clicks on the link in the email?
he just created a pretty valid link with no shenanigans... last i checked, a XSS attack was about making a site churn out javascript code when it was not intended to and then you could make a request that passed that domain's cookies to you.
- mrb 14y agoThe browser doesn't send yahoo.com cookies to abysssec.com. The way XSS's work in general is that the attacker's landing page probably has an invisible iframe that GETs or POSTs to yahoo.com, with the right parameters, to trigger an XSS with js code that sends the cookies back to abysssec.com All this is invisible in the video, as the author does not want to disclose the technical details.
- gcb0 14y agoah, ok. that's conveniently left out of the 'demo' ...but what was i expecting from a youtube video? thanks!
- bcoates 14y agoIt sounds like disabling 3rd party cookies fixes this, right?
- dmix 14y agoThe cookie is a first-party yahoo cookie that is sent via a GET parameter to a remote server in plain-text. So nope that won't help.