🎯 CORS Exploitation Demo
How this exploit works:
You visit this malicious website
This page makes a request to
http://localhost:5000/api/current-user
If you're logged in to the vulnerable app, your browser sends the authentication cookie
Due to CORS misconfiguration, the vulnerable app allows this cross-origin request with credentials
This page receives your sensitive user data
Click to Exploit CORS Vulnerability
Click the button above to exploit the CORS vulnerability...