Don't want to wait for the weekly release schedule to gain access to all the videos and want to be added to a discord server where you can ask questions? Make sure to sign up to my course: bit.ly/30LWAtE ✨✨
@Shintowel Жыл бұрын
Love u
@akr2dev Жыл бұрын
Is your course available as one time purchase? Or I have to renew each month to keep access
@RanaKhalil101 Жыл бұрын
@@akr2dev One time purchase
@akr2dev Жыл бұрын
@@RanaKhalil101 I was looking for a course that covers CORS. I think I am so lucky to find your course It will take me to a whole another level :) Thank you ~
@klliiyougg6666 Жыл бұрын
Why you speak englih why
@CookingCooking774 ай бұрын
You explain in the exact way a beginner would liked to be explained !
@rohanadhvaryu2 жыл бұрын
This is the best ever explaination I have seen on an internet for the CORS topic, what an explaination!! Each and every details are covered here to understand it deeply and properly in a very easy language. I really appreciate. Thank you and and please keep it up. 🙂❤🙌
@rahulaga5 ай бұрын
totally agree on clarity of explanation !!
@VladislavSnegurov Жыл бұрын
I had so many confusion with Same-Origin-Policy and CORS, you made it clear for me once and forever. The most brilliant part of your lecture is that you provide real step-by-step case of attacking and exploiting vulnerability. Most explanations in Internet are just few general statements that produce more questions than answers. Thank you!
@0x_Eslam2 ай бұрын
Love u sis❤ i hope u will be in jannah inshallah❤❤
@faique29952 жыл бұрын
You are among the best teacher I have ever met in my life ♥️
@Thomas_Grusz10 ай бұрын
This is the best explanation of CORS and SOP I have come accross so far. Thank you!
@vicmann873 ай бұрын
This video has the best explanation that I've ever seen about this topic
@MereAYT2 ай бұрын
This is really good and I am saving it ot watch a few times until it all clicks. Thanks!
@bhaskarvaka3931 Жыл бұрын
Wow ! The best video on CORS. This helps me to work on the solution for the issue identified in my application. Thank you so much!
@abdallahazme47573 ай бұрын
For a full stack developer like me this was super super useful, SO MANY THANKS.
@RafaelFoschiani9 ай бұрын
Come here because i was having some issues with AWS Cloudfront/S3 CORS configuration, and find out a lot of vulnerabilties in the existing confgs LMAO. Thank you so much!
@Ayushnigam8067 ай бұрын
You Just Nailed it , Ma'am
@user-lq3xl5xd5j6 ай бұрын
This is the best explanation of CORS and SOP I Thank you, even your language it's easy to consider again thank you
@timecop1983Two7 ай бұрын
You are the best web HACKER I know!!! Keep up you're amazing content. I could not find Cross-Origin Resource Sharing on youtube but then I remeber you were in a david bombal show. So, keep it up... 👍👌✌
@titanicsinclair15772 жыл бұрын
finally new series is back after some time!
@jmukarram2 жыл бұрын
Very informative video. Thanks for sharing your knowledge and skill.
@shaifsec2 ай бұрын
This is awesome contenet about CORS.
@youssef_emad19 Жыл бұрын
You are my role model in this field
@hebafarahat Жыл бұрын
I love how you always simplify things. You are amazing! keep it up Rana 🔥💪
@kutra10010 ай бұрын
Excellent. Made it easy to understand and grasp. Thank you !
@danmcgirr42102 жыл бұрын
You are amazing! Thanks for sharing so much knowledge. I've just found your academy through your Twitter. I'm looking forward to joining and training under your guidance. All the best!
@ArindamKashyap-qk1ps Жыл бұрын
Thanks a lot Rana. All my confusion are gone now. Thank you very much. Could you please make a video on Road to CEH Master, I'm thinking of taking the Elite package from EC council. I know you have cleared the OSCP and saw you video on David Bombal's channel. I got to know your videos from Portswigger's community solution. [ optional: you could make for the CEH Master one by collaborating with someone also].
@squarebyte98462 жыл бұрын
Great video! This makes CORS so easy to understand :D
@ankurarora16062 жыл бұрын
Love your way of teaching
@jogadornumerozero3257 Жыл бұрын
This channel is awesome, thank u soo much
@sp1460 Жыл бұрын
Your teaching skills are great. Thanks. Hope you make more videos on various topics.
@kokn3t Жыл бұрын
Is it possible to exploit in "Authorization Bearer" JWT base web applications?
@acronproject Жыл бұрын
Thanks Ms.Khalil
@pauraspatil93142 жыл бұрын
Nicely Explained !
@ChillTamizha11 ай бұрын
Nice video thanks for the resources that were shared in this video 👏
@211986abhi Жыл бұрын
Wow 👌 beautifully explained. Your work is amazing. Totally impressed.
@TomAinsworth94 Жыл бұрын
Thanks a lot for the video Rana, it’s super helpful!
@swamimzaman70582 жыл бұрын
Please make the other videos available 🙏
@leonardofibonacci6574 Жыл бұрын
Good stuff here. What about JSONP for cross origin resource sharing? Is it a valid alternative to CORS? Are there security problems with JSONP?
@jc_alpha Жыл бұрын
Perfect explanation. Thank you!
@marclemessy2063 Жыл бұрын
thank you very much for your explanation, you were very clear. Keep it up
@klalafudaklalafu7 ай бұрын
How it possible for script from another tab (21:25) to access bank's tab's cookies to make requests on bank site?
@sabuein Жыл бұрын
Thank you.
@jzbainabsbsosmsidnidnsi2647 Жыл бұрын
Thanks Rhana. You are the best🎉
@pascalerb5572 Жыл бұрын
Real good video! Thanks for this awesome work!
@vishalsharma-nx2fq2 жыл бұрын
Excellent video what a detailed explanation... Kudos to you
@dor1313 Жыл бұрын
Wow ! such a great explanation ! like & subscribed!
@AnujSharma-yv6gy2 жыл бұрын
at 36:44, it is said that if there aren't any CORS headers being used by the application, it can be due to the application making use of dynamic generation. Later at 37:33, we check if the value in the origin header is being reflected in ACAO CORS header. So basically we're finding flaws in dynamic generation by making use of what's being reflected in CORS' ACAO header. Aren't both these statements contradictory? If there are no CORS headers and the reason is dynamic generation then how can we test for dynamic generation using CORS headers?
@AnujSharma-yv6gy2 жыл бұрын
@Elijah Rodgers but since it isn't CORS header, wasn't it there anyways? We need ACAO header in response to test which is one of the two CORS headers.
@JorgeRivera-rp1zw Жыл бұрын
Hi, Dear Rana . Many thanks to share your video with us..? Succeds..!
@sksalman63592 жыл бұрын
Thanks Rana Khalil 🥰🥰
@petebarnard123 Жыл бұрын
Brilliant explanation. thanks
@burhanshah5855 Жыл бұрын
Absolutely fantastic Rana
@fathallahilyes5299 ай бұрын
what mean access control allow origin header to null pls ?
@mrkewi1 Жыл бұрын
you're awesome. please don't stop
@gauravkelkar4273 Жыл бұрын
Amazing explanation!!
@deepamsinha39335 ай бұрын
I have one doubt regarding this.Suppose domain A wants domain B to access its resources, so it whitelists it. Another domain C knows that B is whitelisted. Now, domain C sends a request and specifies Origin equal to domain B, so will it be able to access the resources on A? If yes, then is it so easy to spoof origin and just access resources on a different domain?
@mahalingappabirajdar5285 Жыл бұрын
Great Explanation!!!!!!!
@cheolwang4389 Жыл бұрын
great job. love it!
@JuanBotes2 жыл бұрын
thanks for making great content \o/
@tomkatrio1822 жыл бұрын
so helpful thanks
@QuranKareem228 ай бұрын
thansk❤
@jenks28972 жыл бұрын
What if I don't what to access or change any data just want to click a button on website A which then clicks or simulate a click on website B and execute a function, does this falls under CORS ? If not any suggestion on how this can be done?
@microsoft14. Жыл бұрын
God bless you 🙏
@boobalandharani4848 Жыл бұрын
i need clarification . i changed the request header(CORS) origin url name( POST and GET method) and it get reflected in response. it will consider as defect or not .
@ram-gb4xg2 жыл бұрын
Amazing!
@ranjeetyaduvanshi60892 жыл бұрын
can you make some videos that match with industry requirements sometimes I'm get stuck in doing stuff well I'm Network Security Analyst i wants to learn more something new to add in my skilll
@Ethical_Hacker2169 ай бұрын
This vulnerability important ?! The issue you’ve described is related to Cross-Origin Resource Sharing (CORS) misconfiguration. CORS is a security feature implemented by web browsers to control which web domains can access resources on a given domain. In this case, the application has a CORS policy that allows access from any domain (Access-Control-Allow-Origin: *), which is considered overly permissive and poses a security risk.
@blackhatanonymous36872 жыл бұрын
why other videos are hidden of csrf? This is due to schedule or will be hidden for all time?