s0md3v/Corsy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(messages): Corrected typos

Browse Source
This commit is contained in:
Aissaoui Anouar
2019-11-28 02:37:12 +01:00
parent 44cbdacc71
commit 5ad2fa9ddd
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
db/details.json
View File

@@ -7,7 +7,7 @@
"third party allowed" : { "third party allowed" : {
"Description" : "This host has whitelisted a third party host for cross origin requests.", "Description" : "This host has whitelisted a third party host for cross origin requests.",
"Severity" : "Medium", "Severity" : "Medium",
"Exploitation" : "If the whitelisted host is a code hosting platform such as codepen.io or has an XSS vulnerbaility, it can be used to exploit this misconfiguration." "Exploitation" : "If the whitelisted host is a code hosting platform such as codepen.io or has an XSS vulnerability, it can be used to exploit this misconfiguration."
}, },
"origin reflected" : { "origin reflected" : {
@@ -21,7 +21,7 @@
"Exploitation" : "Not possible" "Exploitation" : "Not possible"
}, },
"post-domain wildcard" : { "post-domain wildcard" : {
"Description" : "The origin verification is flawed, it allows requests from a host that has this host as a preffix.", "Description" : "The origin verification is flawed, it allows requests from a host that has this host as a prefix.",
"Severity" : "High", "Severity" : "High",
"Exploitation" : "Make requests from target.com.attacker.com" "Exploitation" : "Make requests from target.com.attacker.com"
}, },
@@ -33,7 +33,7 @@
"null origin allowed" : { "null origin allowed" : {
"Description" : "This host allows requests from 'null' origin.", "Description" : "This host allows requests from 'null' origin.",
"Severity" : "High", "Severity" : "High",
"Exploitation" : "Make requests from a sanboxed iframe." "Exploitation" : "Make requests from a sandboxed iframe."
}, },
"http origin allowed" : { "http origin allowed" : {
"Description" : "This host allows sharing resources over an unencrypted (HTTP) connection.", "Description" : "This host allows sharing resources over an unencrypted (HTTP) connection.",
@@ -48,6 +48,6 @@
"unescaped regex" : { "unescaped regex" : {
"Description" : "The regex used for origin verification contains an unescaped dot (.) character.", "Description" : "The regex used for origin verification contains an unescaped dot (.) character.",
"Severity" : "High", "Severity" : "High",
"Exploitation" : "If the target is sub.example.com, make requests from subxexample.com" "Exploitation" : "If the target is sub.example.com, make requests from subexample.com"
} }
} }