When I make a cross origin request to example.com from anysite.com with
req.withCredentials = "true";
cookies are included in the request
The response contains
access-control-allow-origin: https://anysite.com access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization
In this particular case, cookies values can be used to calculate the Authorization header value that can be obtained by manipulating cookie values.
I just want to extract cookies.
Any idea how to do that?
The target site doesn't have a CRLF vulnerability.