I am interested to see if it's possible to have domain fronting through a web browser, using any of its components (e.g. javascript) which can be utilized by the user.

For example, i've tried through javascript and XMLHttpRequest, but it's not possible to set the Host header due to "security reasons".

Are there any other potential ways to issue http requests?

Maybe some other header that is used by the CDNs to route traffic other than the Host header?


closed as off-topic by Adonalsium, Ghedipunk, iwaseatenbyagrue, DoubleD, CaffeineAddiction Oct 8 at 15:25

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem." – Ghedipunk, DoubleD, CaffeineAddiction
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Sorry, this question seems to be off-topic because it is about circumventing censorship, not information security. Maybe try posting it on Superuser? – browly Sep 27 at 17:21

This is essentially not domain fronting, domain fronting is when you use a legitimate domain like a public CDN to send messages, but they are afterwards redirected to you.

If a website has the same origin policy set to allow everything you can use XMLHttpRequest from the victims browser to access those resources. You can't set things like Host headers and cookies.

A good starting point regarding this is BeEf framework. https://github.com/beefproject/beef

Not the answer you're looking for? Browse other questions tagged or ask your own question.