4 
<cross-domain-policy>
 <allow-access-from domain="*" secure="false"/>
 <site-control permitted-cross-domain-policies="master-only"/>
</cross-domain-policy>

I would like to ask two questions:

  1. Is this crossdomain.xml vulnerable (the file is placed on the root of the host e.g. www.example.com/crossdomain.xml)?

  2. How I can exploit or test similar files?

Improve this question
1
  • 1
    I'm sure you've seen this because it's from a quick google but sethsec.blogspot.com/2014/03/… looks like the most comprehensive resource for exploiting this type of vulnerability.
    – Justin Moore
    Aug 19, 2015 at 21:20

1 Answer 1

Reset to default
7

This crossdomain.xml policy file revokes all protection that the Same Origin Policy provides.

I use the crossdomain proof of concept tool, which has a simple interface to test SOP bypasses.

Improve this answer
4
  • Thanks. So this particular file is vulnerable right?
    – Michal Koczwara
    Aug 19, 2015 at 23:17
  • 1
    @Michal Koczwara Without a shadow of a doubt. 100% textbook issue right here, all sources will confirm that the SOP has been intentionally disabled. It really doesn't get clearer than this.
    – rook
    Aug 19, 2015 at 23:19
  • So basically an attacker can send requests to the target from any random domains here: <allow-access-from domain="*" secure="false"/> but not sure what is this ? <site-control permitted-cross-domain-policies="master-only"/>
    – Michal Koczwara
    Aug 19, 2015 at 23:28
  • <allow-access-from domain="*" secure="false"/> is allow from all.
    – Shritam Bhowmick
    Aug 31, 2015 at 3:25

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .