Questions tagged [crossdomain.xml]

A cross-domain policy file is an XML document that grants a web client - such as Adobe Flash Player, Adobe Reader, etc. - permission to handle data across multiple domains.

Filter by
Sorted by
Tagged with
0 votes
1 answer

Inconsistent behavior while attempting to exploit a misconfigured flash crossdomain.xml - URL of the misconfigured application. has an overly permissive crossdomain.xml at <?xml version="1.0"?> <!DOCTYPE cross-...
hax's user avatar
  • 3,901
0 votes
1 answer

Can I send/receive HTTP requests/responses with a subdomain on a crossdomain.xml file?

(I'll use in place of the actual domain as to not disclose any specific website vulnerability) I noticed on a website that their crossdomain.xml file allowed access from another website ...
Jack's user avatar
  • 481
4 votes
1 answer

CSRF Bypass using ActionScript via weak CrossDomain.xml

I have a target which has weak CrossDomain.xml but it prevents CSRF attack looking at one of the custom HTTP headers. I found following actionscript on a couple of websites, which works perfectly ...
shellcode's user avatar
2 votes
0 answers

Flash Cross-Domain Proof of Concept

In the past, I have been able to successfully test insecure Flash cross-domain policies by using tools such as the followings:
Gurzo's user avatar
  • 1,107
2 votes
0 answers

cross-domain.xml file: Different policies in different directories

I came across cross-domain xml files on Vimeo and found that there are different policies on different directories. One on <?xml version="1.0" encoding="...
one's user avatar
  • 1,791
1 vote
1 answer

Secure crossdomain for rtmp/flash streaming/wowza

I've been a bit lost. I have the following situation: Flash Player file is on crossdomain.xml is on Streaming is done ...
user857990's user avatar