Questions tagged [crossdomain.xml]
A cross-domain policy file is an XML document that grants a web client - such as Adobe Flash Player, Adobe Reader, etc. - permission to handle data across multiple domains.
6
questions
0
votes
1
answer
226
views
Inconsistent behavior while attempting to exploit a misconfigured flash crossdomain.xml
victim.com - URL of the misconfigured application.
https://victim.com has an overly permissive crossdomain.xml at https://victim.com/crossdomain.xml.
<?xml version="1.0"?>
<!DOCTYPE cross-...
- 3,901
0
votes
1
answer
155
views
Can I send/receive HTTP requests/responses with a subdomain on a crossdomain.xml file?
(I'll use website.com in place of the actual domain as to not disclose any specific website vulnerability)
I noticed on a website that their crossdomain.xml file allowed access from another website ...
- 481
4
votes
1
answer
796
views
CSRF Bypass using ActionScript via weak CrossDomain.xml
I have a target which has weak CrossDomain.xml but it prevents CSRF attack looking at one of the custom HTTP headers. I found following actionscript on a couple of websites, which works perfectly ...
- 51
2
votes
0
answers
603
views
Flash Cross-Domain Proof of Concept
In the past, I have been able to successfully test insecure Flash cross-domain policies by using tools such as the followings:
https://thehackerblog.com/crossdomain/
https://github.com/nccgroup/...
- 1,107
2
votes
0
answers
502
views
cross-domain.xml file: Different policies in different directories
I came across cross-domain xml files on Vimeo and found that there are different policies on different directories.
One on https://vimeo.com/settings/crossdomain.xml
<?xml version="1.0" encoding="...
- 1,791
1
vote
1
answer
1k
views
Secure crossdomain for rtmp/flash streaming/wowza
I've been a bit lost. I have the following situation:
Flash Player file is on https://sub.example.com/player.swf
crossdomain.xml is on https://sub2.example.com/crossdomain.xml
Streaming is done ...
- 943