CORS & SOP

Walkthrough summary

CORS & SOP TryHackMe walkthrough with 7 answered prompts and lab methodology notes.

Sample prompts covered

• What policy instructs web browsers how they should interact between web pages?
  Open the walkthrough page to inspect the full answer and command flow.
• What HTTP header specifies which domains are allowed to access the resources hosted in its server?
  Open the walkthrough page to inspect the full answer and command flow.
• What origin configuration permits requests from any origin, is the least secure configuration, and should be used cautiously?
  Open the walkthrough page to inspect the full answer and command flow.
• What CORS misconfiguration occurs when a server accepts requests from the "null" origin?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the flag from arbitrary.php?
  Open the walkthrough page to inspect the full answer and command flow.