#123 FLASH CHAT EXPLOIT PRO#

OR if your burp pro user, Burp Active Scan may find this for you, but in this specific case the root URL was not vulnerable when I checked it manually, curl -H 'Origin: ' -I, the Origin didn’t get reflected but when I requested specific endpoint where all users data getting back into the response curl -H 'Origin: ' -I it reflected back with my host with Credentials set to True and that’s enough to make this work and steal all that data. Support is always there to assist and may be called upon via Live Chat, by e-mail. I mentioned 3 cases where first two cases are exploitable in that example of 2nd case is Facebook Messenger chat issue which I mentioned in an earlier section of the post, and example of 1st case is mine which I found 2 days before where any arbitrary Origin is allowed and the same Origin get reflected back to Access-Control-Allow-Origin with Credentials set to True, the best way I found to check for CORS issue is using CURL.Įg : curl -H 'Origin: ' -I and check the response if Origin is reflected in the response or not. I’m not covering basic details about CORS in this post as in earlier blog posts all the details are covered.

Presence of any unique/authentication/key in the request URI.

Presence of any custom header in the request which is getting used to authenticate the user.

And the best part is once the module is successfully installed, a free hosted chat will be assigned to your JomSocial. When you can’t exploit even if above misconfigurations are present: JomSocial Chat Script It adds a live chat room to JomSocial, single sign-on & social connect It can add a live chat room to JomSocial, sixteen skins and users single sign-on.

#123 FLASH CHAT EXPLOIT SOFTWARE#

123 Flash Chat 123 PPV Software 123 Web Messenger 123 Live Help 123 Flash Forum Demo.

#123 FLASH CHAT EXPLOIT HOW TO#

Bad implementation but not exploitable:Įven this is not good from the development point of view but due to its own rules of CORS if Access-Control-Allow-Origin set to * we don’t get benefit Access-Control-Allow-Credentials: true means no cookie access of the victim. How to install 123 Flash Chat How to integrate my own database All these frequently asked questions have answers here.Poorly implemented, Best case for Attack:.123 Flash Chat 5.1 and prior versions are affected by this issue. Few days before noticed a blog post for exploiting Facebook chat and reading all the chats of users so that made me to interested to know about the issues, and basically it was misconfigured CORS configuration where null origin is allowed with credentials true, it was not something heard for the 1st time, from the portswigger explained it very well in his blog post, so after reading that messenger blog post I went to test for the same issue for some targets where I allowed to test it.īut before that here are some tips about CORS where it can be exploitable from the attacker’s point of view: An attacker would exploit other input validation vulnerabilities such as HTML injection or cross-site scripting to supply the malicious value for a variable.

123 flash chat exploit