---
id: 5538
title: "Exploiting CORS misconfigurations for Bitcoins and bounties"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/exploiting-cors-misconfigurations-for-bitcoins-and-bounties"
published_at: "2022-08-16T09:24:00Z"
tags: ["bug-bounty", "web-security", "misconfiguration", "cors", "bitcoin"]
phying_url: "https://phying.com/item/5538"
lang: en
---

# Exploiting CORS misconfigurations for Bitcoins and bounties

## Summary

James Kettle shows how to examine and exploit misconfigured CORS from a hacker's perspective, covering origin reflection, wildcards and credential pitfalls. Condensed from his AppSec USA talk.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2022-08-16T09:24:00Z
- **Original:** https://portswigger.net/research/exploiting-cors-misconfigurations-for-bitcoins-and-bounties
- **Phying News:** https://phying.com/item/5538