CORS Domain Confusion PoC

Attacker origin:

Target: reco.tw.coupang.com + mc.tw.coupang.com

Step 1: Stealing browsing history from reco.tw.coupang.com

Loading...

Step 2: Stealing account info from mc.tw.coupang.com

Loading...

Step 3: Exfiltration proof

Waiting for data...