Trying something a bit different. A video demo to illustrate some concepts around “Origin” in web applications. Let me know if this is something you would like to see more of.

Some references to go with this video:

0.0.0.0 Day: Exploiting Localhost APIs From the Browser
Private Network Access
Cross Origin Resource Sharing

 

—
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu
Twitter|

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.