floyd.ch | floyd’s

Robots.txt Information

Robot	Path	Permission
GoogleBot	/	✔
BingBot	/	✔
BaiduSpider	/	✔
YandexBot	/	✔

Meta Tags

Title	floyd’s \| IT
Description	Skip to primary content Skip to secondary content floyd’s IT Security Search Main menu Home About Pentagrid Mastodon RSS Github Hackerone Twitter (depreca
Keywords	N/A

Server Information

WebSite	floyd.ch
Host IP	85.10.200.142
Location	Germany

Related Websites

                        Site
                        Rank
                    

More to Explore

floyd.ch Valuation

US$304,402

Last updated: 2023-05-12 15:23:14

floyd.ch has Semrush global rank of 34,770,888. floyd.ch has an estimated worth of US$ 304,402, based on its estimated Ads revenue. floyd.ch receives approximately 35,124 unique visitors each day. Its web server is located in Germany, with IP address 85.10.200.142. According to SiteAdvisor, floyd.ch is safe to visit.

Traffic & Worth Estimates

Purchase/Sale Value	US$304,402
Daily Ads Revenue	US$281
Monthly Ads Revenue	US$8,430
Yearly Ads Revenue	US$101,155
Daily Unique Visitors	2,342
Note: All traffic and earnings values are estimates.

DNS Records

Host	Type	TTL	Data
floyd.ch.	A	86400	IP: 85.10.200.142
floyd.ch.	NS	86400	NS Record: nl.ch-inter.net.
floyd.ch.	NS	86400	NS Record: de.ch-inter.net.
floyd.ch.	NS	86400	NS Record: ch.ch-inter.net.
floyd.ch.	MX	86400	MX Record: 0 login-2.loginserver.ch.
floyd.ch.	TXT	86400	TXT Record: v=spf1 mx a ip4:85.10.200.142/32 -all

HtmlToTextCheckTime:2023-05-12 15:23:14

Skip to primary content Skip to secondary content floyd’s IT Security Search Main menu Home About Pentagrid Mastodon RSS Github Hackerone Twitter (deprecated) Post navigation ← Older posts Cross-origin resource sharing: unencrypted origin trusted PoC Posted on April 26, 2022 by floyd Reply I thought of a way to make this blog a little bit more active than one post every 4 years. And I thought I will stick to my old mantra of “it doesn’t always have to be ultra l33t hacks”, sometimes it’s enough to have a cool example or Proof of Concept. So here we are. Burp Suite Pro is able to find various different security issues with its active scanner, one of them being “Cross-origin resource sharing: unencrypted origin trusted”. This means nothing else, than a website allowing CORS being used from an http:// origin. Or in other words, the vulnerable website responds with Access-Control-Allow-Origin: http://anything and when I say anything, I mean anything. Let’s assume this “anything” is

HTTP Headers

HTTP/1.1 301 Moved Permanently
Date: Sun, 19 Dec 2021 12:22:19 GMT
Server: Apache
X-Powered-By: PHP/7.1.1
X-Redirect-By: WordPress
Location: http://www.floyd.ch/
Vary: Accept-Encoding,User-Agent
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=15768000
Connection: close
Content-Type: text/html; charset=UTF-8

HTTP/1.1 200 OK
Date: Sun, 19 Dec 2021 12:22:20 GMT
Server: Apache
X-Powered-By: PHP/7.1.1
Link: ; rel="https://api.w.org/"
Vary: Accept-Encoding,User-Agent
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=15768000
Connection: close
Content-Type: text/html; charset=UTF-8

floyd.ch valuation and analysis