
Google Search Dork: inurl:crossdomain filetype:xml intext:allowaccessfrom
Locates crossdomain.xml files used by flash/flex/silverlight to determine the cross domain policy of that site's flash/flex/silverlight apps. An open setting of will allow a weaponized flash application hosted on an attacker's site to read information from the target site while running in a victim's browser. -- Google+ http://google.com/+EricGragsone Red Team http://www.crimsonagents.com/ Blue Team http://www.erisresearch.org/ Coding http://maetrics.github.io
inurl:crossdomain filetype:xml intext:allowaccessfrom Google Dork Source : inurl:crossdomain filetype:xml intext:allowaccessfrom