CORS Scanner
CORS Misconfiguration Assessment — Tests reflected origins, null origin, wildcard, and OPTIONS preflight. Shows JavaScript PoC attack code to demonstrate authenticated data theft.
Use only for ethical purposes. Test only systems you own or have written authorization to test. Not for unauthorized use.
// CORS Misconfiguration Check — 4 Tests
// Batch CORS Scanner — Faculty Lab
One URL per line. Max 20. Tests each URL with 4 origin variants.