← All tools

Corsy

https://github.com/s0md3v/Corsy

Open Source

Categories

Web Application

Description

Lightweight program to find all known misconfigurations in CORS (Cross-Origin Resource Sharing) implementations. Tests for null origin, pre-domain matching, post-domain matching, and wildcard issues.

Keywords

CORS cross-origin misconfiguration headers web security origin validation

Example Usage

python3 corsy.py -u https://example.com
python3 corsy.py -i urls.txt -t 10