corsy

What problem does it solve?

This Skill identifies exploitable Cross-Origin Resource Sharing (CORS) misconfigurations in web applications, which can lead to security vulnerabilities like cross-origin data theft.

Core Features & Use Cases

• CORS Misconfiguration Scanning: Detects various types of exploitable CORS flaws, including reflected origins, trusted null origins, prefix/suffix matches, and trusted subdomains.
• Authenticated Scanning: Supports scanning endpoints that require authentication via custom headers.
• Bulk Scanning: Can process a list of URLs from a file for efficient vulnerability assessment.
• Use Case: A security analyst needs to quickly assess a web application for common CORS misconfigurations that could be exploited by an attacker to steal sensitive user data.

Quick Start

Use the corsy skill to scan the target URL https://example.com for CORS vulnerabilities.