reddit hackernews mail facebook facebook linkedin
Corsy

Corsy

CORS Misconfiguration Scanner.

Tests implemented
- Pre-domain bypass
- Post-domain bypass
- Backtick bypass
- Null origin bypass
- Unescaped dot bypass
- Underscore bypass
- Invalid value
- Wild card value
- Origin reflection test
- Third party allowance test
- HTTP allowance test