CORS Misconfiguration Scanner

Enter any URL to test for CORS misconfigurations. Runs 7 automated tests including origin reflection, null origin, subdomain trust, prefix/suffix matching, and wildcard checks. Get an instant security grade with detailed findings and exploit PoC code.

X LinkedIn Reddit

Related Tools

HTTP Header Analyzer

Analyze HTTP headers for security issues with A+ to F grading.

CSP Evaluator

Analyze Content Security Policy for misconfigurations.

OAuth / OIDC Attack Wizard

Test OAuth 2.0 and OIDC for redirect_uri bypass and more.

HTTP Request Parser

Parse raw HTTP requests and auto-extract security details.

$loading...