https://github.com/s0md3v/Corsy

CORS Misconfiguration Scanner
https://github.com/s0md3v/Corsy

cors cors-misconfiguration-scanner cors-scanner vulnerability-scanner

Last synced: about 2 months ago
JSON representation

CORS Misconfiguration Scanner

• Host: GitHub
• URL: https://github.com/s0md3v/Corsy
• Owner: s0md3v
• License: gpl-3.0
• Created: 2019-11-24T15:39:06.000Z (almost 5 years ago)
• Default Branch: master
• Last Pushed: 2022-09-17T10:11:37.000Z (almost 2 years ago)
• Last Synced: 2024-05-02T01:09:18.633Z (5 months ago)
• Topics: cors, cors-misconfiguration-scanner, cors-scanner, vulnerability-scanner
• Language: Python
• Size: 81.1 KB
• Stars: 1,242
• Watchers: 31
• Forks: 167
• Open Issues: 8
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-bugbounty-tools - Corsy - CORS Misconfiguration Scanner (Exploitation / CORS Misconfiguration)
• WebHackersWeapons - Corsy

README

        



  


  

  


  Corsy

  




CORS Misconfiguration Scanner




  

    

  

  

      

  



### Introduction

Corsy is a lightweight program that scans for all known misconfigurations in CORS implementations.

![demo](https://i.ibb.co/Jc1HtmW/corsy.png)

### Requirements

Corsy only works with `Python 3` and has just one dependency:

- `requests`

To install this dependency, navigate to Corsy directory and execute `pip3 install requests`

### Usage

Using Corsy is pretty simple

`python3 corsy.py -u https://example.com`

##### Scan URLs from a file

`python3 corsy.py -i /path/urls.txt`

##### Scan URLs from stdin

`cat urls.txt | python3 corsy.py`

##### Number of threads

`python3 corsy.py -u https://example.com -t 20`

##### Delay between requests

`python3 corsy.py -u https://example.com -d 2`

##### Export results to JSON

`python3 corsy.py -i /path/urls.txt -o /path/output.json`

##### Custom HTTP headers

`python3 corsy.py -u https://example.com --headers "User-Agent: GoogleBot\nCookie: SESSION=Hacked"`

##### Skip printing tips

`-q` can be used to skip printing of `description`, `severity`, `exploitation` fields in the output.

### Tests implemented

- Pre-domain bypass

- Post-domain bypass

- Backtick bypass

- Null origin bypass

- Unescaped dot bypass

- Underscore bypass

- Invalid value

- Wild card value

- Origin reflection test

- Third party allowance test

- HTTP allowance test