hunt-cors

Detect and validate CORS misconfigurations with browser-based proof-of-concept.

Updated Jun 24, 2026

Search Tags:#security #CORS #web application #misconfiguration #vulnerability scanning

Ready to run

npx skills add https://github.com/Skobyn/talon --skill hunt-cors-skobyn

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-cors
Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-cors
Command: npx skills add https://github.com/Skobyn/talon --skill hunt-cors-skobyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify potential Cross-Origin Resource Sharing (CORS) misconfigurations in web applications, ensuring sensitive data is not vulnerable to unauthorized access.

Core Features & Use Cases

Detect CORS Misconfigurations: Identify servers that allow credentialed cross-origin data access, null origin trust, and other CORS vulnerabilities.
Validate Findings: Requires a browser PoC to confirm the exploitation of detected vulnerabilities.
Use Case: Before deploying a web application, use this Skill to scan for and validate CORS misconfigurations to protect against potential data breaches.

Quick Start

Use the hunt-cors skill to check for CORS misconfigurations in your web application 'acme.com'.

Frequently Asked Questions about hunt-cors

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect CORS misconfigurations in my web application?▼

Detect CORS misconfigurations by examining server responses and reflecting attacker-controlled origins to identify credentialed cross-origin reads of sensitive data. This process targets servers allowing unauthorized access, null origin trust, and other configuration vulnerabilities.

What is a CORS vulnerability and how does it expose sensitive data?▼

A CORS vulnerability occurs when server responses improperly allow credentialed cross-origin data access, exposing sensitive data to unauthorized domains. Misconfigured trust for attacker-controlled or null origins enables malicious sites to read private application data.

How do I validate a CORS vulnerability finding?▼

Validate a CORS vulnerability finding by creating a browser-based proof-of-concept to confirm the exploitation. This confirms that detected misconfigurations, like credentialed cross-origin reads, can actually be exploited to access sensitive data.

Can I scan for null origin trust and credentialed cross-origin access?▼

Yes, you can scan for null origin trust and credentialed cross-origin access. The detection process specifically examines server responses for these misconfigurations to prevent unauthorized access to sensitive data before web application deployment.

What's the best way to check for CORS misconfigurations before deployment?▼

The best way to check for CORS misconfigurations before deployment is to scan for credentialed cross-origin access and null origin trust, then validate findings with a browser-based proof-of-concept to ensure sensitive data is protected against data breaches.