Detect CORS misconfigurations enabling credentialed cross-origin reads of authenticated data.
npx skills add https://github.com/uphiago/recon-skills --skill hunt-cors-uphiago
Please help me install this Agent Skill. Skill: hunt-cors Source: https://github.com/uphiago/recon-skills/tree/main/redteam/hunt-cors Command: npx skills add https://github.com/uphiago/recon-skills --skill hunt-cors-uphiago
This Skill solves the critical gap of undetected CORS misconfigurations in web applications and APIs that allow attackers to steal sensitive authenticated user data, including PII, session tokens, and CSRF tokens, which are often missed in standard reconnaissance workflows.
Use the hunt-cors skill to test all identified API endpoints on the target web application for CORS misconfigurations, confirm any findings with a browser-based proof of concept, and document the impact of any authenticated data exfiltration risk.
High-intent search queries and answers about installing and using this skill.
To test for CORS misconfigurations, probe API endpoints for origin reflection with credentials, null-origin trust, and subdomain regex bypasses. You validate authenticated data exfiltration risks using browser-based proof-of-concept templates.
During a red team engagement, hunt for CORS vulnerabilities including origin reflection with credentials, null-origin trust, subdomain regex bypasses, pre-flight gating bypasses, and loose postMessage origin checks exposing sensitive data theft.
Yes, you can use this CORS hunting methodology on single-page applications, WordPress instances, REST APIs, and any web service emitting Access-Control-Allow-* HTTP response headers to discover high-severity security findings.
To bypass CORS regex whitelists, apply context-aware regex bypass payload selection tailored to specific server parsing flaws. This systematically tests trust boundaries against malformed origins and subdomain variations during API security testing.
The best way to generate a browser-based proof of concept for a CORS flaw is using field-validated templates that confirm the vulnerability by executing credentialed cross-origin reads of authenticated user data from the targeted web application.
Rust-sohamConfigure CORS on TypeScript HTTP endpoints with mount and route origins.
uphiagoProbe API endpoints for exploitable CORS misconfigurations and generate PoC files.
salmanabdurrahmanEnumerate and classify CORS policies and CSP directives across web endpoints.
blacklanternsecurityDetect CORS misconfigurations and generate JavaScript proof-of-concept exploits.
