Skip to main content

CORS one liner command exploiter

To all Bug Hunters and Security Researcher, I made a Cheatsheet specifically for CORS missconfigurations. By simply copy-paste the following Bash one-liner into your terminal, you can find these Vulnerabilities in seconds.

CORS Exploitation PoC
gau -subs ‘https://example.com' | while read url;do target=$(curl -s -I -H “Origin: https://evil.com" -X GET $url) | if grep ‘https://evil.com'; then [Potentional CORS Found]echo $target;fi;done
curl -s -I -H “Origin: https://evil.com" -X GET ‘https://example.com' | if grep ‘https://evil.com'; then echo [Potentional CORS Found]; fi
gau -subs ‘https://example.com' | while read url;do target=$(curl -s -I -H “Origin: null” -X GET $url) | if grep ‘Access-Control-Allow-Origin: null’; then [Potentional CORS Found]echo $target;fi;done
curl -s -I -H “Origin: null” -X GET ‘https://example.com' | if grep ‘Access-Control-Allow-Origin: null’; then echo [Potentional CORS Found];fi

3 Whitelisted null origin value payload — (Automatic) Send request to every crawled endpoint and subdomains of the website

gau -subs ‘https://example.com' | while read url;do target=$(curl -s -I -X GET $url) | if grep ‘Access-Control-Allow-Origin: null’; then [Potentional CORS Found]echo $target;fi;done

3.2 Whitelisted null origin value payload — (Manualy) Send request in only one endpoint

curl -I -X GET ‘https://example.com' | if grep ‘Access-Control-Allow-Origin: null’;then echo [Potential CORS Found];fi

If the one-liner bash command displays output, it means that the website is vulnerable to the respective CORS missconfiguration. If no output is displayed while executed, no vulnerability was detected.

Comments

Post a Comment

Popular posts from this blog

How to use Ngx-Charts in Angular ?

Charts helps us to visualize large amount of data in an easy to understand and interactive way. This helps businesses to grow more by taking important decisions from the data. For example, e-commerce can have charts or reports for product sales, with various categories like product type, year, etc. In angular, we have various charting libraries to create charts.  Ngx-charts  is one of them. Check out the list of  best angular chart libraries .  In this article, we will see data visualization with ngx-charts and how to use ngx-charts in angular application ? We will see, How to install ngx-charts in angular ? Create a vertical bar chart Create a pie chart, advanced pie chart and pie chart grid Introduction ngx-charts  is an open-source and declarative charting framework for angular2+. It is maintained by  Swimlane . It is using Angular to render and animate the SVG elements with all of its binding and speed goodness and uses d3 for the excellent math functio...
Post a Comment
Read more

Understand Angular’s forRoot and forChild

  forRoot   /   forChild   is a pattern for singleton services that most of us know from routing. Routing is actually the main use case for it and as it is not commonly used outside of it, I wouldn’t be surprised if most Angular developers haven’t given it a second thought. However, as the official Angular documentation puts it: “Understanding how  forRoot()  works to make sure a service is a singleton will inform your development at a deeper level.” So let’s go. Providers & Injectors Angular comes with a dependency injection (DI) mechanism. When a component depends on a service, you don’t manually create an instance of the service. You  inject  the service and the dependency injection system takes care of providing an instance. import { Component, OnInit } from '@angular/core'; import { TestService } from 'src/app/services/test.service'; @Component({ selector: 'app-test', templateUrl: './test.component.html', styleUrls: ['./test.compon...
Post a Comment
Read more

How to solve Puppeteer TimeoutError: Navigation timeout of 30000 ms exceeded

During the automation of multiple tasks on my job and personal projects, i decided to move on  Puppeteer  instead of the old school PhantomJS. One of the most usual problems with pages that contain a lot of content, because of the ads, images etc. is the load time, an exception is thrown (specifically the TimeoutError) after a page takes more than 30000ms (30 seconds) to load totally. To solve this problem, you will have 2 options, either to increase this timeout in the configuration or remove it at all. Personally, i prefer to remove the limit as i know that the pages that i work with will end up loading someday. In this article, i'll explain you briefly 2 ways to bypass this limitation. A. Globally on the tab The option that i prefer, as i browse multiple pages in the same tab, is to remove the timeout limit on the tab that i use to browse. For example, to remove the limit you should add: await page . setDefaultNavigationTimeout ( 0 ) ;  COPY SNIPPET The setDefaultNav...
Post a Comment
Read more