Skip to content

Instantly share code, notes, and snippets.

@markwh245

markwh245/cors-scanner.sh

Forked from ejcx/cors-scanner.sh
Created February 25, 2020 14:52
Show Gist options
  • Save markwh245/35d29a8a140d9d981d00e0c82c882a9a to your computer and use it in GitHub Desktop.
Save markwh245/35d29a8a140d9d981d00e0c82c882a9a to your computer and use it in GitHub Desktop.
Download ZIP
Raw
cors-scanner.sh
#!/bin/sh
while read -r domain
do
# Remember. Account for the fact that some sites don't exist on HTTP
# And others don't exist on HTTPS. Prune later.
curl -I "https://$domain" --max-time 3 -H "Origin: https://$domain.evil.com" | ./respirator&
curl -I "http://$domain" --max-time 3 -H "Origin: http://$domain.evil.com" | ./respirator&
done < "top1mdomains"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment