CORS Analyzer

Paste response headers to detect CORS misconfigurations — wildcard origins, credential leaks, origin reflection, and null-origin bypasses.

Response Headers

Request Origin (optional — used to detect reflection)

Analysis

Paste response headers above and click Analyze.

curl Test Commands

Enter a target URL and click "Generate curl Commands" to get ready-to-run tests.