CORS Misconfiguration Attack

CORS Misconfiguration Attack is a Quality skill for Claude Code, published by CyberStrikeus in CyberStrike.

1.7K stars269 forkson CyberStrikeus/CyberStrikeAdded 2026/08/12+4% in starsRepository updated 2026/08/12

aiai-agentai-securitybug-bountycybersecuritydevsecopsethical-hackinghackinghacking-toolllmmcpmcp-servermitre-attackoffensive-securityowasppenetration-testingpentestred-teamsecuritysecurity-tools

Install in seconds

Install CORS Misconfiguration Attack

Copy CORS Misconfiguration Attack into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/CyberStrikeus/CyberStrike/tree/main/.cyberstrike/skill/attack-cors ~/.claude/skills/attack-cors

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/CyberStrikeus/CyberStrike.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: .cyberstrike/skill/attack-cors/SKILL.md in CyberStrikeus/CyberStrike
Installs to: ~/.claude/skills/attack-cors
Collection: One of 51 skills cataloged from this repository
Category: Quality — 1354 skills

What CORS Misconfiguration Attack does

CORS Misconfiguration Attack tests endpoints for risky CORS settings like origin reflection, wildcard access, null origin acceptance, and credential leakage. Use it to verify whether cross-origin requests can read sensitive data.

CORS Misconfiguration Attack is cataloged under Quality on DirSkills. CORS Misconfiguration Attack comes from a repository tagged ai, ai-agent, ai-security, bug-bounty and cybersecurity.

Documentation

README

Excerpt

CORS Misconfiguration Attack

Objective

Identify Cross-Origin Resource Sharing misconfigurations that allow unauthorized cross-origin access to sensitive data or APIs.

Testing Methodology

Phase 1: Origin Reflection Detection

Test if the server reflects arbitrary origins in Access-Control-Allow-Origin:

# Automated CORS checker (bundled script)
attack_script cors_checker https://TARGET/api/endpoint --json-output

Manual tests:

# Arbitrary origin
curl -s -H "Origin: https://evil.com" TARGET_URL -D- | grep -i "access-control"

# Subdomain bypass
curl -s -H "Origin: https://TARGET.evil.com" TARGET_URL -D-

# Null origin
curl -s -H "Origin: null" TARGET_URL -D-

# HTTP downgrade
curl -s -H "Origin: http://TARGET" TARGET_URL -D-

This is the opening of the README. Read the full README on GitHub.

Frequently asked about CORS Misconfiguration Attack

What else does CyberStrikeus publish alongside CORS Misconfiguration Attack?
CORS Misconfiguration Attack is one of 51 skills that DirSkills catalogs from CyberStrikeus/CyberStrike, the repository it ships in. Its siblings there include AMI Age Compliance, AMI Encryption Check and AMI Naming Convention Compliance. Each one is a separate skill with its own page in this directory, installs the same way CORS Misconfiguration Attack does, and is maintained by CyberStrikeus in that same repository. The rest of the collection is listed on the CyberStrikeus/CyberStrike page.
How does CORS Misconfiguration Attack compare to other Quality skills?
CORS Misconfiguration Attack ranks #598 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of CORS Misconfiguration Attack against them. Open each page to compare what they document and how they install.