Skip to content

A simple web tool designed to test and analyze APIs and web applications for CORS vulnerabilities locally, providing detailed insights into preflight responses, headers, and potential issues.

Notifications You must be signed in to change notification settings

Toowan0x1/CORSer

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

11 Commits
 
 
 
 
 
 

Repository files navigation

CORSer

A powerful and user-friendly web application for testing CORS (Cross-Origin Resource Sharing) configurations and API endpoints. This tool helps developers validate CORS settings, test API responses, and debug cross-origin issues with ease.

Installation and Usage

Option 1: Local Installation

  1. Clone the repository:

    git clone https://github.com/Toowan0x1/CORSer
    cd CORSer
  2. Install dependencies:

    npm install
  3. Start the development server:

    npm run dev
  4. Open your browser and navigate to:

    http://localhost:5173
    

Option 2: Docker Installation

  1. Clone the repository:

    git clone https://github.com/Toowan0x1/CORSer
    cd CORSer
  2. Build the Docker image:

    docker build -t CORSer .
  3. Run the container:

    docker run -p 5173:5173 CORSer
  4. Access the tool:

    http://localhost:5173
    

Usage Guide

Making a Request

  1. Enter the target URL in the URL input field
  2. Select the HTTP method (GET, POST, PUT, DELETE)
  3. Add any required headers using the "Add Header" button
  4. Click "Send Request" to make the API call

Understanding the Response

The response section displays:

  • Response time with performance indicators
  • CORS configuration status
  • HTTP status code
  • Response headers with copy functionality
  • Formatted response body with copy functionality

Features Implemented

🔹 Request Customization
  • Custom Headers: Add headers like Authorization, Content-Type, etc.
  • HTTP Method Selection: Choose from GET, POST, PUT, DELETE, and more.
  • Query Parameters Support: Append dynamic query parameters to requests.
🔹 CORS Analysis & Debugging
  • CORS Header Inspection: Analyze Access-Control-Allow-Origin, Access-Control-Allow-Methods, and Access-Control-Allow-Headers.
  • Preflight Request Testing: Simulate OPTIONS requests to check preflight responses.
  • Error Explanation: Provide insights into common CORS issues (e.g., missing headers, mismatched origins).
🔹 Response Handling
  • Response Display: View response headers, status codes, and body in a structured format.
  • History Log: Save recent tests for quick re-testing and reference.
🔹 User Interface
  • Clean & Intuitive Design: Easy-to-use interface for testing API requests.
  • Flexible Layout Options:
    • Horizontal View: Side-by-side request and response display.
    • Vertical View: Stacked layout with request on top and response below.

Tool Image

About

A simple web tool designed to test and analyze APIs and web applications for CORS vulnerabilities locally, providing detailed insights into preflight responses, headers, and potential issues.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published