CORS bug fixes - Githubissues

gotr00t0day / spyhunt

recon for bug hunters

429 stars 95 forks source link

CORS bug fixes #14

Closed xalgord closed 4 months ago

xalgord commented 4 months ago

simplified error handling.
added code for a timeout.
removed appended evil.com with the main domains.

I faced issues while running Cors scan on a list of URLs and there was a URL in the list with some connection problem. Due to this, the script got exited. So I improved the error handling and now it is working fine and also showing the URLs with connection problems.

xalgord commented 4 months ago

sample results:

Result 1: shows errors and continuity of the script:

Result 2: Shows vulnerable URLs that are manually confirmed:

xalgord commented 4 months ago

previous output:

NOT VULNERABLE: https://zendesk4.REDACTED.com PAYLOADS: https://zendesk4.REDACTEDevil.com, evil.com

now:

NOT VULNERABLE: https://zendesk4.REDACTED.com PAYLOADS: https://zendesk4.REDACTED.com, evil.com