chenjj/CORScanner

Health v2 · maintenance only

Adoption not part of the score

1162 stars · 183 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

CORScanner is a fast Python tool for detecting CORS misconfiguration vulnerabilities in websites, using gevent for high-concurrency network scanning. It can be used as a CLI tool or imported as a Python library, and supports scanning domains, URLs, and IP ranges at scale.

Use cases

• scan websites for CORS misconfiguration vulnerabilities
• check if a domain has an insecure CORS policy
• bulk scan a list of urls for cors issues
• audit cross-origin resource sharing headers during a pentest
• find reflect origin cors vulnerabilities
• integrate cors checking into a python security tool

When to choose

• you need a fast, purpose-built scanner for CORS misconfigurations
• you want to scan large lists of domains concurrently
• you need a CORS check you can call from Python code
• you are a penetration tester auditing web application security

When to avoid

• you need a general-purpose web vulnerability scanner covering many vulnerability classes
• you need actively developed tooling with recent updates and support
• you need GUI-based scanning or reporting
• you need to detect vulnerabilities other than CORS issues

Facets

cli-tool · maturity maintenance

vulnerability-scanning security http-client cli security penetration-testing web-development developer-tools python cli windows cross-platform cors cors-misconfiguration web-security penetration-testing python3 gevent security-scanner linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="chenjj/CORScanner")