CORS misconfiguration POC Builder

This is a PoC to demonstrate a CORS misconfiguration vulnerability on .

Settings

URL: 

Custom content type (optional): 

 Send authentication cookies (withCredentials)

 POST request

Post data: 

 Autosend payload

 Open target page to bypass tracking protection (source) (incompatible with autosend)

Send CORS request

---

Any information returned due to a lax CORS policy will be printed below: