wgpsec/aboutsecurity

cors-misconfiguration

CORS 跨域配置错误检测与利用。当目标 API 返回 Access-Control-Allow-Origin 响应头、需要跨域访问敏感数据、或发现 Origin 头被反射回响应中时使用。可导致用户敏感数据窃取

First seen Mar 25, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity

View on skills.sh ↗ GitHub repository ↗

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

>- CORS misconfiguration testing playbook. Use when analyzing cross-origin trust, credentialed …

>- OAuth and OIDC misconfiguration testing playbook. Use when reviewing redirect URI handling, …

Identifying and exploiting Cross-Origin Resource Sharing misconfigurations that allow unauthori…

Identifying and exploiting OAuth 2.0 and OpenID Connect misconfigurations including redirect UR…

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity

More details

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared

Cursor Not declared

Codex Not declared

GitHub Copilot Not declared

Windsurf Not declared

Gemini CLI Not declared

Cline Not declared

OpenCode Not declared

Stars 1.7K

Default branch master

Open issues 0

Status Active

npx skills add https://github.com/wgpsec/aboutsecurity