🌍 17 — CORS Misconfig

Easy Medium Hard
0/3 solved

🔓 Easy — Exploit null origin CORS.

Use the CORS API from an attacker page.

Access the API with Origin: null.