CORS Wildcard Exposure Detector
Detect wildcard origins, reflect-origin, and credentials-with-wildcard CORS patterns in HAR response headers. Free CORS security tool by Graph Tools.
Use this free CORS wildcard exposure detector to scan HAR response headers for permissive CORS configurations. The tool flags wildcard Access-Control-Allow-Origin values, reflect-origin patterns that mirror any requesting domain, and the dangerous combination of credentials-allowed with wildcard origin. Upload a HAR file and get a list of affected endpoints with risk levels. Useful for security engineers, web developers, and QA teams auditing browser-facing APIs.