**CORS Vulnerability Lab-No database required ** "CORS Vulnerability Lab-No Database Required" is an educational tool designed to help security enthusiasts and developers understand and exploit Cross-Domain Resource Sharing (CORS) configuration errors. The laboratory provides a hands-on environment where users can explore various CORS vulnerabilities without requiring database settings. ** Main characteristics: ** 1. ** Trust from any source: ** - Applications are configured to accept CORS requests from any source, making them vulnerable to data theft from malicious scripts from untrusted domains. 2. ** Unsafe regular expression implementation: ** - The application attempts to use regular expressions to match trusted domains to restrict CORS requests. However, due to poor regular expression implementation, it unexpectedly allows requests from unauthorized sources that contain certain substrings. 3. **Null Source Trust: ** - The application sets the Access-Control-Allow-Origin header to "null", allowing attackers to exploit certain scenarios to access sensitive data.
