ejcx · July 15, 2020 08:20
diff --git a/cors-scanner.sh b/cors-scanner.sh
 #!/bin/sh
 while read -r domain
 do
  # Remember. Account for the fact that some sites don't exist on HTTP
  # And others don't exist on HTTPS. Prune later.
  curl -I "https://$domain" --max-time 3 -H "Origin: https://$domain.evil.com" | ./respirator&
  curl -I "http://$domain" --max-time 3 -H "Origin: http://$domain.evil.com"   | ./respirator&
 done < "top1mdomains"
	#!/bin/sh
	while read -r domain
	do
	# Remember. Account for the fact that some sites don't exist on HTTP
	# And others don't exist on HTTPS. Prune later.
	curl -I "https://$domain" --max-time 3 -H "Origin: https://$domain.evil.com" \| ./respirator&
	curl -I "http://$domain" --max-time 3 -H "Origin: http://$domain.evil.com" \| ./respirator&
	done < "top1mdomains"