Finding CORS misconfigurations
#scripts

site="example.com"; gau "$site" | while read url;do target=$(curl -s -I -H "Origin: evil.com" -X GET $url) | if grep 'evil.com'; then [Potentional CORS Found]echo $url;else echo Nothing on "$url";fi;done

#scripts
Find SSRF with this simple pattern 😌

gau domain.tld | grep -E "\?.*https?"