Of-CORS: a framework for hacking internal apps with open CORS
trufflesecurity.com