Cross-Origin Resource Sharing (CORS) Courses and Certifications

Hussein Nasser

Cross Origin Resource Sharing - Explained by Example

Explains CORS errors and solutions through practical examples, covering common issues like missing headers, preflight requests, and content-type restrictions.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

OWASP Foundation

Security Implications of Cross-Origin Resource Sharing - HTML5 and CORS Analysis

Explore security implications of Cross-Origin Resource Sharing in HTML5, including its impact on same-origin policy, potential vulnerabilities, and mitigation strategies for web application developers.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Of CORS It's Exploitable - What's Possible with Cross-Origin Resource Sharing

Explore Cross-Origin Resource Sharing (CORS), its vulnerabilities, and exploitation techniques. Learn about REST, authentication, and effective CORS defenses in web security.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

BSides Bristol

Cross Origin Resource Sharing (CORS) - How to Implement It Properly

Dive into Cross Origin Resource Sharing (CORS) implementation techniques, security implications, and best practices for web development, featuring practical examples and common pitfalls to avoid.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Packt

AJAX Authentication and Cross-Origin Requests

Enhance web security with HTTP Basic Authentication for AJAX. Learn server setup, form security, and modern Fetch API. Master CORS and SOP for robust cross-origin communication.

• Coursera
• 6 hours 22 minutes
• Self-Paced
• Paid Course

A variety of free challenges recreated based on real bug bounty findings.

• Independent
• Self-Paced
• Free Online Course

OWASP Foundation

Exploiting CORS Misconfigurations for Bitcoins and Bounties - AppSec EU 2017

Explore CORS misconfigurations and their security implications, including real-world attacks on bitcoin exchanges and Google. Learn about subtle vulnerabilities and exploit techniques for web security professionals.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Dan Vega

Configuring CORS in Spring Boot and Spring Security

Configure Cross-Origin Resource Sharing (CORS) in Spring Boot and Spring Security. Learn implementation at controller, method, and global levels for flexible cross-domain request authorization.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

OWASP Foundation

Common REST API Security Pitfalls

Explore common REST API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security for robust, future-proof applications.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Next Gen Web Pen Testing - Handling Modern Applications in a Penetration Test

Explore modern web application security testing techniques, including HTTP/2, WebSockets, CORS, REST APIs, and Content Security Policy. Learn to adapt penetration testing methods for evolving technologies.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

HackerOne

TruffleHog Chrome Extension - Open CORS in SAAS API's Lead to Leaky Keys

Discover API keys hidden in web pages with the open-source TruffleHog Chrome extension. Learn how to use this tool and explore real-world examples of exposed keys in SaaS APIs with open CORS.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Misconfigured CORS and Web Application Security Challenges

Explore CORS misconfiguration vulnerabilities and the challenges of implementing advanced browser security features, with insights on balancing security and operational complexity.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

OWASP Foundation

Exploiting CORS Misconfigurations for Bitcoins and Bounties

Explore CORS misconfigurations and their exploitation potential, including real-world examples of vulnerabilities in bitcoin exchanges and major websites. Learn about specification flaws and mitigation strategies.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

NDC Conferences

Defensive Coding Bootcamp - NDC Melbourne

Learn essential security practices to build robust, hack-resistant software. Explore vulnerabilities, evasive coding techniques, and fundamental principles applicable across programming languages for developers of all levels.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

To CORS - The Cause of and Solution to Your SPA Problems

Explore CORS issues in Single Page Applications, their causes, and effective solutions for improved web development and security.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk