CORS (Cross-Origin Resource Sharing)

Cross-platform resources for CORS (Cross-Origin Resource Sharing): curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

CORS (Cross-Origin Resource Sharing)

This page aggregates cross-platform resources to practice CORS (Cross-Origin Resource Sharing): retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Curated resources

Source	Link
PortSwigger	https://portswigger.net/web-security/cors

PortSwigger labs practicing CORS (Cross-Origin Resource Sharing) (3)

Lab	Difficulty	Topic	Official
CORS vulnerability with basic origin reflection	APPRENTICE	CORS	Open
CORS vulnerability with trusted null origin	APPRENTICE	CORS	Open
CORS vulnerability with trusted insecure protocols	PRACTITIONER	CORS	Open

---

← Back to the full glossary

Last updated: 2026-05-08