Please note: the information and techniques here described are targeted at security enthusiasts and/or professionals for learning purposes and professional consultancy services. This does not, by any means, promote or incentivize the usage of the techniques for any cyber crime Read more
Advanced Web Attacks and exploitation (WEB-300) is an advanced web application security course that teaches the skills needed to conduct white box web app penetration tests. Learners who complete the course and pass the exam earn the Offensive Security Web Read more
Wireless Attacks (PEN-210) introduces learners to the skills needed to audit and secure wireless devices and is a foundational course alongside PEN-200 and benefits those who would like to gain more skills in network security. Learners will identify vulnerabilities in Read more
As an Offensive Security 200 level course, OSWA can be easily compared to OSCP at a certain level, where you’ll have 5 Web applications as targets with the objective of collecting local.txt and proof.txt flags to score points. Every flag Read more
As mobile apps are a very common scope between the projects I currently take, I realized it would be a good idea to get certified on the topic. eMAPT is the only mobile certification besides the GIAC Mobile Device Security Analyst Read more
Having bought INE’s premium plan, I have access to the Attacking and Defending Active Directory course. After passing the OSCP, my plan was to move further into Red Teaming, and CRTP seemed to be a good fit for the first step. Read more
There aren’t many black-box oriented certifications in the market regarding Web applications, where eLS offers two (eWPT and eWPTX) and Offensive Security now has the Web Assessor / OSWA, which costs $2.499,00 on its cheapest version. Background and Preparation After Read more
The famous and all mighty HR gatekeeper, no introductions needed. If you live in a cave and haven’t heard of OffSec or the OSCP exam, you can find details here. Background and Preparation This is an exam that I actually Read more
Introduction Structured exception handling (SEH) is a Microsoft extension to C to handle certain exceptional code situations, such as hardware faults. Developers will often make use of similar constructs among different languages, such as try-catch, try-except or try-finally statements. Such Read more
