This exam makes OSCP seem ridiculously easy. — This exam makes OSCP seem ridiculously easy. What is OSEP? If you are looking for the official details, then you can take a look over the Offensive Security page here: https://help.offensive-security.com/hc/en-us/articles/360050293792-OSEP-Exam-Guide Basically, OSEP is an exam that simulates a real environment that you have to compromise, from an external unauthenticated starting point.

In this article, we will discuss the Subdomain Takeover attack, and present 25 disclosed reports based on this flaw. — In this article, we will discuss the Subdomain Takeover attack, and present 25 disclosed reports based on this flaw. What is a Subdomain Takeover Vulnerability? Theoretically, a Subdomain Takeover flaw is when an attacker can hijack the subdomain of a company, and control what content is being displayed when the users are navigating to that one.

In this article, we will discuss some of my favorite OSINT techniques that can help during your penetration testing activities. — In this article, we will discuss some of my favorite OSINT techniques that can help during your penetration testing activities. What is OSINT? OSINT stands for “Open Source Intelligence”, and as the name suggests, it is a collection of techniques used to find security flaws in publicly-available information about an organization.

In this article, we will discuss the Server-Side Request Forgery (SSRF) vulnerability, and present 25 disclosed reports based on this flaw. — In this article, we will discuss the Server-Side Request Forgery (SSRF) vulnerability, and present 25 disclosed reports based on this flaw. What is Server-Side Request Forgery? SSRF is when you, as an attacker, successfully make the application triggering arbitrary requests.

In this article, we will discuss about one of the toughest exams from Offensive Security, the web expert one (OSWE). — In this article, we will discuss about one of the toughest exams from Offensive Security, the web expert one (OSWE). Mindset If the mindset for OSCP is “Try harder!”, then the mindset for OSWE would be something like “Try harder, but harder than ever!”. If you thought that OSCP contains a…

In this article, we will discuss some “uncommon” password policy best practices, that are not followed by a lot of companies. Those are… — In this article, we will discuss some “uncommon” password policy best practices, that are not followed by a lot of companies. Those are collected from the Penetration Testing assessments I have conducted over the years. Company-related Passwords Let’s take the following scenario:

Companies and organizations are lacking a lot of understanding of how a pentester or ethical hacker is working to provide the best results… — Companies and organizations are lacking a lot of understanding of how a pentester or ethical hacker is working to provide the best results possible. …

In this article, we will discuss the Account Takeover attack, and present 25 disclosed reports based on this issue. — In this article, we will discuss the Account Takeover attack, and present 25 disclosed reports based on this issue. What is Account Takeover? Account Takeover of Account Hijacking is the form of attack through which a threat actor gains access to an user account that he/she doesn’t have access to. From my perspective, it…

Through this article, we will discuss some tests and guidelines that are part of my Web Penetration Testing methodology. — Through this article, we will discuss some tests and guidelines that are part of my Web Penetration Testing methodology. Testing for Username/Email Enumeration through Login Error Message Discrepancy through Forgot/Reset Password Functionality through Registration Form through Response Time Discrepancy