I often read that the exam is tough and full of trick questions that try to guide you to the wrong answer. In my case, none of the questions I encountered I would consider trick questions. But I understand why this perception exists and why many technical people find the…

Finally, after a long COVID-19 induced delay, I recently received my printed certificate. This is yet another story about the journey towards OSCP. I’ll give my impressions of the course and the steps I used to prepare for the exam. …

This write-up for the lab Information disclosure in version control history is part of my walkthrough series for PortSwigger’s Web Security Academy. Learning path: Server-side topics → Information disclosure Lab: Information disclosure in version control history | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net

This write-up for the lab Authentication bypass via encryption oracle is part of my walk-through series for PortSwigger’s Web Security Academy. Learning path: Server-side topics → Business logic vulnerabilities Lab: Authentication bypass via encryption oracle | Web Security Academy This lab contains a logic flaw that exposes an encryption oracle to users. To solve the lab, exploit this flaw to gain…portswigger.net

This write-up for the lab DOM XSS in innerHTML sink using source location.search is part of my walkthrough series for PortSwigger’s Web Security Academy. Learning path: Client-side topics → Cross-site scripting Lab: DOM XSS in innerHTML sink using source location.search | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net

This write-up for the lab SQL injection with filter bypass via XML encoding is part of my walk-through series for PortSwigger’s Web Security Academy. Learning path: Server-side topics → SQL injection Lab: SQL injection with filter bypass via XML encoding | Web Security Academy Identify the vulnerability Observe that the stock check feature sends the productId and storeId to the application in…portswigger.net

This write-up for the lab DOM XSS in document.write sink using source location.search is part of my walkthrough series for PortSwigger’s Web Security Academy. Learning path: Client-side topics → Cross-site scripting Lab: DOM XSS in document.write sink using source location.search | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net

This write-up for the lab Source code disclosure via backup files is part of my walkthrough series for PortSwigger’s Web Security Academy. Learning path: Server-side topics → Information disclosure Lab: Source code disclosure via backup files | Web Security Academy This lab leaks its source code via backup files in a hidden directory. To solve the lab, identify and submit the…portswigger.net Python script: script.py

This write-up for the lab Basic server-side template injection (code context) is part of my walk-through series for PortSwigger’s Web Security Academy. Learning path: Advanced topics → Server-side template injection Lab: Basic server-side template injection (code context) | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net