PinnedFrank LeitnerCISSP-ISSAP: My summaryAfter a long(ish) wait I received my CISSP-ISSAP (Information Systems Security Architecture Professional) certification today.·4 min read·Aug 15, 2023----
PinnedFrank LeitnerCISSP: Exam thoughts and learning materialsI often read that the exam is tough and full of trick questions that try to guide you to the wrong answer. In my case, none of the…·4 min read·May 4, 2022----
PinnedFrank LeitnerYet another OSCP storyFinally, after a long COVID-19 induced delay, I recently received my printed certificate.·14 min read·Sep 17, 2020--1--1
Frank LeitnerinInfoSec Write-upsWrite-up: Information disclosure in version control history @ PortSwigger AcademyThis write-up for the lab Information disclosure in version control history is part of my walkthrough series for PortSwigger’s Web Security…3 min read·Feb 6, 2023----
Frank LeitnerinInfoSec Write-upsWrite-up: Authentication bypass via encryption oracle @ PortSwigger AcademyThis write-up for the lab Authentication bypass via encryption oracle is part of my walk-through series for PortSwigger’s Web Security…6 min read·Dec 20, 2022----
Frank LeitnerinInfoSec Write-upsWrite-up: DOM XSS in innerHTML sink using source location.search @ PortSwigger AcademyThis write-up for the lab DOM XSS in innerHTML sink using source location.search is part of my walkthrough series for PortSwigger’s Web…2 min read·Dec 13, 2022----
Frank LeitnerinInfoSec Write-upsWrite-up: SQL injection with filter bypass via XML encoding @ PortSwigger AcademyThis write-up for the lab SQL injection with filter bypass via XML encoding is part of my walk-through series for PortSwigger’s Web…5 min read·Dec 12, 2022----
Frank LeitnerinInfoSec Write-upsWrite-up: DOM XSS in document.write sink using source location.search @ PortSwigger AcademyThis write-up for the lab DOM XSS in document.write sink using source location.search is part of my walkthrough series for PortSwigger’s…3 min read·Dec 10, 2022----
Frank LeitnerinInfoSec Write-upsWrite-up: Source code disclosure via backup files @ PortSwigger AcademyThis write-up for the lab Source code disclosure via backup files is part of my walkthrough series for PortSwigger’s Web Security Academy.3 min read·Nov 30, 2022----
Frank LeitnerinInfoSec Write-upsWrite-up: Basic server-side template injection (code context) @ PortSwigger AcademyThis write-up for the lab Basic server-side template injection (code context) is part of my walk-through series for PortSwigger’s Web…4 min read·Nov 28, 2022----