Frank Leitner – Medium

Pinned

CISSP: Exam thoughts and learning materials

I often read that the exam is tough and full of trick questions that try to guide you to the wrong answer. In my case, none of the questions I encountered I would consider trick questions. But I understand why this perception exists and why many technical people find the…

Cissp

4 min read

Pinned

Yet another OSCP story

Finally, after a long COVID-19 induced delay, I recently received my printed certificate. This is yet another story about the journey towards OSCP. I’ll give my impressions of the course and the steps I used to prepare for the exam. …

Oscp Preparation

14 min read

20 hours ago

Write-up: 2FA broken logic @ PortSwigger Academy

This write-up for the lab 2FA broken logic is part of my walkthrough series for PortSwigger’s Web Security Academy. Learning path: Server-side topics → Authentication Lab: 2FA broken logic | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net Python script: script.py Lab description

Portswigger

3 min read

3 days ago

Write-up: Username enumeration via account lock @ PortSwigger Academy

This write-up for the lab Username enumeration via account lock is part of my walkthrough series for PortSwigger’s Web Security Academy. Learning path: Server-side topics → Authentication Lab: Username enumeration via account lock | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net Python script: script.py

Portswigger

3 min read

6 days ago

Write-up: Broken brute-force protection, IP block @ PortSwigger Academy

This write-up for the lab Broken brute-force protection, IP block is part of my walkthrough series for PortSwigger’s Web Security Academy. Learning path: Server-side topics → Authentication Lab: Broken brute-force protection, IP block | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net Python script: script.py

Portswigger

3 min read

Jun 21

Write-up: Username enumeration via subtly different responses @ PortSwigger Academy

This write-up for the lab Username enumeration via subtly different responses is part of my walkthrough series for PortSwigger’s Web Security Academy. Learning path: Server-side topics → Authentication Lab: Username enumeration via subtly different responses | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net

Portswigger

3 min read

Jun 19

Write-up: Password reset broken logic @ PortSwigger Academy

This write-up for the lab Password reset broken logic is part of my walkthrough series for PortSwigger’s Web Security Academy. Learning path: Server-side topics → Authentication Lab: Password reset broken logic | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net Python script: script.py Lab description

Portswigger

2 min read

Jun 18

Write-up: Exploiting XSS to perform CSRF @ PortSwigger Academy

This write-up for the lab Exploiting XSS to perform CSRF is part of my walk-through series for PortSwigger’s Web Security Academy. Learning path: Client-side → Cross-site scripting (XSS) Lab: Exploiting XSS to perform CSRF | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net Python script: script.py

Portswigger

4 min read

Jun 17

Write-up: DOM-based cookie manipulation @ PortSwigger Academy

This write-up for the lab DOM-based cookie manipulation is part of my walk-through series for PortSwigger’s Web Security Academy. Learning path: Client-side topics → DOM-based vulnerabilities Lab: DOM-based cookie manipulation | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net Python script: script.py

Portswigger

4 min read

Jun 16

Write-up: DOM-based open redirection @ PortSwigger Academy

This write-up for the lab DOM-based open redirection is part of my walk-through series for PortSwigger’s Web Security Academy. Learning path: Client-side → DOM-based vulnerabilities Lab: DOM-based open redirection | Web Security Academy Practise exploiting vulnerabilities on realistic targets. Record your progression from Apprentice to Expert. See where…portswigger.net Python script: script.py Lab description

Portswigger

2 min read