Cybersecurity is a rapidly evolving field, with an increasing demand for skilled professionals to combat sophisticated cyber threats…

Why PEN-2300 (OSEP) is a Game-Changer:
✅ Master Advanced Exploitation — Learn how to exploit and secure complex systems
✅ Hands-On…

On one of the random offensive engagements at work, I came across a vulnerable website and could get a web shell. However, no matter what…

OSEP is more of a marathon than a race. This post narrates my experience, contains advice for students, and a review of the course.

Ready to level up your hacking skills?

Exploiting OpenNetAdmin, Internal Services, and Sudo for Full Compromise

From SSRF to Root via Python Debugger Exploitation

Gitbucket Enumeration, Tomcat Exploitation, and Ansible Abuse

Cracking ZIPs, Abusing LAPS, and Escalating to Administrator on an Easy Windows Box

On new year’s eve 2024, exactly 2 years after buying PEN-200 (OSCP), I decided to take the leap of faith and purchase the Learn One package…

沒想到取得 OSCP 已經是兩年前的事。身為紅隊仔，雖然一直把 OSEP 放在目標清單中，卻遲遲沒有下手。直到在年初考過 CRTP，對 Active Directory 有更進一步的了解後，感覺可以來挑戰看看，順便完成一個里程碑。

Let’s prepare for OSEP examination

Let’s prepare for OSEP examination

Let’s prepare for OSEP examination

Introduction:

Most pentesters or OffSec students are familiarized with inbound SQLi. Those are the kind of injections that give the user some text back…

A technical breakdown of Preparation and Exam Strategies

Helloooo once again readers, I had the opportunity to take the Certified Active Directory Pentesting Expert (CAPE) exam offered by…