A review of ZeroPointSecurity's Certified Red Team Operator course.

A thorough review of The Cyber Mentor's new certification: The Practical Network Penetration Tester. Wondering what I thought of this new certificate disrupting the industry? Fear not! Let's dive right in.

Writeups and solutions for nearly all of the 2021 Metasploit Capture the Flag.

What's up, security folks! Today I'll be putting pen to the paper and going over my thoughts on the Evasion Techniques and Breaching Defenses course from Offensive Security, colloquially known as the OSEP. I passed my exam at the end of November, so consider this a review of the updated

Today we'll be exploring an ever so slightly harder Pwn challenge that appeared in TokyoWesterns 2017 - Just Do It!

Exploring the first Pwn challenge from Tamu19 CTF.

Exploring the first Pwn challenge of CSaw 2018 - Bigboi.

Insecure Deserialization is a concept that is often conveyed as one of the harder vulnerabilities to exploit, and I for one struggled to get my head around it initially. This has led to the creation of this post, where I'll be attempting to break down the concepts behind it and

Good afternoon folks! I've recently been studying for my CRTP [https://www.pentesteracademy.com/activedirectorylab], but my lab access expired. Now, I could pay for more time in the labs, but the elegant misconfigurations demonstrated by Nikhil Mittal in the CRTP really fascinated me. How easy was it to end

Good afternoon security fanatics. Back again today with a brief walk-through of a stored XSS (Cross Site Scripting) that I recently discovered in another wordpress poll plugin. YOP Polls, active on over 20,000 sites, allows users to create interactive and aesthetic polls that are fully customizable and perfect for

What's up everyone! Today I'll be quickly discussing my first CVE entry - CVE-2021-24442 - and my thought process when I decided to start looking for it. It's been my goal for a while, not only for a little confidence boost among the consistent industry imposter syndrome, but primarily to

With PicoCTF 2021 [https://play.picoctf.org] officially over, I thought I'd take the time to do a small write-up on a couple of the web challenges I completed. Nothing too complex here, some basic cookie manipulation, md5 collisions and a de-serialization vulnerability. It was great putting some of the

Write-Up for some of the binary exploitation challenges in PicoCTF 2021.

Synopsis Watcher was an eloquently constructed beginner level box designed to help introduce some key concepts and methods that are often seen across various penetration testing platforms. Despite not having any particularly difficult parts, it required some out of the box thinking as well as the ability to effectively analyse