|
You are here |
blog.reybango.com | ||
| | | | |
talesfromtheencrypt.home.blog
|
|
| | | | | https://www.alteredsecurity.com/adlab In May 2022 I took the CPSA exam (and passed). This was my only cybersecurity cert other than the OSCP I had gained in October 2019, and so the first one I had gained while being a pentester as a job. The cert is just an exam, no related course, so as nice as... | |
| | | | |
www.terminal23.net
|
|
| | | | | ||
| | | | |
x0rb3l.github.io
|
|
| | | | | In my last two posts, I discussed my experience with AWAE/OSWE and ETBD/OSEP and how they are two of the trinity in obtaining the coveted OSCE3 certification. This post is aimed at discussing my experience with the third and final course: Windows User Mode Exploit Development (WUMED) and Offensive Security Exploit Developer (OSED) exam. I will also briefly discuss the motivation behind obtaining all three certs within a six-month period.WUMED focuses on identifying vulnerabilites through reverse engineering Windows applications that run in user mode. It takes it a step beyond regular stack-based overflows and teaches you how to bypass common mitigations such as ASLR and DEP. It also teaches you how to create your own custom 32-bit shellcode.You can find out ... | |
| | | | |
notsosecure.com
|
|
| | | Cryptography has various advantages including confidentiality of information. However overzealous reliance on cryptography for securing applications is a bad idea. In this blog Sunil Yadav our lead trainer for "Appsec for Developers" training class, will discuss a case study where a SQL injection vulnerability was identified and exploited via an encrypted payload. Note: We are | ||