📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

OSWE, OSEP, OSED, OSEE

Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool

Tips on how to write exploit scripts (faster!)

This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.

Whitebox source code review cheatsheet (Based on AWAE syllabus)

TUDO - A vulnerable PHP Web Application.

Becoming the spider, crawling through the webs to catch the fly.

My OSWE Pre-preperation (i.e. before acutally buying the course) phase plan and notes!

TESTR - Vulnerable Python Web-App to practice XSS and Command Injection

A python approach to interacting with web shells.

My Notes on Regular Expressions for AWAE/OSWE.

Regex patterns for manual application source code review

Chat.JS - Vulnerable NodeJS Web-App to practice NoSQLi and Deserialization exploitation

Notes on Preparing for Offsec

App with Server Side Template Injection (SSTI) vulnerability - possible RCE - in Flask. Free vulnerable app for ethical hacking / penetration testing training.

ORDER - A small Python web-app to practice blind SQLi in order by

VVBL is a list of vulnerable "boxes"/virtual machines collected from different platforms, where their attack techniques, services, operating system, difficulty, platform, etc. are specified.