Author: <span class="vcard">admin</span>

JWT Exfiltration Optimization & Blind MySQLi

Introduction It was a bloody rainy day in the mid of 2013, when my teacher went over the term “Big O Notation” during the data structure class, back then in LIU university in Lebanon. I didn’t know that I’d fancy use it in my career, and I haven’t had the guts to use it then….


The State of OSWE

Introduction This document is intended as a resource for those who want to conduct white-box pen-testing engagement or who’re preparing for Offensive Security Web Expert (OSWE) exam. After reading this recipe you should understand what is required to be successful at the white-box pen-testing process and to hopefully pass OSWE exam. Intentions The intent of…