Introduction This is a review of the Advanced Web Attacks and Exploitation (WEB-300) course and its OSWE exam by Offensive-Security. I've taken this course because I was curious about what secret tricks this course will offer for its money, especially considering that I've done a lot of source code reviews in different languages already.
Apr 22, 2022As you may have noticed, I have posted a couple of articles about my SecurityTube Linux Assembly Expert exam during the last months. Now that I have successfully completed the course, I just want to share my thoughts about it for those of you who think about taking the course but are unsure if it's the right one.
Jun 27, 2016Do you want to fool antivirus software? When you look through hacking forums for a solution to this, you will likely encounter the term "crypter". You will also find this tool in the arsenal of every advanced penetration tester and it is the obvious standard for an advanced persistent threat (APT).
Apr 28, 2016Question: How can signature-based Intrusion Detection systems be defeated? Answer: Using polymorphic shellcodes! This might sound really crazy and cyber, but it has nothing to do with inventing fancy new hacking techniques, it's rather about puzzling.
Apr 12, 2016One very common tool among penetration testers is Metasploit, which includes a lot of nice exploits and payloads. The 5th assignment of the SecurityTube Linux Assembly Expert certification is about Metasploit shellcode analyses for Linux/x86 target systems.
Aug 13, 2015Anti-Virus and Intrusion Detection Systems could become really nasty during a penetration test. They are often responsible for unstable or ineffective exploit payloads, system lock-downs or even angry penetration testers ;-) .
Jan 18, 2015Happy Easter everyone! Have you already found all your hidden eggs? No?
Aug 23, 2014Now Mario meets Luigi....or what's a bind without a reverse shellcode? I've spend some extra time again to reduce the shellcode size and make it fully register aware, so that this shellcode could handle every exploit-scenario.
Jul 25, 2014Do you like uncommon challenges? At least I do, and that's the reason why I've signed up for the SecurityTube Linux Assembly Expert training. But what's this all about ?
Jul 13, 2014As you may have noticed - it went quiet on my blog in the last few weeks. I was heavily working on the challenging Offensive-Security Labs to obtain my **O**ffensive-**S**ecurity **C**ertified **P**rofessional (OSCP) certification.
May 1, 2013Great news! I just received an email from Armando Romeo from eLearnSecurity that I have PASSED the eCPPT exam :-)!!! In December 2011 I decided to take the course "Certified Professional Penetration Tester" provided by eLearnSecurity which is - according to many posts on ethicalhacker.net - a very good preparation for the highly challenging OSCP from Offensive-Security, which I will take next :-).
Mar 30, 2012