Web Application Exploitation

HTTP Request Headers as an Attack Vector

Can misconfigured HTTP request headers be as dangerous as parameters sent to the server? The short answer is: absolutely. HTTP headers are...

Read More

Certification

My Journey to the Offensive Security Experienced Penetration Tester (OSEP) Certification

In November 2024, I successfully passed the OSEP exam and earned the Offensive Security Experienced Penetration Tester certification....

Read More

Penetration Testing

Red Teaming

Exploit Development

Malware Development

Reverse Engineering

Privilege Escalation Techniques

Lateral Movement & Persistence

Active Directory Attacks

Offensive Cloud Security

Mobile Application Exploitation

Active Directory Attacks

Web Application Exploitation

Web Application Exploitation

HTTP Request Headers as an Attack Vector – Partie Deux

Last time I have showcased a three interesting headers that can be used as attack vector. This time I will showcase a three more, however...

Read More

Web Application Exploitation

HTTP Request Headers as an Attack Vector

Can misconfigured HTTP request headers be as dangerous as parameters sent to the server? The short answer is: absolutely. HTTP headers are...

Read More

Social Engineering Attacks

Network Exploitation

C2 Frameworks

OSINT

Exams

Certification

My Journey to the Offensive Security Experienced Penetration Tester (OSEP) Certification

In November 2024, I successfully passed the OSEP exam and earned the Offensive Security Experienced Penetration Tester certification....

Read More

CTF Writeups & Challenges

Visited 1 times, 1 visit(s) today
Close