Course outline

Hello everybody and welcome to this offensive workshop. This file contains the outline for the start of course.

If you get stuck with exploitation you can use this outline as a reference to get some step by step guiding on how to do recoginsance to discover the vulnerability, and also how to build your exploit!

Do not worry if you do not manage to find al the exploits during the course. We will provide the slides after the session and are always ready to help!

You can reach us at:

• Glenn.ten.cate@owasp.org
• Riccardo.ten.cate@owasp.org

For the outline we will provide the following topics:

• Deserialization attack
• Server side template injection
• Exploiting CORS misconfiguration
• External entity attack