This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.

A python approach to interacting with web shells.

ORDER - A small Python web-app to practice blind SQLi in order by

Chat.JS - Vulnerable NodeJS Web-App to practice NoSQLi and Deserialization exploitation

Becoming the spider, crawling through the webs to catch the fly.

Whitebox source code review cheatsheet (Based on AWAE syllabus)

VVBL is a list of vulnerable "boxes"/virtual machines collected from different platforms, where their attack techniques, services, operating system, difficulty, platform, etc. are specified.

App with Server Side Template Injection (SSTI) vulnerability - possible RCE - in Flask. Free vulnerable app for ethical hacking / penetration testing training.

TESTR - Vulnerable Python Web-App to practice XSS and Command Injection

My OSWE Pre-preperation (i.e. before acutally buying the course) phase plan and notes!

TUDO - A vulnerable PHP Web Application.

Notes on Preparing for Offsec

My Notes on Regular Expressions for AWAE/OSWE.

Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool

Tips on how to write exploit scripts (faster!)

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report