25.6.19
This website uses cookies to ensure you get the best experience on our website. Learn more

OffSec Web Expert (OSWE)

Certified OSWEs have a clear and practical understanding of white box web application assessment and security. They’ve proven their ability to review advanced source code in web apps, identify vulnerabilities, and exploit them. OSWEs can: * Perform advanced web app source code auditing * Analyze code, write scripts, and exploit web vulnerabilities * Implement complex chained attacks using multiple vulnerabilities * Use creative and lateral thinking to determine innovative ways of exploiting web vulnerabilities They are able to assist web development teams in creating and maintaining web apps that are secure by design.

Skills / Knowledge

  • Persistent Cross-Site Scripting
  • Session Hijacking
  • Data Exfiltration
  • Bypassing File Extension Filters
  • Magic Hashes
  • PostgreSQL Extension and User-Defined Functions
  • Bypassing REGEX Restrictions
  • Cross-Site Request Forgery
  • Type Juggling
  • Blind SQL Injection
  • Bypassing File Upload Restrictions
  • Loose Comparisons
  • Bypassing Character Restrictions
  • PostgreSQL Large Objects
  • Debugging .NET Assemblies

Issued on

May 1, 2023

Expires on

Does not expire

Earning Criteria

Required