OSWE/AWAE Preparation
Jan 22, 2020WebExploit Development Share on:
OSWE Exam Preparation
This post contains all trainings and tutorials that could be useful for offensive security’s OSWE certification. I will be updating the post during my lab and preparation for the exam.
Course Syllabus:
https://www.offensive-security.com/documentation/awae-syllabus.pdf
Before registering for AWAE Lab:
- Get comfortable with python requests library
- Read Web Application Hacker’s handbook, again if you already did
- Get familiar with Burpsuite
- Get familiar with regex
- Get hands on with OWASP top 10 2017 Vulnerabilities
- Practice code review skills - OWASP SKF
Before registering for the OSWE Exam:
XSS to RCE
Bypassing File Upload Restrictions:
Authentication Bypass to RCE
Password Reset Vulnerability
SQL Injection:
- RCE with SQL Injection - MSSQL
- SQL Injection to LFI to RCE - MySQL
- From SQLi to SHELL (I and II) - PentesterLab
- Pre-Auth Takeover of OXID eShops
- Blind SQL Injection
- [Paper] PostgreSQL Injection
- Having Fun With PostgreSQL
- Blind Postgresql Sql Injection Tutorial
- SQL Injection Cheat Sheet - PentestMonkey
- SQL Injection Cheat Sheet - PayloadAllTheThings
- Exploiting H2 SQL injection to RCE
JavaScript Injection:
- Server Side JS Injection
- Remote Code Execution in math.js
- Arbitrary code execution in fast-redact
- NVIDIA GeForce Experience OS Command Injection - CVE-2019-5678
- SetTimeout and SetInterval use eval therefore are evil
- Pentesting Node.js Application : Nodejs Application Security
- NodeJS remote debugging with vscode
- Escape NodeJS Sandboxes
PHP Type Juggling:
- OWASP - PHPMagicTricks TypeJuggling
- PHP Type Juggling - Introduction
- Type Juggling, PHP Object Injection, SQLi
- Writing Exploits For PHP Type Juggling
- Type Juggling Authentication Bypass Vulnerability in CMS Made Simple
- PHP Magic Hashes
- Detailed Explanation of PHP Type Juggling Vulnerabilities
- [Video] PHP Type Juggling Vulnerabilities, Netsparker
- [Video] Falafel machine from HackTheBox
Deserialization:
- Deserialization_Cheat_Sheet
- Insecure deserialization - PayloadAllthethings
- [Paper] Deserialization Vulnerability
- Serialization : A Big Threat
JAVA Deserialization
- Understanding & practicing java deserialization exploits
- Understanding JAVA Deserialization
- Exploiting blind Java deserialization with Burp and Ysoserial
- Details on Oracle Web Logic Desrialization
- Analysis of Weblogic Deserialization
- [Video] Matthias Kaiser - Exploiting Deserialization Vulnerabilities in Java
.NET Deserialization
PHP Object Injection/Deserialization
- What is PHP Object Injection
- phpBB 3.2.3: Phar Deserialization to RCE
- Exploiting PHP Desrialization
- Analysis of typo3 Deserialization Vulnerability
- Attack Surface of PHP Deserialization Vulnerability via Phar
- [Video] Intro to PHP Deserialization / Object Injection - Ippsec
- [Video] Advanced PHP Deserialization - Phar Files - Ippsec
- [Video] Exploiting PHP7 unserialize (33c3)
NodeJS Deserialization
XML External Entity (XXE) Attack
Server Side Template Injection (SSTI)
Websocekts InSecurity
Source Code Audit
- Introduction to Code Review [PentesterLab]
- Static code analysis writeups
- TrendMicro - Secure Coding Dojo
- Bug Hunting with Static Code Analysis [Video]
- Shopify Remote Code Execution - Hackerone
- Finding vulnerabilities in source code ( APS.NET)
- A deep dive into ASP.NET Deserialization
- Writeups by mr_me
Youtube Playlist
Further References/Reviews