Blog
Zero Trust Offsec Official Blog
2025 Permalink
From Ropa Americana to Root Access
Weaponizing thrift store fashion for unauthorized access. Keep reading From Ropa Americana to Root Access
Review Burp Suite Certified Practitioner (BSCP)
Tips for passing the BSCP on your first attempt. Keep reading Review Burp Suite Certified Practitioner (BSCP)
MFA Mechanisms Part 1 - Uh, no limit?!
Abusing no rate limiting in MFA mechanisms. Keep reading MFA Mechanisms Part 1 - Uh, no limit?!
Pentesting vs Red Team - What’s the deal?
Pentesting vs Red Team - What’s the deal? Keep reading Pentesting vs Red Team - What’s the deal?
2024 Permalink
Vulnerability CVE-2024-23897 in Jenkins: All You Need to Know
Analyzing Vulnerability CVE-2024-23897. Keep reading Vulnerability CVE-2024-23897 in Jenkins: All You Need to Know
Unauthenticated access to ADB Daemon
Risks of ADB Port Exposure on Android Devices Keep reading Unauthenticated access to ADB Daemon
Analyzing CVE-2024-4577
this is a deep-dive into the PHP CGI RCE vulnerability. Keep reading Analyzing CVE-2024-4577
2023 Permalink
Cross Site Scripting (XSS)
Learn what cross site scripting is and what its mechanism is. Keep reading Cross Site Scripting (XSS)
Introduction to assembly language
Learn the basic concepts necessary to analyze code in assembly language. Keep reading Introduction to assembly language
Basic Binary Analysis
Learn the procedure to perform basic binary analysis on Linux. Keep reading Basic Binary Analysis
Essential tools for image forensics
Learn how the tools used to analyze images work. Keep reading Essential tools for image forensics
Subnetting
Learn how subnetting works Keep reading Subnetting
Permissions in Linux
Learn how permissions work in Linux Keep reading Permissions in Linux
Evil-Twin and Evil-Portal Attack
Capturing credentials via an Evil Portal attack using a Pineapple WiFi Keep reading Evil-Twin and Evil-Portal Attack
