How out-of-memory corruption and stale worker state became two critical PHP RCEs and why the original exploit theory got it wrong.
The post php2shell: anatomy of two PHP lifecycle bugs appeared first on OffSec.
Β‘Hola a todos!Β Con este post da comienzo una serie de 3 posts donde hablarΓ© de las certificaciones que forman OSCE3 y de cΓ³mo yo me las he preparado.Β ΒΏQuΓ© es OSCE3?Β Si llevas algΓΊn tiempo en el mundo de la ciberseguridad ofensiva, seguro que has oΓdo hablar del OSCP (Offensive Security Certified Professional). Es
The post Road to OSCE3: Episodio 1 β OSEP appeared first on OffSec.
Most talk about offensive security agents is about power. Can it find the bug? Can it chain the exploit? Can it own the box? Thatβs the easy part. Wiring a model up to tools is normal engineering now, and raw capability improves on its own every time a new model ships. The parts that donβt
The post Knowing what not to attack appeared first on OffSec.
Recently, I read a great post by Melvin Tan Zhi Xian sharing his thoughts halfway through the OffSec OSAI+ course. He touched on something crucial that isnβt being talked about enough: how the methodology for attacking AI doesnβt map cleanly to a standard pentest framework. Melvinβs feedback really resonated with me. It sparked a deeper
The post Why βAI Pentestingβ is the Wrong Term (And Why We Need AI Red Teaming) appeared first on OffSec.
Effective hardening requires balancing security, operational needs, and long term maintainability.
The post Intro to STIG Tools appeared first on OffSec.
OffSec Community Chapters: Taiwan
The post εΎ Noob ε° Ambassador ηζ η¨ appeared first on OffSec.
OffSec Community Chapters: Spain
The post Matcha, SueΓ±o y Ejercicio: La GuΓa Off-Topic del Hacker Saludable appeared first on OffSec.
OffSec Community Chapters: Jordan
The post Beat AI or Let AI Beat You appeared first on OffSec.
Login
