OSWE – OffSec Web Expert Prep – Al-Khawarizmi Academy

About Course

Advanced, white-box web application exploitation: source code review methodology, chaining vulnerabilities, and authentication and cryptographic bypass techniques. Builds on OSCP-level skills toward the 48-hour practical exam.

About 55 hours.

Course Content

Module 1: Source code review methodology

Setting up a white-box review workflow
Identifying dangerous code patterns
Tracing user input through an application

OSWE – OffSec Web Expert Prep

About Course

Course Content

Module 1: Source code review methodology

Setting up a white-box review workflow

Identifying dangerous code patterns

Tracing user input through an application

Module 2: Advanced exploitation

SQL injection beyond the basics

Server-side template injection

Deserialisation vulnerabilities

Module 3: Authentication and session attacks

Authentication bypass techniques

Session and token weaknesses

Cryptographic implementation flaws

Module 4: Chaining and exam prep

Building a multi-step exploit chain

Writing a proof-of-concept exploit script

48-hour exam time management