Blogs

Offensive Security’s Advanced Web Attacks and Exploitation (AWAE)

By Sara Jan 02, 2020

Offensive Security’s AWAE is available in beta and I got invited! This blog describes my journey after OSCP and OSWP towards this OSWE certification. I thought I kind of know what to expect, but I was wrong...

ethical hacking

With

ENG: The S-Unit finds three high impact vulnerabilities in SAS Business Intelligence software

By Sara Jun 06, 2019

Multiple webservices on the SAS application are vulnerable to Java deserialization attacks and Unauthenticated XML External Entities in SAS BI Web Services 9.4

penetrationtest exploit CVE

With

The S-Unit vindt drie kwetsbaarheden met hoge impact in SAS Business Intelligence software

By Sara Jun 06, 2019

Meerdere webservices op de SAS applicatie zijn kwetsbaar voor Java deserialisatie aanvallen en het rest endpoint /SASBIWS/rest/services is kwetsbaar voor XML External Entity aanvallen.

Pentesting exploits CVE

With