Bridging The Security Gap

Sara's blog

By Sara Jan 02, 2020

Offensive Security’s AWAE is available in beta and I got invited! This blog describes my journey after OSCP and OSWP towards this OSWE certification. I thought I kind of know what to expect, but I was wrong...


By Sara Jun 06, 2019

Multiple webservices on the SAS application are vulnerable to Java deserialization attacks and Unauthenticated XML External Entities in SAS BI Web Services 9.4


By Sara Jun 06, 2019

Meerdere webservices op de SAS applicatie zijn kwetsbaar voor Java deserialisatie aanvallen en het rest endpoint /SASBIWS/rest/services is kwetsbaar voor XML External Entity aanvallen.


Pages