Blog

Security Insights & Experiences

Sharing knowledge, experiences, and insights from the world of offensive security.

Categories

Archives

OSWA Review
Certification Reviews
May 8th
5 min read

OSWA Review

Back in December 2022, OffSec was offering $500 off of their LearnOne Subscription. If you're not familiar with OffSec's LearnOne Subscription...

Continue reading
PenTest+ Review
Certification Reviews
Feb 25th
7 min read

PenTest+ Review

I cleared the PenTest+ exam last week. I wanted to share my study experience & recommendations on what I did to pass.

Continue reading
Practical Junior Mobile Tester + Certified Mobile Pentester (CMPen) - Android Review
Mobile Security
December 31th, 2023
10 min read

Practical Junior Mobile Tester + Certified Mobile Pentester (CMPen) - Android Review

Been a bit since my last post. Took a little bit of time off for the Holidays and figured I'd put some exam vouchers to use...

Continue reading
Securing REST APIs: Common Vulnerabilities and Best Practices
Web Security
November 15th, 2023
8 min read

Securing REST APIs: Common Vulnerabilities and Best Practices

REST APIs are the backbone of modern web applications. In this post, we'll explore common security vulnerabilities and how to protect against them.

Continue reading
Implementing OWASP Top 10 Mitigations in Your Development Workflow
Application Security
October 3rd, 2023
12 min read

Implementing OWASP Top 10 Mitigations in Your Development Workflow

The OWASP Top 10 represents the most critical security risks to web applications. Learn how to integrate mitigations into your development process.

Continue reading
Cloud Security: Protecting Your AWS Environment
Cloud Security
September 18th, 2023
9 min read

Cloud Security: Protecting Your AWS Environment

As organizations migrate to AWS, securing cloud infrastructure becomes critical. This post covers essential security practices for AWS environments.

Continue reading