#oswe — Public Fediverse posts

Системной подход к сдаче OSWE в 2025

Offensive Security Web Expert ( OSWE ) – продвинутая сертификация offsec по безопасности WEB приложений. Причем ключевым отличием от менее известного Offensive Security Web Assessor ( OSWA ) является упор на анализ исходного кода приложения, то есть поиск уязвимостей в формате «белого» ящика. Окончательное решение сдавать этот экз я принял на бизнес съезде в Турции, когда познакомился с предпринимателем, который проходил ironman (ссылка) дважды. Мой поздний достигатель сразу загорелся идеей о стремительной подготовке. Однако товарищ председатель кооператива задал мне закономерный вопрос: «А OSWE сдать ты не хочешь?». 9 апреля 2025 года, в своём телеграм-канале PathSecure я опубликовал новость о приобретении курса :)

https://habr.com/ru/articles/1024100/

#pentest #offsec #oswe #web #security #education

Now that I've finished my #OSWE and am currently on break from working on certs, maybe I'll update my #blog more and post more on infosec.exchange.

Here's a start:

https://tdot.fish/2024/01/06/newyear

@bingbong Wait, I've read all this and there is no cute dog here??? 😉

Thanks for sharing your experience. In fact, the 48h exam is what deterred me from giving the #OSWE a try. The exam constraints sound terrible. Also, this has nothing to do with a real life assessment anymore where you can copy code for your means as you like.

After failing exams, morale is always down. It's important that you trust in yourself and your knowledge and skills. In the end, you know best whether you understood something or not. Certificates are just a quick way meant to prove that to others.

Best wishes!

Has anyone had any issues using an #M1 #Mac with
@offsectraining
exams (especially #OSWA and #OSWE)? Is it OK to use #Parallels instead of #VMWare? Parallels works much better on macOS.

#offensivesecurity #infosec #cybersecurity

Thought I should maybe write an #introduction
Hi I’m affix (previously cli on the bird site) I’m a new #mastoadmin running pentest.sh
In the real world I’m a #RedTeam and Pentest Engineer for a large MSP Software organisation. I currently hold #OSCP #OSEP #OSWE and almost #OSED
I was previously a #SoftwareEngineer and #DevOps advocate. I specialise in #Python #Ruby #C and #Golang
In my spare time I take part in #CrossFit and Play music.
Glad to be part of the #fediverse

#Introduction

Hi! I started my career around 2007 and since then I’ve done: #IT for local government and non profits, R&D application engineering (and, briefly, #defensive #security) for a large-ish #ICS #SCADA equipment manufacturer.

I started to pivot towards #offsec in 2016. I earned my #OSCP in 2018, landed a gig at a medium-sized #pentesting firm (and earned #OSWE) in 2019, and have been working as a senior #redteam operator for a #Cloud org since 2020.

#reverseengineering is my jam and #capitalism is my safe word. Don’t kink shame. Opinions are my own.

computers 👏 are 👏 not 👏 magic 👏