Exam 9 - OffSec Web Assessor (OSWA) Certification
Featuring 19 code-based challenges with unlimited attempts, this hands-on test teaches you to identify and exploit SSRF and IDOR vulnerabilities. Learn SSRF fundamentals, test for vulnerabilities, and exploit them to retrieve internal data. Understand IDOR basics and practice exploiting insecure direct object references to access unauthorized resources. Each task mirrors real-world exam scenarios for scripting and executing access control bypass techniques.
This course includes.
Curriculum & lectures.
+ Exam 1 lecture
Ready to start building?
Featuring 19 code-based challenges with unlimited attempts, this hands-on test teaches you to identify and exploit SSRF and IDOR vulnerabilities. Learn SSRF fundamentals, test for vulnerabilities, and exploit them to retrieve internal data. Understand IDOR basics and practice exploiting insecure direct object references to access unauthorized resources. Each task mirrors real-world exam scenarios for scripting and executing access control bypass techniques.