Limited time · 90% off Premium Membership - claim $199 deal →
Mammoth Club All levels 24 sections 71 lectures

OffSec Web Expert Certification (OSWE) with 10 Practice Exams

Black-box testing only shows you the symptoms. True web application mastery comes from understanding the cause—deep within the source code.

01
Skill level
All levels
02
Sections
24
03
Lectures
71
04
Instructor
Alex Kropf
What's inside

This course includes.

24
Sections
71
Lectures
10
Quizzes
Certificate of completion
Included
Mobile and desktop access
Included
AI learning assistance
Included
Unlock all courses with our Subscription Bundle! Get unlimited access to entire course library, books and assets. Learn more and subscribe today!
Course content

Curriculum & lectures.

14 sections · 61 lectures
+ Welcome 1 lecture
What is the OffSec Web Expert Certification (OSWE)? Locked
+ Web App Exploit Tools and Methods 5 lectures
Inspect Web Traffic Locked
Interact with Web Listeners using Python Locked
Recover Source Code Locked
Analyze Source Code Locked
Remote Debugging Locked
+ Bypass Authentication and Execute Remote Code 8 lectures
Setup Locked
Discover Initial Vulnerability Locked
Blind SQL Injections Locked
addslashes and Parametrization Locked
Exfiltrate Data Locked
Subvert ATutor Authentication Locked
Bypass File Upload Restrictions Locked
Gain Remote Code Execution Locked
+ Juggling Vulnerability 5 lectures
Juggling Vulnerability Fundamentals Locked
PHP Loose and Strict Comparisons Locked
PHP String Conversion to Numbers Locked
Juggling Vulnerability Discovery Locked
Attack a Loose Comparison Locked
+ SQL Injection Remote Code Execution 8 lectures
SQL Injection Remote Code Execution Fundamentals Locked
Discover Vulnerability Locked
How Escaping Occurs Locked
Blind Injection Locked
Access the File System Locked
PostgreSQL Extensions Locked
UDF Reverse Shell Locked
PostgreSQL Large Objects Locked
+ JavaScript Injection Vulnerability 4 lectures
Exploit a Plugin Locked
Vulnerability Discovery Locked
Triggering Vulnerability Locked
Gain Reverse Shell Locked
+ Cookie Deserialization Remote Code Execution 3 lectures
Serialization Fundamentals Locked
Vulnerability Analysis Locked
Payload Options Locked
+ Authentication Bypass and Server Side Template Injection 6 lectures
Configuration Setup Locked
Architecting Web Applications: MVC, Design Patterns and Routing Locked
Discover Authentication Bypass Locked
Exploit Authentication Bypass Locked
Discover SSTI Vulnerability Locked
Exploit SSTI Vulnerability Locked
+ Bypass openCRX Authentication and Execute Remote Code 3 lectures
Discover Password Reset Vulnerability Locked
Discover XML External Entity Vulnerability Locked
Execute Remote Code Locked
+ Black Box Testing, Exploitation and RCE Hunting 5 lectures
openITCOCKPIT Black Box Testing Locked
Application Discovery Locked
XSS Hunting Locked
XSS Exploitation Locked
Remote Code Execution Locked
+ Authentication Bypass to RCE 2 lectures
Exploit CORS and CSRF Locked
Exploit Insecure Defaults Locked
+ Server Side Request Forgery 6 lectures
Microservice Fundamentals Locked
Verb Tampering Locked
Server-Side Request Forgery Locked
API Authentication Bypass Locked
Exploit Headless Chrome Locked
Remote Code Execution Locked
+ Exploit Prototype Pollution 4 lectures
JavaScript Prototype Pollution and Discovery Locked
Exploit Prototype Pollution Locked
EJS Remote Code Execution Locked
Handlebars Remote Code Execution Locked
+ Challenge Your 10 FREE Practice Exams 1 lecture
Where to Find Your Exams Locked
Description

About this course.

This expert-level program develops an advanced offensive mindset focused on identifying and chaining complex vulnerabilities through rigorous source code analysis and custom exploit development.


✅ Develop a systematic methodology for dissecting unfamiliar codebases in various web languages and frameworks

✅ Learn to identify subtle yet critical vulnerabilities, including advanced injection, authentication bypasses, and complex logic flaws

✅ Master the art of crafting custom exploits from scratch to bypass modern security mechanisms

✅ Practice chaining multiple vulnerabilities together to escalate a minor flaw into a complete system compromise


If you've mastered network penetration testing and black-box web attacks, this course is the next logical step, bridging the gap between using exploits and discovering them in the code itself.


🎁 Includes 10 challenging exam. Hone your code-auditing skills. Develop your exploits with precision.


If you're ready to move from finding vulnerabilities to understanding their origin and proving your elite status—this is your code review.

Instructors

Taught by people who ship.

Alex Kropf

Alex Kropf

Mammoth Club's CLO, public speaker, consultant, IT author and Senior Software Developer. Alex has produced best-selling courses, books and workshops for Mammoth Club, Course Pro and our clients since 2016.

Ready to start building?

Black-box testing only shows you the symptoms. True web application mastery comes from understanding the cause—deep within the source code.

Buy lifetime access →