Exam 3 - OffSec Web Assessor (OSWA) Certification
Featuring 12 code-based challenges with unlimited attempts, this hands-on test lets you master browser-based security concepts through real attack simulations. Use a built-in JavaScript environment to understand the Same-Origin Policy, exploit Cross-Site Request Forgery (CSRF) vulnerabilities, perform cross-origin requests, analyze SameSite cookies, exploit weak CORS policies, and walk through a case study on CSRF exploitation. Each task reflects real-world exam scenarios, preparing you to actively script and simulate cross-origin attacks.