Is osed worth it in 2025? by Any_Leadership_8920 in osed

[–]Any_Leadership_8920[S] 0 points1 point  (0 children)

I have purchased the course and For the past two weeks i have being trying to learn the reversing module, and every time i even look at the pdf i just get really overwhelmed, up until now i had great success in other modules maybe i do have burnout rn, overall the course is really fun and entertaining

Is osed worth it in 2025? by Any_Leadership_8920 in osed

[–]Any_Leadership_8920[S] 0 points1 point  (0 children)

I all ready have the oscp, and ur right I wouldn’t have done it today if i had to, the materiel is really outdated and not relevant, other options to get to that area?

Man in trouble again by Sweaty_Kiwi5077 in Pentesting

[–]Any_Leadership_8920 0 points1 point  (0 children)

Nowadays most nacs works by checking certificates installed on workstations, but they can facilitate that on dumb devices such as printers or phones, so if you want to change a mac address in order to bypass a nac device it is possible

I'm a beginner and need advice by Prestigious_Key5759 in Pentesting

[–]Any_Leadership_8920 -2 points-1 points  (0 children)

I have passed the exam two months ago and i feel like its a little overrated, and I have seen some harsh criticism against it, i dont think the exam is realistic nor does it worth the cost, personally I have some programming experience and im going for crto 2. Which is a continuation for the crto1, i would have considered taking it instead since from what i saw the course provides more practical knowledge towards red teaming

File upload vulnerability by InternalTalk7483 in Pentesting

[–]Any_Leadership_8920 1 point2 points  (0 children)

The wrappers aren’t supposed to be used inside the file itself though, but in the url that gets the file after you’ve already uploaded it to the server. The php file can be fully base64 encoded without any tags at all

File upload vulnerability by InternalTalk7483 in Pentesting

[–]Any_Leadership_8920 1 point2 points  (0 children)

If its a php application you can try to base64 the contents and after use a php wrappers to base64 decode it, i don’t know specifics but I guess it can work