About
A hands-on category focused on source code analysis and exploitation techniques, designed to help participants build real-world attack skills and prepare for advanced certifications such as OSWE and eWPTX. Covers vulnerability chaining including LFI, SQLi, authentication bypass, and RCE.
This category is designed for participants who want to strengthen their skills in identifying and exploiting security vulnerabilities in source code, while also improving secure software development practices.
It includes multiple hands-on labs and real-world–inspired scenarios that focus on practical code review, vulnerability discovery, and controlled exploitation. Participants work on various applications and codebases to understand how common programming mistakes lead to exploitable conditions and how attackers chain vulnerabilities in real-world environments.
The category emphasizes root cause analysis, impact assessment, and secure coding recommendations, making it suitable for both developers and security professionals. It can also be effectively used as a preparation path for advanced certifications such as OSWE and eWPTX, covering exploitation techniques and chains including LFI, SQL Injection, Authentication Bypass, and Remote Code Execution (RCE).
Learning Objectives
By the end of this category, participants will be able to:
Review vulnerable source code across multiple labs to identify security weaknesses.
Understand how coding mistakes translate into exploitable attack surfaces.
Perform practical exploitation based on code-level findings.
Correlate source code analysis with real-world attack techniques.
Chain multiple vulnerabilities to achieve deeper system compromise.
Improve offensive security skills while maintaining awareness of defensive and secure coding principles.
Map code weaknesses to realistic threat scenarios and attacker objectives.