Hacker News new | ask | show | jobs
by Techbrunch 1828 days ago
An example would be to be able to read source code in different languages (Java, PHP, JavaScript, C#) and be able to identify, chain vulnerabilities and write an exploit script to automate everything.

You can find the syllabus here: https://www.offensive-security.com/awae-oswe/
1 comments
tptacek 1828 days ago
You're suggesting you might consider getting OSWE in order to learn appsec?
link
Techbrunch 1828 days ago
I would not recommend OSWE to learn appsec since it is teaching "Advanced Web Attacks" and assume that you know the basics.

Something that is really interesting I think is the whitebox approach that some people in infosec might be missing if they don't come from a developer background and never botherered looking at the code introducing the vulnerabilities.

If you want to learn appsec I recommend Web Security Academy: https://portswigger.net/web-security

link
tptacek 1828 days ago
PortSwigger is great. Certifications, on the other hand, are not a good way to learn appsec.
link