Oct 28, 2026
16 min read
php2shell: anatomy of two PHP lifecycle bugs
How out-of-memory corruption and stale worker state became two critical PHP RCEs and why the original exploit theory got it wrong.
Community Chapters
Road to OSCE3: Episodio 1 – OSEP
¡Hola a todos! Con este post da comienzo una serie de 3 posts donde hablaré de las certificaciones que forman OSCE3 y de cómo yo me las he preparado. ¿Qué es OSCE3? Si llevas algún tiempo en el mundo de la ciberseguridad ofensiva, seguro que has oído hablar del OSCP (Offensive Security Certified Professional). Es
Aug 25, 2026
10 min read
Community Chapters
Knowing what not to attack
Most talk about offensive security agents is about power. Can it find the bug? Can it chain the exploit? Can it own the box? That’s the easy part. Wiring a model up to tools is normal engineering now, and raw capability improves on its own every time a new model ships. The parts that don’t
Aug 25, 2026
9 min read
Community Chapters
Why “AI Pentesting” is the Wrong Term (And Why We Need AI Red Teaming)
Recently, I read a great post by Melvin Tan Zhi Xian sharing his thoughts halfway through the OffSec OSAI+ course. He touched on something crucial that isn’t being talked about enough: how the methodology for attacking AI doesn’t map cleanly to a standard pentest framework. Melvin’s feedback really resonated with me. It sparked a deeper
Aug 6, 2026
3 min read
Community Chapters
Intro to STIG Tools
Effective hardening requires balancing security, operational needs, and long term maintainability.
Jun 23, 2026
23 min read
Community Chapters
從 Noob 到 Ambassador 的旅程
OffSec Community Chapters: Taiwan
May 28, 2026
1 min read
Community Chapters
Matcha, Sueño y Ejercicio: La Guía Off-Topic del Hacker Saludable
OffSec Community Chapters: Spain
May 27, 2026
6 min read
Community Chapters
Beat AI or Let AI Beat You
OffSec Community Chapters: Jordan
May 27, 2026
6 min read
Join the OffSec community
Our community members connect, communicate, and collaborate on all things cybersecurity