Blog
Apr 14, 2011
Discover your inner Pirate
For the last two years Offensive Security has been taking the live training market by storm with its flagship course, Pentesting with BackTrack. We are very excited to announce that the next PWB live training will be held in an exotic location the Caribbean island of St. Kitts and Nevis.
2 min read

For the last two years Offensive Security has been taking the live training market by storm with its flagship course, Pentesting with BackTrack. We are very excited to announce that the next PWB live training will be held in an exotic location the Caribbean island of St. Kitts and Nevis.

By day you will be taught some of the most advanced and hands-on penetration testing methods by the creators of BackTrack. By night you will enjoy the real island life with the wonderful local restaurants, beautiful beaches and the amazing scenery.
After 5 days of torment in paradise we end the course with a Caribbean-style cruise. 20 Hackers, crystal clear waters and enough rum to choke a blue whale – what more can you ask for?
Discover your inner pirate – join us for Pentesting With BackTrack St. Kitts.
The course is scheduled for Nov 28 2011 – Dec 2 2011. Seats will go fast and be very limited. Contact Chris now to register at chris -@- offsec.com
Stay in the know: Become an OffSec Insider
Get the latest updates about resources, events & promotions from OffSec!
Latest from OffSec

Research & Tutorials
CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation
Read about an LFI vulnerability disclosed in MLflow which allowed unauthenticated remote attackers to read arbitrary files by exploiting URI fragments containing directory traversal sequences.
May 15, 2025
3 min read

Research & Tutorials
CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution
A critical SSTI vulnerability was discovered in the open-source meal planning application Tandoor Recipes leading to a full system compromise.
May 8, 2025
2 min read

Research & Tutorials
CVE-2025-29927: Next.js Middleware Authorization Bypass
In this CVE blog, we explore a vulnerability in Next.js stemming from the improper trust of the x-middleware-subrequest header.
May 1, 2025
3 min read