Blog
Sep 8, 2009
Metasploit Unleashed – Information Security Training at its best.
Metasploit Unleashed – Information Security Training at its best.
1 min read

The “Metasploit Unleashed” online courseware is almost ready! We had several technical issues which delayed the release of the course by a couple of weeks. Here’s a quick teaser, showing some of the TOC.
We expect the online version to be released in a week or so, and the full set of videos be available for purchase at the end of the month.
Stay in the know: Become an OffSec Insider
Get the latest updates about resources, events & promotions from OffSec!
Latest from OffSec

Research & Tutorials
CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation
Read about an LFI vulnerability disclosed in MLflow which allowed unauthenticated remote attackers to read arbitrary files by exploiting URI fragments containing directory traversal sequences.
May 15, 2025
3 min read

Research & Tutorials
CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution
A critical SSTI vulnerability was discovered in the open-source meal planning application Tandoor Recipes leading to a full system compromise.
May 8, 2025
2 min read

Research & Tutorials
CVE-2025-29927: Next.js Middleware Authorization Bypass
In this CVE blog, we explore a vulnerability in Next.js stemming from the improper trust of the x-middleware-subrequest header.
May 1, 2025
3 min read