[HTTP Request] → [unsanitized $_GET['file']] → [file_get_contents()] → [LFI] ↓ [MySQL LOAD_FILE()] → [Credentials] ↓ [Admin Login] → [Upload bypass] → RCE
: The report must be detailed enough that another technical person could follow your steps and achieve the same results without additional help. Common Pitfalls Incomplete Exploits
Save the working Python script that automates the exploit chain from unauthenticated access to Remote Code Execution (RCE). oswe exam report work
To pass the Offensive Security Web Expert (OSWE) exam, your report must be a professional-grade document that allows a technically competent reader to replicate your entire exploit process step-by-step.
Clearly document any hardcoded variables or command-line arguments required to run the script (e.g., python3 exploit.py -t -l -p ). 5. Flag Verification This is your proof of completion. Paste the literal string contents of the flag file. Paste the literal string contents of the flag file
- $user_data = unserialize($_COOKIE['user_prefs']); + $user_data = json_decode($_COOKIE['user_prefs'], true);
Take full-screen screenshots showing the vulnerability. Crucially, ensure your screenshots include the target's IP address and your local system's terminal prompt or browser URL bar. + $user_data = json_decode($_COOKIE['user_prefs']
However, the exam's unique requirement is that you must produce a for each target. This script must be able to execute the entire attack chain without any manual intervention from the grader. After the 48-hour hacking period, you have an additional 24 hours to submit your final exam report . This report must be a professional document detailing every step of your process.
| Aspect | OSCP (Penetration Testing) | OSWE (Web Expert) | | :--- | :--- | :--- | | | Black box | White/grey box (source code given) | | Proof | Screenshot of whoami / ifconfig | Code snippet + HTTP request demonstrating logic flaw | | Difficulty | Finding the vulnerability | Exploiting a chain of minor bugs to get RCE | | Report Enemy | Forgetting a screenshot | Missing the code context |
Provide your final, non-interactive PoC code (usually in Python). Ensure it is formatted as plain text within the PDF so reviewers can easily copy and paste it for verification.