I passed the OSWE on 11/23/2025. Here’s my honest take on the exam experience, the prep resources that actually helped, my controversial thoughts on using AI as a study partner, and what’s next on the road to OSCE3.
Reflecting on reaching the halfway point in WGU’s Master of Science in Computer Science with AI/ML emphasis, and exploring the intersection of offensive security and machine learning.
My preparation strategy and resources for the OffSec Web Expert (OSWE) exam, the second step toward completing the OSCE³ certification.
A complete walkthrough of the HackTheBox Precious machine, covering pdfkit command injection and YAML deserialization privilege escalation.
A comprehensive technical analysis of the Log4Shell vulnerability, including exploitation methodology, detection strategies, and mitigation techniques.
Learn how to create effective custom wordlists for penetration testing, including OSINT techniques, web scraping, and password mutation strategies.