Combining multiple minor flaws (e.g., a session hijack paired with a file upload) to achieve full Remote Code Execution (RCE) .
Since sharing official course PDFs is a violation of OffSec's Academic Policy, candidates rely on community-made "write-ups" and reviews to prepare. offensive security web expert oswe pdf portable