HOMEOffSec OSCP (Penetration Testing) Unsafe Consumption of APIs 2026年3月18日 Unrestricted Access to Sensitive Business Flows Upgrading Shells