Blog
News and updates from OffSec
Jan 5, 2023
Q4 Community Updates: Bridging the Diversity Gap, New Payment Plans, and Industry Events
Wrapping up 2022 with OffSec’s Q4 community update! Find details about our latest community efforts, payment plans, live training, and much more.
OffSec News
Exploit Database 2022 Update
We’re sharing some significant updates to Exploit Database, one of OffSec’s community projects.
Nov 10, 2022
2 min read
Kali Linux
Staged Payloads from Kali Linux | PT Phone Home – PHP
Tristram shows you how to host a PHP web page on Kali Linux and how you can use it to stage payloads that are hidden behind a wall of conditional access requirements.
Nov 4, 2022
17 min read
Cloud Security
See Yourself in Cyber with OffSec: Cloud Security
As part of Cybersecurity Awareness Month 2022, we share out insights on starting a career in cloud security, together with key skills, prerequisites, career outlook, and much more.
Oct 31, 2022
7 min read
Web App Security
See Yourself in Cyber with OffSec: Web Application Security
As part of Cybersecurity Awareness Month 2022, we share a complete guide to starting a career in web application security with insight into career outlook, essential skills, and much more.
Oct 21, 2022
8 min read
OffSec News
Q3 Community Update | OffSec Academy, New Content, Giving Program
Welcome to OffSec’s Q3 community update! This post discusses the launch of our Giving Program, new content, OffSec Academy, and much more.
Oct 14, 2022
10 min read
Security Operations
See Yourself in Cyber with OffSec: Security Operations
As part of Cybersecurity Awareness Month 2022, we share a complete guide to starting a career in security operations and defense.
Oct 12, 2022
8 min read
Penetration Testing
See Yourself in Cyber with OffSec: Penetration Testing
As part of the Cybersecurity Awareness Month 2022, we share a complete guide to starting a career as a penetration tester.
Oct 4, 2022
9 min read
Research & Tutorials
In the Hunt for the macOS AutoLogin Setup Process
OffSec’s Csaba Fitzl shares how he reverse-engineered the macOS auto-login process, including the walls he hit, and the times he resorted to trial-and-error approaches.
Sep 23, 2022
14 min read
Kali Linux
Staged Payloads from Kali Linux | PT Phone Home – DNS
In part one of this post, Tristram teaches you how to use TXT records to stage payloads that can be retrieved through DNS lookups.
Sep 15, 2022
30 min read
Enterprise Security
The Importance of Skilled Security Practitioners: How Security Skillfulness Reflects on Your Security Posture
Read about how the skillfulness of your security practitioners can impact your overall cybersecurity program and posture.
Sep 12, 2022
3 min read
Exploit Development
Bypassing Intel CET with Counterfeit Objects
In this blog, we’ll briefly cover how CFI mitigations works, including CET, and how we can leverage COOP to effectively bypass Intel CET on the latest Windows releases.
Aug 25, 2022
13 min read
Community Spotlight
Offensive Security Online Community BBQ Event
Join our OffSec bbq event for the chance to win some swag! Make your favorite bbq meal and share photos on Discord. Pic with the most yums will be the winner.
Aug 19, 2022
11 min read
Join the OffSec community
Our community members connect, communicate, and collaborate on all things cybersecurity