User Generated Content
Your expertise, your impact
Welcome to the OffSec UGC Program— a space built for creators like you. Turn your ideas into real labs that thousands of learners worldwide will use to practice and grow their skills.
Submit your labWhat you can build
Defensive Grimoires
Blue-team—oriented investigations built from real telemetry
Defensive labs
Digital forensics, malware analysis, incident response, threat hunting
Grouped/Chained scenarios
A multi-lab scenario that contains a sequence of attacks
Offensive labs
Realistic exploit paths for web, network, or cloud
Submission rewards
Your work matters and we're cheering you on! Our Labs team reviews every submission, and accepted labs are rewarded.
Up to
$300
Minimum requirements:
- Fully functioning VM
- Unique or original machine builds
- Presentable and accurate walkthrough
- Easy to understand and follow build script
- CVEs no older than 12 months
- MITRE framework alignment
Up to
$500
All minimum requirements, and:
- Impeccable exploit chains and overall concepts
- Clear descriptions of the lessons the boxes are designed to teach
- Multi-step
Up to
$1,500
All minimum requirements, and:
- Impeccable exploit chains and overall concepts
- Clear descriptions of the lessons the boxes are designed to teach
- Multi-step
- Fully functioning set of "grouped" or "chained" VMs
- Realistic penetration testing scenarios
5 steps to create and submit your lab
1
Dream and scope
Choose a real-world scenario with clear takeaways (we prefer realistic scenarios over puzzle-style CTFs).
2
Build and test
Build and test your concept: including all setup and steps in your build script(s). Remember Grimoires require a Q&A file and an investigative-style walkthrough. See our FAQ for complete specifications and requirements.
3
Document clearly
Make your PDF walkthrough easy to follow, and include all required files as outlined in our User Documentation.
4
Submit
Review our submission checklist to confirm you have all the required files and submit your lab.
5
Review → decision → launch
We're excited to review your work! We'll confirm receipt within 24 hours and aim to review it within a week. Complex machines may take longer. Reach out on Discord or at ugc@offsec.com with questions.
Sample submissions
Grouped/Chained
Attack
Defend*
Grimoire
Password: BloodBreathSoulFire
*Our defend sample is provided as a Bash script to demonstrate the logic, but we require all actual submissions to be written in Python.
Hints to
get approved
Be original.
Ensure all content is original and reflects real-life use cases.
Teach something real.
Make it a real-world attack or defense scenario and state what the learner will gain.
Follow the basics
Accepted OS only (Linux/UNIX, Windows 8.1+/Server 2021+). For more information please visit our FAQ.
Keep it professional.
Hate speech, lewd content, and/or copyright violations will be auto-declined.
UGC Submissions
Below are the list of labs that are currently in queue. We suggest starting with the labs with a status of “wishlist.” If you've submitted a lab, you can check the status below.