Create hands-on labs for OffSec
Your expertise, your impact
Turn your technical expertise into hands-on learning experiences used by the OffSec community. The new Creator Platform gives you a clearer way to find opportunities, build and validate your lab, submit it for review, and track its progress in one place.
Start creatingWhat you can build
Defensive Grimoires
Blue-team—oriented investigations built from real telemetry
Defensive labs
Digital forensics, malware analysis, incident response, threat hunting
Grouped/Chained scenarios
A multi-lab scenario that contains a sequence of attacks
Offensive labs
Realistic exploit paths for web, network, or cloud
Already creating with OffSec?
View your labs and track your submissions in the Creator Platform.
View my labsGet rewarded for your expertise
Accepted labs earn rewards based on their complexity and quality. Build realistic, technically strong learning experiences and earn up to $1,500 for accepted submissions.
Up to
$300
Minimum requirements:
- Fully functioning VM
- Unique or original machine builds
- Presentable and accurate walkthrough
- Easy to understand and follow build script
- CVEs no older than 12 months
- MITRE framework alignment
Up to
$500
All minimum requirements, and:
- Impeccable exploit chains and overall concepts
- Clear descriptions of the lessons the boxes are designed to teach
- Multi-step
Up to
$1,500
All minimum requirements, and:
- Impeccable exploit chains and overall concepts
- Clear descriptions of the lessons the boxes are designed to teach
- Multi-step
- Fully functioning set of "grouped" or "chained" VMs
- Realistic penetration testing scenarios
5 steps to create and submit your lab
1
Dream and scope
Choose a real-world scenario with clear takeaways (we prefer realistic scenarios over puzzle-style CTFs).
2
Build and test
Remember Grimoires require a Q&A file and an investigative-style walkthrough. See our FAQ for complete specifications and requirements.
3
Document clearly
Make your PDF walkthrough easy to follow, and include all required files as outlined in our User Documentation.
4
Submit
Review our submission checklist to confirm you have all the required files and Start creating.
5
Review → decision → launch
We're excited to review your work! We'll confirm receipt within 24 hours and aim to review it within a week. Complex machines may take longer. Reach out on Discord or at ugc@offsec.com with questions.
1
Dream and scope
Choose a real-world scenario with clear takeaways (we prefer realistic scenarios over puzzle-style CTFs).
2
Build and test
Remember Grimoires require a Q&A file and an investigative-style walkthrough. See our FAQ for complete specifications and requirements.
3
Document clearly
Make your PDF walkthrough easy to follow, and include all required files as outlined in our User Documentation.
4
Submit
Review our submission checklist to confirm you have all the required files and Start creating.
5
Review → decision → launch
We're excited to review your work! We'll confirm receipt within 24 hours and aim to review it within a week. Complex machines may take longer. Reach out on Discord or at ugc@offsec.com with questions.
Sample submissions
Grouped/Chained
Attack
Defend*
Grimoire
Password: BloodBreathSoulFire
*Our defend sample is provided as a Bash script to demonstrate the logic, but we require all actual submissions to be written in Python.
Hints to
get approved
Be original.
Ensure all content is original and reflects real-life use cases.
Teach something real.
Make it a real-world attack or defense scenario and state what the learner will gain.
Follow the basics
Accepted OS only (Linux/UNIX, Windows 8.1+/Server 2021+). For more information please visit our FAQ.
Keep it professional.
Hate speech, lewd content, and/or copyright violations will be auto-declined.