Resources from OffSec

Cloud Security

Learn what cloud computing is, why cloud security matters, and how to stay safe. Expand your knowledge of best practices and emerging threats.

Exploit Development

Learn about vulnerabilities, CVEs, exploit techniques, shellcode, and payloads—and why training in these skills is important.

Incident Response

Learn what incident response is and why it matters. Understand its goals, the steps in the process, and how training can help you respond to cyber threats.

Cloud Security Engineer

Learn how cloud security experts protect cloud systems from cyber threats while following important rules and standards.

DevSecOps Engineer

Learn how DevSecOps engineers bridge the gap between developers, operations teams and other security professionals.

Exploit Developer

Learn how exploit developers improve security in software and systems by identifying and investigating vulnerabilities.

Offensive Security in the age of AI

Think Like a Hacker. Break the LLM.A hands on guide for Red Team leaders to understand, exploit, and simulate the latest AI vulnerabilities. As AI systems like ChatGPT, Gemini, and open-source LLMs integrate into enterprise workflows, they open up new attack surfaces and new responsibilities for red teams. In this exclusive white paper, you’ll discover how OffSec’s Red Teaming LLM Learning Path empowers offensive

6 Ways to Grow a High-Performing Security Team

Creating a high-performing cybersecurity team is crucial for securing your organization’s digital assets and fostering trust within your technology ecosystem.

4 Essential Strategies for Enterprise Cybersecurity Workforce Development

Cybersecurity learning is a critical part of any cybersecurity program and the right measurements will enable you to make optimal use of your training resources and gain the support of management.

Transforming the US Coast Guard Academy Cyber Team’s Cyber Training with a Fundamental Hands-On Course from OffSec

Learn how US Coast Guard Academy Cyber Team transformed their training with the help of OffSec’s OSCC certification.

Cisco’s offensive security transformation: Building advanced cybersecurity capabilities with OffSec

Breadth and depth of cybersecurity training give peace of mind to Cisco

OSCP Certification: A Catalyst for Career Growth in Latin America

Discover how Juan David Engelbrecht boosted his career in cybersecurity with the OSCP certification. This case study reveals the impact of certifications on your professional development, acquired skills, and their practical application in the field. Watch the full video to learn more about his background and achievements in the industry.

Offensive Security in the Cloud Era: Adapting Security Testing for Modern Infrastructure

Discover how offensive security practices must evolve to address cloud-native environments.

Wielding the double-edged sword of AI to your advantage

Learn how AI is transforming the way we do business and the impact it has on cybersecurity – both the benefits for professionals and adversaries alike

New research report unveils what keeps cyber leaders up at night

Discover insights from our new insomnia study and learn about key challenges faced by cybersecurity leaders.

June 2025 Content & Platform Update

May 2025 Content & Platform Update

April 2025 Content & Platform Update

Desktop Wallpapers

OffSec course themed desktop wallpapers (1920x1040 PNG)

Mobile Wallpapers

OffSec course themed mobile wallpapers (640x960 PNG)

Course Icons

Three variants of each OffSec course icon in SVG format

What is Phishing? Introduction to Phishing Demo (for Beginners)

Learn how phishing attacks work and how to spot them. Watch OffSec’s animated video to protect yourself from scams, spoofed sites, and social engineering.

CVE-2025-27636 – Remote Code Execution in Apache Camel via Case-Sensitive Header Filtering Bypass

Discover the critical Apache Camel vulnerability (CVE-2025-27636) that allows remote code execution via case-sensitive HTTP header manipulation in the exec component. Learn how attackers exploit this flaw and how to mitigate it.

CVE-2025-29306 – Unauthenticated Remote Code Execution in FoxCMS v1.2.5 via Unserialize Injection

Discover details about CVE-2025-29306, a critical RCE vulnerability in FoxCMS 1.2.5. Learn how unsafe use of PHP’s unserialize() function enables remote attackers to execute arbitrary system commands.