About OffSec Services Limited

Cybersecurity | Penetration Testing | Red Teaming | OSINT

🎯 About OffSec

Offensive Security (OffSec) is a global leader in cybersecurity education, built on a commitment to excellence, integrity, and growth. From our beginnings to today, we've empowered individuals and organizations to outsmart cyber threats, earning recognition and trust worldwide.

Founded by renowned security experts, OffSec offers industry-leading training programs that prepare cybersecurity professionals for real-world challenges. Their certifications, such as the prestigious Offensive Security Certified Professional (OSCP), are widely respected by employers and organizations worldwide.

🔐 Core Philosophy

Learn by Doing - OffSec believes in practical, hands-on training that simulates real-world scenarios, enabling students to develop genuine expertise through immersive experiences.

🏆 OffSec Awards & Recognitions

CORE: Creating Outstanding Results Everyday

OffSec's CORE Award is a special honor that recognizes team members who do great work every day.

Industry Recognition & Awards

2024 Awards

Hot Company Breach & Attack Simulation	Next Gen Cybersecurity Education— for Enterprises	Market Leader Cybersecurity Education— for Governments
Cutting Edge Cybersecurity Education— for SMBs	Most Innovative Cybersecurity Service Provider	Editor's Choice Cybersecurity Training
Editor's Choice Cybersecurity Training Videos	Best Cybersecurity Education Provider	Best Cybersecurity Certification: PEN-200 (OSCP)
Cybersecurity Training: Learn Enterprise

2023 Awards

#8 Best Large Company for Remote Workers

2022 Awards

EXP-301: Best Professional Certification Program

---

🏆 OffSec Certifications & Courses

The OffSec Legends

Inspired by OffSec's world-renowned certifications, these powerful guides lead you through The Gauntlet, assigning missions, sharing wisdom, and calling on you to rise beside them to secure victory.

OSCP	OSEP	OSWA	OSWE	OSED
OSEE	OSDA	OSTH	OSIR

Course certification badge

Here are the course outlines available in this repository:

SEC-100 (OSCC-SEC)	SJD-100 (OSCC-SJD)	PEN-200 (OSCP/OSCP+)	TH-200 (OSTH)	WEB-200 (OSWA)
IR-200 (OSIR)	SOC-200 (OSDA)	PEN-210 (OSWP)	PEN-300 (OSEP)	WEB-300 (OSWE)
EXP-301 (OSED)	EXP-312 (OSMR)	EXP-401 (OSEE)

---

📚 Complete OffSec Course Catalog

Here is the complete catalog of OffSec courses organized by specialization tracks:

🔐 Penetration Testing

PEN-200: Penetration Testing with Kali Linux OSCP+

PEN-300: Evasion Techniques and Breaching Defenses OSEP

💻 Exploit Development

EXP-301: Windows User Mode Exploit Development OSED

EXP-401: Advanced Windows Exploitation OSEE

🌐 Web Application Security

WEB-200: Web Attacks with Kali Linux OSWA

WEB-300: Advanced Web Attacks and Exploitation OSWE

🛡️ Defensive Security

SOC-200: Security Operations and Defensive Analysis OSDA

IR-200: Foundational Incident Response OSIR

TH-200: Foundational Threat Hunting OSTH

🎓 OffSec CyberCore™

SEC-100: Cybersecurity Essentials OSCC-SEC

SJD-100: Secure Java Development Essentials OSCC-SJD

---

• Cybersecurity Research & Development
• Penetration Testing & Red Teaming
• Open-source Intelligence (OSINT)
• Software Development & Automation
• Linux System Engineering

• Rust Programming Language
• Advanced Bash Scripting
• PowerShell for Active Directory Management
• Kubernetes Security & Deployment

I'm actively seeking collaborations in the following areas:

• Security Tool Development - Creating cutting-edge tools for penetration testing and security research
• Open-source Projects - Contributing to and maintaining security-focused open-source initiatives
• Enterprise Software Development - Building robust, secure enterprise solutions

For professional inquiries and collaborations, I can be reached through encrypted channels:

• Tox: 6E4F7D0C86D95FAF946FAFF1D59342447BD3AFF8337F5D77E08DCACF5F7F4A0BA98AAFFFE51C

1. Mattermost Enterprise Edition
2. Wire-Server
3. Signal-Server
4. Zulip Enterprise Edition
5. Rocket.Chat
6. Tox
7. Jami

If you're looking for open-source alternatives to Okta with support for private deployment, consider the following options. These tools provide similar Identity and Access Management (IAM) features and can be deployed on your own infrastructure:

1. Keycloak:

   • Comprehensive open-source IAM solution with SSO, MFA, LDAP/Active Directory integration, social login, and user management.
   • Supports deployment on enterprise servers, private clouds, or via Docker containers.

2. Gluu:

   • Open-source IAM platform with SSO, MFA, OAuth2, OpenID Connect, and LDAP integration.
   • Deployable on your hardware, VMs, or containers, with Kubernetes support.

3. Authentik:

   • Modern open-source IAM platform with SSO, OAuth2, LDAP integration, and a user-friendly management interface.
   • Suitable for modern infrastructure with Docker and Kubernetes deployment support.

4. Authelia:

   • Open-source two-factor authentication gateway supporting OAuth2, OpenID Connect, and LDAP.
   • Easily deployable via Docker or Ansible for various environments.

5. WSO2 Identity Server:

   • Open-source enterprise-level IAM solution supporting SSO, MFA, OAuth2, OpenID Connect, SAML 2.0, etc.
   • Deployable in local environments, including on-premises servers or cloud VMs.

6. Apache Syncope:

   • Open-source IAM system focused on user management and access control, with governance and reporting capabilities.
   • Deployable in local data centers or private clouds, supporting Docker deployments.

7. FreeIPA:

   • Integrated open-source identity management solution suitable for Linux/Unix environments, providing SSO, host, and service identity management, and certificate management.
   • Supports deployment in private networks, designed for Unix/Linux integration.

8. CAS (Central Authentication Service):

   • Robust open-source SSO solution supporting OAuth2, SAML, OpenID Connect, etc.
   • Flexible integration and configuration options for private IT infrastructure deployment.

9. ForgeRock Access Management (Community Edition):

   • Comprehensive IAM features, including SSO, MFA, API security management.
   • Deployable on-premises and in private cloud environments, with core functionalities covered in the community edition.

10. Shibboleth:

    • Widely used in academia, open-source identity provider, and service provider solution supporting SAML2 protocol.
    • Deployable on private servers, ideal for environments requiring high security and collaboration.

These open-source IAM solutions offer powerful user authentication, single sign-on, multi-factor authentication, and user management features. They support private deployment and are suitable for running on your own servers or in private cloud environments. Choose the right tool based on your specific needs and technical environment.