The high-stakes world of the 24-hour hacking exam

The high-stakes world of the 24-hour hacking exam
Image: Intellect (generated)

In short: In the cybersecurity industry, some credentials are earned through intense, real-world pressure. The Offensive Security Certified Professional (OSCP) has built a reputation as one of the most difficult certifications to obtain, requiring candidates to successfully penetrate a test network during a grueling single-day examination.

Founded around 200/2006 by Mati Aharoni and his wife Iris, Offensive Security (also known as OffSec) has evolved from a small venture into an international pillar of information security. The company provides training, consulting, and digital forensics services to major entities, including Cisco, Wells Fargo, and various U.S. defense agencies. While the company's leadership has shifted—notably with CEO Ning Wang replacing Joe Steinbach following a 2019 venture capital investment from Spectrum Equity—its core mission remains centered on advanced security education. The business was officially incorporated as an LLC in 2008. Beyond training, the firm offers security counseling and system evaluation services.

A central part of the OffSec ecosystem is the development of specialized tools for penetration testers. This includes the Kali Linux distribution, a Debian-based platform containing over 600 security programs. Kali Linux succeeded the BackTrack distribution, which underwent several name changes, including Whoppix and Auditor, before being modeled into its current form. For mobile security, the company also developed Kali NetHunter for Android and ARM architectures. The company also provides the book Kali Linux Revealed, with its initial edition offered as a free download. Its predecessor, BackTrack, was an open-source project supported by global programmers.

The company also maintains critical repositories of vulnerability data. The Exploit Database (Exploit-db) serves as an archive of public exploits and proof-of-concepts, with estimates suggesting it has contained over 20,000 exploits. Additionally, the Google Hacking Database, originally a Johnny Long project, helps professionals use Google search queries to identify compromised credentials. Through projects like Metasploit Unleashed, OffSec continues to provide resources for those entering the field of penetration testing. The Metasploit Unleashed project was established as a charity initiative for Hackers for Charity. This effort was originally launched by Johnny Long.

Opens the Intellect+ feed with this card first. Swipe up for the next one.

Sources

To cite this card, link to https://intellectplus.co.uk/app/technology-offensive-security.

How we source, check and correct cards: Editorial standards.

General information, not professional advice. Spotted an error? Flag the card or see corrections and complaints.

Intellect Plus is a visual educational discovery platform for exploring fascinating facts and ideas. Brain Food, Not Brain Rot. What is Intellect Plus?

Related

Finding something worth knowing…