Yes, you can! We encourage you to blog about your overall experience, however, we must request that you do not publish any scripts or solutions for systems within our labs. The reasoning behind this is simple: if future, or current, OffSec learners should come across your notes and scripts in the course of their research, they would likely use them rather than find solutions on their own, thereby missing out on the educational process that you went through to come to these same findings.
- Do Share Your Learning Journey: Talk about your experiences, struggles, and revelations throughout the course. This can be incredibly motivating for other learners and provide useful context without revealing specific solutions.
- Do Discuss General Techniques: Instead of publishing specific scripts or solutions, discuss the general approaches, methodologies, or frameworks that you found useful. This way, you can still provide valuable insights without spoiling the learning process for others.
- Do Use Hypothetical Examples: To explain a concept or technique, create hypothetical or sanitized examples that don't directly relate to the OffSec labs. Make sure these examples are clearly labeled as such.
- Do Encourage Ethical Behavior: Make it clear in your blog posts that the skills learned in OffSec courses should be used responsibly and ethically. This reinforces the right mindset for aspiring security professionals.
- Do Follow Academic Integrity: Always give proper attribution if you are quoting or paraphrasing someone else's work, even if it's another blog post or a forum thread. This sets a good example for maintaining academic integrity.
- Don't Share Spoilers: Avoid revealing specific challenges or giving away 'flags' that are part of the OffSec course labs. This is in line with the original guidance to not publish any scripts or solutions.
- Don't Share Unofficial Solutions: While it may be tempting to share solutions found in unofficial forums or groups, doing so can undermine the integrity of the OffSec courses.
- Don't Disregard OffSec Guidelines: Always adhere to OffSec's Academic Policy and other official guidelines. Failure to do so could result in actions being taken against you.
We also further request that you do not publish any screenshots or images from our labs as they contain proprietary information. However, posting a screenshot of your learning progress is acceptable.
For further information about what information you should avoid including, please read our Academic Policy.
If you would like us to review your blog post before publishing, please send an email to "challenges AT offsec DOT com".