In this guide, you’ll find a step-by-step walkthrough on how to submit a new User-Generated Content (UGC) machine in the OffSec Portal and how to view the status of your submission.

You’ll learn:

• How do I access the UGC submission page?
• What options are available in the UGC section?
• How do I submit a new UGC machine (field-by-field)?
• How can I view my submission and its status?
• What should I do after submitting?

How do I access the UGC submission page?

1. Log in to your OffSec Portal with your account credentials.
2. In the upper-left corner of the screen, click the three horizontal lines (menu icon).
3. A left-hand navigation menu will open.
4. Scroll down to the Resources section.
5. Click on UGC.

You will now be on the UGC page, where you can create and track your UGC machine submissions.

What options will I see on the UGC page?

On the UGC page, you will see two main options:

• Submit a Machine
• My Submissions

These work together as follows:

• Use Submit a Machine to send in a new machine for review.
• Use My Submissions to view all machines you’ve submitted and check their current status.

How do I submit a new UGC machine?

1. From the UGC page, click Submit a Machine.
2. You will see a submission form with required and optional fields. Complete the form as described below.

Required & key fields

• How did you hear about this opportunity?*
  Select an option from the dropdown (for example: community, Discord, social media, training, friend referral, etc.). This helps the team understand how authors discover the UGC program.
• Lab Type*
  Choose the type of lab you are submitting (for example: machine, challenge, Grimoire, etc., depending on the available options). This ensures your submission is routed and reviewed correctly.
• Lab Format*
  Select the format that best fits your lab (for example: standalone machine, multi-step scenario, blue-team investigation, etc.). Pick the closest match to how learners will experience your content.
• Lab Name*
  Enter a clear, descriptive name for your lab.
  • This is how learners and internal teams will refer to your machine.
  • Avoid overly generic names; choose something that reflects the theme, technology, or scenario.
• Attack/Defense Vector 1*
  Provide the primary technique or focus of your lab.
  • Example: SQL Injection, Buffer Overflow, Privilege Escalation, Web Exploitation, Active Directory Abuse, etc.
  • This helps categorize your lab and set expectations for learners.
• Attack/Defense Vector 2 (optional)
  If relevant, specify an additional attack or defense vector used in your lab.
  • Example: Cross-Site Scripting (XSS), Command Injection, Log Analysis, Threat Hunting, etc.
  • Leave this blank if your lab focuses on a single main vector.

Uploading your submission archive

At the bottom of the form, you will be asked to upload your lab package:

• Upload Submission Archive*
  • Upload your complete lab archive in a compressed format.
  • Recommended: ZIP.
  • Accepted formats typically include: .zip, .7z, .tar.gz, .rar, .tar (up to 10GB).
  • Once you select a file, the upload will usually start automatically.

Your archive should contain everything needed to review and, if approved, deploy your machine. For guidance on what to include, please refer to the sample submission template if it’s linked in the form or documentation.

Note: Payment will be processed after your submission is reviewed and approved.

Accepting the Terms and Conditions

Before you can submit:

• You must confirm: “I have read and agree to the Terms and Conditions.”

Make sure you review any linked terms or policies so you understand the submission, review, and payment process.

Once all required fields are completed, your archive is uploaded, and the Terms and Conditions checkbox is selected:

1. Review your information for accuracy and completeness.
2. Click Submit at the bottom of the form.

Your machine will then be sent to the UGC team for review.

How can I view my submission and its status?

After you submit your machine, you can track its progress in the portal:

1. Open the left-hand menu again and go to Resources → UGC (if you’re not already there).
2. Click My Submissions.
3. You will see a list of all your UGC submissions, including:
   • Machine / lab name
   • Date of submission
   • Current status

The status of your submission will be one of the following:

• Approved – Your submission has passed review and has been accepted. Payment processing and deployment will follow according to the program’s timelines.
• Rejected – Your submission did not meet the requirements or review criteria and will not move forward in its current form. Where possible, you may receive notes or feedback to help you understand why, which you can use to improve future submissions.
• Blocked – Your submission is temporarily stopped and requires changes before it can proceed.
  • This usually means the review team has identified issues that must be addressed (for example: missing files, policy conflicts, unclear scenarios, technical problems, or incomplete content).
  • You should review the feedback from the team, update your lab accordingly, and resubmit.
  • Once you resubmit with the requested changes, the review process can continue.

What should I do after submitting?

• Monitor your status:
  Check My Submissions periodically to see when your machine moves to Approved, Rejected, or Blocked.
• For Approved submissions:
  No further action is typically required from you unless the team requests clarifications. Payment and deployment will follow the normal process.
• For Rejected submissions:
  Use any feedback you received to refine your ideas and improve future labs. You can always submit new concepts that better align with the requirements.
• For Blocked submissions:
  Carefully read the review team’s feedback, make the required changes to your archive or lab details, and resubmit so the review can continue.
• Clarify if needed:
  If anything about your status or feedback is unclear, reach out to OffSec Support or the designated UGC contact channel (such as Discord or email) for clarification.