Welcome to the OffSec Connectivity Guide! This article explains the primary methods for connecting to OffSec labs: OffSec VPN, In-Browser Kali, and In-Browser Windows. These options allow you to access labs conveniently, whether you are using advanced networking features or prefer a browser-based connection.
This guide will help you decide which connectivity method is best suited for your learning path and walk you through each method's setup.
Connectivity Methods Overview
OffSec provides several methods for connecting to lab environments, depending on your course requirements and technical preferences. The two main options are VPN connectivity and In-Browser options (Kali or Windows), each serving different needs:
- In-Browser Kali: A virtual Kali Linux environment accessible via web browser, ideal for basic labs and learners who prefer not to install additional software.
- In-Browser Windows: A browser-based Windows environment, provided as an alternative to VPN for select courses where VPN connection is not possible or convenient.
- OffSec VPN: The most comprehensive method, allowing full access to advanced labs and challenges. Preferred for complex courses and scenarios.
Our Learning Portal requires both WebSocket and Standard Hypertext Transfer Protocols (HTTP/HTTPS) for in-browser lab access over Ports 443 and 80.
Please ensure that your firewall or network configuration does not block these protocols on the specified ports. Without enabling WebSocket connections, certain features, such as in-browser lab environments (Kali or Windows), may not function properly.
In-Browser Kali
What is In-Browser Kali?
In-Browser Kali provides a virtual Kali Linux environment directly in your web browser, eliminating the need for software installation. It’s a pre-configured, ready-to-use system designed for learners who want a quick, easy way to access labs without setting up a local Kali Linux machine.
Note: This option uses a temporary cloud instance, so progress is not saved if the session is closed.
When to Use In-Browser Kali?
- 100-level courses, PG Play/Practice, content provisioned through the Build and Defend Library, as well as in TH200 and OCR: This feature supports both foundational and advanced learners across different modules and labs.
- Basic Labs: Ideal for basic exercises that don’t require advanced tools or complex configurations.
- No VPN: If you're unable to set up a VPN or prefer not to, In-Browser Kali provides a browser-based alternative to get started right away.
How to Access In-Browser Kali?
You may see “My Kali” in the dashboard as disabled, to access it please see the steps below:
Step 1: Search for Your Course: Use the "Explore" button or search bar on the OffSec dashboard.
Step 2: Launch My Kali: Navigate to the course module and click the “My Kali” button on the bottom left of the screen. This will open In-Browser Kali directly in your web browser.
Advantages of In-Browser Kali
- No Installation Needed: Start using Kali Linux directly without installing the Operating System.
- Quick Access: Great for quick labs or when you don’t have time to configure a local machine.
- User-Friendly: Designed for beginners and those who want to dive into the labs immediately.
In-Browser Windows
What is In-Browser Windows?
In-Browser Windows provides a Windows virtual environment accessible directly from your web browser. It is offered as an alternative to VPN connectivity for specific labs in courses such as Defensive Cyber Range, Offensive Cyber Range, SOC-200, TH-200 and Defend Library, which includes: Incident Response LP, Vulnerability Management LP, and Digital Forensics modules. This method is particularly useful when learners are unable or prefer not to connect via VPN.
Note: Like the Kali option, this uses a temporary instance where progress is lost if the session ends or closes.
When to Use In-Browser Windows?
- Alternative to VPN: For learners unable to connect via VPN, In-Browser Windows offers a browser-based alternative.
- Defensive and Offensive Cyber Ranges: Provided as an option for these courses when VPN connectivity is not feasible or desired.
- SOC-200, TH-200, and Defend Library, which includes: Incident Response LP, Vulnerability Management LP, and Digital Forensics modules. If VPN access is not available, In-Browser Windows is an acceptable alternative for accessing lab environments.
How to Access In-Browser Windows
- Automatic Launch: If you try to start a lab that requires a connection and you’re not connected via VPN, In-Browser Windows may be launched automatically depending on the lab requirements.
- Course-Specific Access: For courses like SOC-200 and TH-200, In-Browser Windows will be presented as an option when you begin a lab session, provided the lab environment supports it.
Advantages of In-Browser Windows
- No VPN Needed: Provides access to lab environments for learners who cannot or prefer not to connect via VPN.
- No Installation Required: Avoids the need to install any additional software.
- Direct Browser Access: Start lab sessions directly from your browser in a Windows environment.
OffSec VPN
What is OffSec VPN?
OffSec VPN is the preferred method for accessing labs and challenges in most OffSec courses, especially those requiring more complex setups. VPN provides a secure, isolated network connection that enables learners to interact with lab machines beyond basic exercises and access advanced resources that may not be available through In-Browser options.
When to Use OffSec VPN?
- Advanced Labs and Challenges: Required for high-level content, including labs that need advanced configurations, tools, and resources.
- Comprehensive Access: VPN provides full access to all available labs and challenges within your course.
- Advanced Courses: For courses like PEN-200, PEN-300, EXP-312, and others, VPN connectivity is necessary to engage with the full range of lab machines and tools.
Advantages of OffSec VPN?
- Full Access: VPN gives you access to all labs, tools, and advanced configurations.
- Secure Environment: Offers a secure, isolated connection for exploring complex labs.
- Advanced Functionality: VPN is required for higher-level courses and advanced labs not supported by In-Browser options.
Where to download the VPN?
OffSec VPN can be downloaded from the left panel on the dashboard or inside a course module.
How to connect Using OffSec VPN?
- Download the VPN Pack: From the dashboard or course module, download the VPN pack. It will be saved to /home/kali/Downloads/ by default.
-
Initiate VPN Connection: Open a terminal in Kali Linux and use the following command to start the VPN:
sudo openvpn universal.ovpn - Keep the Terminal Open: To maintain the VPN connection, ensure the terminal window remains open.
Note: Closing it will disconnect you from the VPN.
-
Verification: Once you see "Initialization Sequence Completed," your VPN connection is successfully established.
Initialization Sequence Completed
Expectations and Troubleshooting
- Configuration Warnings: Be aware of configuration warnings in the command prompt and refer to the OffSec VPN Troubleshooting Guide if needed.
- Support: If you encounter issues, consult the OffSec Support team or community forums.
Choosing the Right Method
-
Beginner Users:
For learners just starting out, In-Browser Kali is an excellent, low-hassle option that allows you to quickly access basic labs without additional setup. However, this method is only available for 100-level courses and basic exercises. -
Advanced Users:
If you're working on more challenging content in courses like PEN-200, PEN-300, or SOC-200, OffSec VPN is the recommended option to gain full access to lab environments and advanced tools. In-Browser Windows can be used as an alternative when VPN is not feasible, but it may have limitations compared to the VPN option.
Supplemental Guidelines
Connectivity Options Overview
- Only VPN Available: If a course or lab only supports VPN, an error will prompt you to connect to the VPN if you're not already connected.
- VPN and In-Browser Kali Available: If both options are available, you may be automatically connected via In-Browser Kali if you attempt to start a lab without a VPN connection.
- VPN and In-Browser Windows Available: For courses supporting both VPN and In-Browser Windows, the system may automatically launch In-Browser Windows if you're not connected to the VPN.
- All Methods Available: When both In-Browser Kali and In-Browser Windows are supported alongside VPN, OffSec will decide which browser-based method to launch based on lab requirements.
Additional Resources
- Understanding in-browser Kali: Explore detailed information on using the browser-based Kali environment, including best practices and troubleshooting tips to ensure a smooth experience.
- Common VPN and Machine/VM Issues: Find solutions for common VPN connectivity issues, as well as tips for resolving machine or virtual machine problems that may arise during lab sessions.
- Internet Access in In-Browser Kali: Learn whether and how you can access the internet from your in-browser Kali Linux machine, including any restrictions or configurations required.
- Configuring Firewall Rules for In-Browser Kali and Windows: For users working in environments with enforced strict firewall policies.
For any further assistance or troubleshooting, feel free to reach out to OffSec Support or explore additional resources in our knowledge base.