Wednesday, May 26, 2021

High Alert- Threat for Offensive Security Students/Alumni in the name of Academic Policy

 

Here I am posting all my issue since I won’t get any answer from offensive security  or they won’t respond for my email. I want to strongly record this case to all our security community how offensive security treading their students/Alumni in the name of Academic Policy.

Let me give short intro about myself I completed my OSCP in the year of 2018 with lot of struggle and cleared the exam in first attempt. By 2020  I plan to prepare OSWP and I purchased the course materials on the date of June 27th 2020 and I appeared for exam on Sat,25 Jul 2020 but unfortunately failed on my first attempt the reason behind failed was exam machine was not working properly I failed to contact support via online but email them to seek help but that case not worked for me and I failed.

Here screenshot for your reference



After little break, I plan to re-appear for my exam and mean time one of my junior guys who worked along with me also like to prepare for OSWP. So, I have suggested him to check the offsec website and guide him to buy the course and he did in the same way. and parallelly he started to prepare his exam And  In mean time I booked my exam slot on Tue,23 2021.

 

I was getting ready for my exam with little tension and exam starts like as usual after got VPN and machine access I was checking all AP(Access Point) again the machine was not working like first time. But now I know how to sort out this issue I contacted the support team for help they checked the machine and reset the all AP and we both know(myself & Offensive Security) there was issue with AP but still off sec not agree with there mistake and finally they given me one hour extra time to write exam.

Online Chat Transcript screenshot:


Here is the below screenshot of the email


 



After lot of struggle I submitted the exam documentation and I got pass email from off sec and I was very happy that time.

 

After a 2 week of time on April 8th 2021 I got a one more email from offensive security  which is little surprise for me




I could not get any clue what happening surrounding me and suddenly got little  tension and reply them like below screenshot

And I was keep on worrying what to do next and no clue suddenly my junior guy called me and explain he also got same email like above one we both are in confused state and don’t know what to do. And he responds to off sec team with his justification.



 



After long time of analysis of both reporting structure we got to know the login IP of exam which we wrote was same IP and it was a static IP which belong to office network and its not belong to personal one. As per the offensive security Academic Policy it does not state no student should not write exam on office network or by using the Static Ip. Its only state no student should not help each other or not to share any information during or after exam or before exam that we followed very strictly.





It was clearly mentioned in the screenshot of different time and date of login but offensive security market this one as integrity of our Certifications is breached. And more over as per there policy we not helped each other during exam and we not appear for exam on same date or time. Due to static IP address they are treating us in such a wrong way

 We both where waiting for more then 45 days for there reply no respond from them on May 26th we both got email like below screenshot.




Here my list of Question to offensive Security

 

Question: Since you were saying I was breached Academic policy by sharing the exam report or Reporting information.

Answer: We both download the exam template from offensive security website and we both not shared to each other. You have our both reporting copy and you can do the investigation, but you did not do in that way and more over you have plagiarism Algorithm to identify the cheater so you can upload both report to get evidence but you not did in that way too.

You have only IP in both reporting document that too static IP which does not mean we did malpractice in exam.

Question: you did investigation for more than 45 days to get an evidence but unfortunately you don’t have enough evidence to prove my suspicious activities like we both did cheated.

So finally, you market with tag name by sharing the exam report or Reporting information tag and revoked my certificate

 

Question: Do offensive security thinking no student or Alumni should not ask any question to offsec for wrong action against the student.

 

My final justification for offensive Security

I am 200% sure you were not done the proper investigation on my reporting part and you want to show case your self as big one and no one should ask question.

I will make sure to whole offsec world  what is happened to my case and I want to expose what kind of activities you guys are doing to the Student who paid their hard-earned money for their carrier growth.

It does not mean offensive security won’t do any mistake in their operation. Yes, even you guys  do mistake not only student I want to prove that you guys did mistake from my case.