The Offensive Security approach

Offensive Security is the organization that brings us Kali Linux, as well as some active blogs and thought leadership in the area of penetration testing and forensics. While they are most known in the certification realm for their Offensive Security Certified Profession (OSCP), they also offer the Offensive Security Web Expert (OSWE, https://www.offensive-security.com/information-security-certifications/oswe-offensive-security-web-expert/) . This rigorous training features a 24-hour practical exam that is the hallmark of their certification strategy. While Offensive Security is focused on practical aspects, they do, in fact, teach a hands-on methodology that many use as their baseline. Their operating system, Kali Linux, is the focus, so we'll certainly heed their guidance in many areas in this book.