Pentest skills assessmenst at Exploitable Labs

JDMurray

I was just listening to episode #254 of the Risky Business podcast and heard its interview with the owner of Exploitable Labs. EL offers a service to assess people's Web and network penetration testing and report writing skills using 24-, 48-, and 72-hour online pentesting labs. It's not a certification like the OSCP or CREST; instead, it's an in-depth evaluation intended to discover a pentester's strengths and weaknesses. EL's service is intended for organizations to verify the skill level of employees and job candidates, but individuals also use the service to test themselves and learn in what areas they need to improve.

People who are very interested in the OSCP certification will probably also be interested in looking at the pentesting skills challenge from Exploitable Labs too. Listen to the podcast interview for more details.

SephStorm

Thank you for posting this JD, i'm sure this will be useful. Whats the cost for a 24hr evaluation?

NetworkVeteran

$250/$400/$700

Less than a CCIE candidate would pay, but no clear explanation of what is covered, no sample score reports, no contact numbers, and clearly a rushed website. One would be taking a small leap of faith based on the author/owner.

JDMurray

The payment selection lists 24hr = $250AUD, 48hr = $400AUD, and 72hr = $700AUD. I have no idea what the conversion is to USD.

UPDATE: AUD is currently only pennies higher than USD.

ptilsen

That seems like a great employee evaluation tool. It seems to me a high price for someone to pay on their own, even as prep for OSCP or similar, but I could definitely see security companies using it.