
May 17, 2023
100% OSCP Certified Team: How PacketLabs Recruits Top Talent
Recruiting the right talent, to fill the cybersecurity skills gap for PacketLabs
Recognizing the intrinsic value of a strong and capable cybersecurity team, PacketLabs has been proactive in navigating the imminent skills shortage that plagues the industry.
They embarked on a meticulous search for an industry-recognized course and certification that would serve as a trusted and reliable hiring benchmark, ensuring a team of highly qualified practitioners equipped with the skills necessary to face the evolving cybersecurity landscape with confidence.
Furthermore, PacketLabs puts a large emphasis on the methodological approach and soft skills in pentesting, and this is also precisely what a vendor they would choose as the benchmark needed to have in its curriculum and teach those that take the certification.
Enter OffSec. Through their partnership with OffSec, PacketLabs has now established an “OSCP minimum” in their hiring process to ensure they are only hiring top talent.
Watch the full video case study to learn how PacketLabs is navigating the skills shortage and continues to hire top talent using OffSec certification as a benchmark.
Stay in the know: Become an OffSec Insider
Get the latest updates about resources, events & promotions from OffSec!
Latest from OffSec

Research & Tutorials
CVE-2024-21683 – Authenticated RCE via “Add a New Language” in Atlassian Confluence
Critical RCE vulnerability (CVE-2024-21683) in Atlassian Confluence Data Center and Server (v5.2–8.9.0) allows authenticated users to execute arbitrary code via malicious code macros.
Jun 12, 2025
2 min read

Research & Tutorials
CVE‑2025‑49113 – Post‑Auth Remote Code Execution in Roundcube via PHP Object Deserialization
A critical RCE vulnerability (CVSS 9.9) in Roundcube Webmail (
Jun 12, 2025
3 min read

Research & Tutorials
CVE-2025-24893 – Unauthenticated Remote Code Execution in XWiki via SolrSearch Macro
An RCE vulnerability in XWiki was found allowing unauthenticated attackers to execute arbitrary Groovy code remotely without authentication or prior access.
Jun 5, 2025
2 min read