Excellent exam report work does not start during the reporting phase; it begins the moment your exam environment provisions. Trying to reconstruct your steps, remember code paths, or retake screenshots after your lab access expires is a recipe for disaster. 1. Document as You Go
[Leave blank – to fill after compromise]
Capture the entire terminal window if using command-line tools. Ensure timestamps are visible if required. Clean Code and Payloads Include only the final, working script. Comment your code to explain how the exploit works. Ensure your script is runnable as a single file. 4. The Importance of Source Code Analysis
OffSec provides an official exam report template, which you should use as your foundation. While you can customize the formatting, you must adhere strictly to the requested structure. A successful OSWE report generally contains the following core sections. 1. Executive Summary
He scrolled down the document. It was meticulous. Code blocks were highlighted in specific colors. Every request was sanitized to hide sensitive data. Every screenshot had a red border and a figure number.
"Seriously?"
OffSec provides an official Microsoft Word template. If you prefer standard word processors, download this template early. Modify the styles, font sizes, and code blocks ahead of time so you can copy and paste notes seamlessly during the exam. 3. Screenshot and Code Organizers
An expert report must provide remediation guidance. Do not just say "fix the code." Provide concrete, actionable software development advice:
Run the appropriate command to display the flag content (e.g., cat local.txt or type proof.txt ).
: Forgetting to include the local.txt or proof.txt flags in your screenshots or report is a common reason for failure. Double-check that every flag is documented.
Contact our customer support if you would like our friendly agents to help you resolve your issues.
Request Support