CATALOGUECOURSESOffSec Offensive Security Certified Professional (OSCP)
    Cyber Security Certification
    [ cyber ]
    BODY: OffSec

    "The OffSec Offensive Security Certified Professional, or OSCP, is a premier hands-on penetration testing certification designed to validate practical offensive security skills. This intensive curriculum covers network reconnaissance, active directory exploitation, and privilege escalation using industry-standard tools and custom scripts. Earning the OSCP demonstrates a practitioner's proven ability to execute real-world cyber attacks under pressure, making it a highly sought-after credential for red teamers and security analysts navigating the modern threat landscape."

    The OffSec Offensive Security Certified Professional (OSCP) via the PEN-200 curriculum is a globally recognized, rigorous, hands-on penetration testing certification. It equips cybersecurity professionals with the tactical methodologies required to identify, exploit, and document vulnerabilities in enterprise networks. The curriculum emphasizes active directory exploitation, privilege escalation, web application attacks, and custom scripting. Designed for penetration testers, security analysts, and red teamers, this clinical training standardizes offensive operations, culminating in a grueling 24-hour practical exam that mirrors real-world adversarial engagements.

    Certifying BodyOffSecAccreditation Authority
    Estimated Time190 HoursRecommended Preparation
    Skills Tested6 CompetenciesAtomic Units Mapped
    SecNav Verification
    Active Audit Node
    Simulation Ready

    [01] Hands-On Verification Sandboxes (Live Simulations)

    Deploy into hands-on sandbox simulations mapped directly to OffSec Offensive Security Certified Professional (OSCP) objectives. Verify your readiness under real-world conditions:

    Verification Available

    Portal Intercept & Vulnerability Triage

    ID: SECM-4312Deploy
    Verification Available

    Parallax Edge Penetration Assessment

    ID: SECM-1109Deploy
    Verification Available

    Tactical Web Assessment: CRM Launch

    ID: SECM-3600Deploy

    [ EDITORIAL_INDEPENDENCE_NOTICE ]

    SecNav is not a commercial partner for this course. We do not receive compensation, referral commissions, or affiliate fees from OffSec for indexing this credential. We map this path purely for its educational merit and alignment with career progression.

    PROVIDER_INTEL

    [02] Exam Curriculum & Syllabus Modules

    6 Modules Indexed

    Structured domain syllabus and core learning outcomes covered in the OffSec Offensive Security Certified Professional (OSCP) examination blueprint:

    MODULE // 01
    ~20h

    Module 1: Information Gathering and Vulnerability Scanning

    • •Open-Source Intelligence (OSINT)
    • •DNS Reconnaissance
    • •Nmap Advanced Scanning
    • •SMB and SMTP Enumeration
    MODULE // 02
    ~30h

    Module 2: Web Application Attacks

    • •Web Proxy Interception (Burp Suite)
    • •Cross-Site Scripting (XSS)
    • •SQL Injection (SQLi)
    • •Command Injection and File Inclusion
    MODULE // 03
    ~20h

    Module 3: Client-Side Attacks and Evasion

    • •Malicious Document Creation
    • •Antivirus Evasion Techniques
    • •Payload Obfuscation
    MODULE // 04
    ~40h

    Module 4: Windows and Linux Privilege Escalation

    • •Local Information Gathering
    • •Service Misconfigurations
    • •Kernel Exploits
    • •Scheduled Tasks and SUID Rights
    MODULE // 05
    ~50h

    Module 5: Active Directory Exploitation

    • •Active Directory Enumeration
    • •Kerberoasting and AS-REP Roasting
    • •NTLM Relay Attacks
    • •Internal Network Pivoting and Lateral Movement
    MODULE // 06
    ~30h

    Module 6: Metasploit Framework and Exploit Customization

    • •Metasploit Framework Ops
    • •Exploit Modification
    • •Fixing Public Exploits
    • •Post-Exploitation Modules

    [03] Skills Validated by This Certification

    The OffSec Offensive Security Certified Professional (OSCP) curriculum tests and measures critical capabilities across these essential cybersecurity & threat defense skills. Explore the dedicated skills nodes below:

    Network Penetration Testing

    cyber

    Internal Network Pivoting

    cyber

    Nmap Advanced Scanning

    cyber

    Web Proxy Interception (Burp Suite)

    cyber

    PowerShell for Security (Offense)

    cyber

    Metasploit Framework Ops

    cyber

    [04] Career Pathways & Target Roles

    Securing a verified status in OffSec Offensive Security Certified Professional (OSCP) is a high-value accelerator for major cyber defense career paths. Learn more about the primary roles mapping to this pathway:

    Junior Penetration Tester

    Verified Target Role

    Network Penetration Tester

    Verified Target Role

    Cloud Penetration Tester

    Verified Target Role

    Red Team Operator

    Verified Target Role

    Red Team Lead

    Verified Target Role

    Endpoint Security Engineer

    Verified Target Role

    Network Security Engineer

    Verified Target Role

    Web Application Pentester

    Verified Target Role

    Vulnerability Management Analyst

    Verified Target Role

    Exploit Developer / Researcher

    Verified Target Role

    [05] Frequently Asked Questions about OffSec Offensive Security Certified Professional (OSCP)

    Yes, absolutely! You can verify your real-world readiness by launching the following active-threat sandbox simulations on our platform: Portal Intercept & Vulnerability Triage, Parallax Edge Penetration Assessment, Tactical Web Assessment: CRM Launch. Completing these sandboxes grants cryptographically signed proof and reward XP.
    Candidates should have a solid understanding of TCP/IP networking, Linux and Windows administration, and basic scripting skills in Python or Bash. While not strictly mandatory, prior foundational security knowledge is highly recommended before beginning the PEN-200 curriculum.
    The OSCP exam is a grueling 24-hour practical assessment where candidates must compromise a simulated enterprise network, including an Active Directory set, and submit a comprehensive professional penetration test report within the following 24 hours to prove their methodology.
    Modern enterprise environments overwhelmingly rely on Active Directory for identity and access management. The PEN-200 course focuses heavily on AD exploitation to ensure penetration testers can identify and exploit real-world lateral movement and domain privilege escalation vulnerabilities.

    [06] Authoritative Sources & Certification References

    Certifying Body & Official Resources

    Official Registration URLDirect Link
    https://www.offsec.com/courses/pen-200/
    NIST NICE Framework ReferenceVulnerability Assessment Analyst (PR-VAM-001)
    Official Link
    MITRE ATT&CK ReferenceEnterprise Tactics & Techniques
    Official Link