Two OffSec exams: network penetration testing and web application exploitation.
Offensive Security · PEN-200
The gold standard for penetration testers. Hands-on 24-hour exam requiring real exploitation of machines. Covers methodology, enumeration, exploitation, privilege escalation, and Active Directory attacks.
Full Prep GuideOffensive Security · WEB-300
Offensive Security's advanced web application exploitation certification. Master source code review, authentication bypass, advanced injection, and custom exploit development.
Full Prep GuidePenetration Testing Methodology
1 lessons
Information Gathering & Enumeration
2 lessons
Vulnerability Discovery & Exploitation
2 lessons
Privilege Escalation
2 lessons
Active Directory Attacks
2 lessons
Source Code Review
2 lessons
Authentication Bypass
2 lessons
Advanced Injection Techniques
1 lessons
Custom Exploit Development
2 lessons
Which Nmap flag performs a SYN scan (half-open)?
Enrol in the prep track to see the answer
A CI/CD pipeline security gate should:
Enrol in the prep track to see the answer
Exam cost: OSCP (Offensive Security Certified Professional) is $1,749 vs OSWE (Offensive Security Web Expert) at $1,649. Factor in study materials and retake fees.
Both certifications are valuable. Your choice should depend on your career goals, current experience level, and the specific roles you're targeting.
Both PEN-200 and WEB-300 have a prep track with practice questions, a study plan and progress tracking. Enrolling in a track costs 30 credits.