Penetration Testing with Kali Linux (PEN-200) – OSCP Certification
Training including examination and certification
.svg)
Machine Learning Engineer
- Penetration Testing Methodology and Process Models
- Information Gathering and Enumeration
- Vulnerability Scanning and Vulnerability Analysis
- Web Application Attacks and SQL Injection
- Client-Side Attacks
- Exploit Research and Exploit Customization
- Antivirus Evasion and Bypassing Protection Mechanisms
- Password Attacks and Credential Exploitation
- Windows and Linux Privilege Escalation
- Port Redirection, Tunneling, and Network Pivoting
- Active Directory Enumeration and Attacks
- Penetration Testing Tools and Frameworks
- Realistic attack scenarios and hands-on labs
- Documentation and Penetration Testing Reporting
- Preparing for the OSCP Certification Exam
Consists of the following modules:
- Penetration Testing with Kali Linux (PEN-200) – OSCP Certification
- Brush-Up: Penetration Testing with Kali Linux
Requirements:
To get the most out of this intensive, hands-on training, you should definitely have the following knowledge:
- A solid foundation in TCP/IP and networking technologies
- Practical experience in administering Windows and Linux systems
- Basic knowledge of scripting with Bash and/or Python
- Using the Command Line Safely
To successfully earn certification, it's important that you thoroughly explore technical challenges and practice independently in the labs.
Technical requirements:
For the training and the subsequent exam, you'll need a high-performance computer of your own on which a virtual machine can run locally. The device must meet the following requirements:
- at least 8 GB of RAM
- At least 80 GB of free disk space
- the latest version of VMware Workstation or VMware Fusion
- Administrator privileges or sufficient permissions to install the virtual machine and configure system settings
- Support for x86/x64 VMware VMs
ARM-based devices, such as Apple Silicon Macs with M1, M2, M3, or newer M processors, are not supported. VMware Player and VMware Server are also not suitable for this training due to functional limitations.
- Apply systematic methods for information gathering, enumeration, and identification of vulnerabilities
- Analyzing vulnerabilities and selecting appropriate attack techniques
- Exploiting Vulnerabilities in Windows, Linux, and Web Systems
- Expanding Access Rights Through Targeted Privilege Escalation Techniques
- Overcoming Network Boundaries Using Tunneling and Pivoting
- Identifying and Exploiting Typical Attack Vectors in Active Directory Environments
- Combining Various Attack Techniques into a Structured Penetration Test
- Documenting vulnerabilities, attack vectors, and the results of a penetration test
The course combines five days of intensive, instructor-led training with a subsequent individual learning and practice phase. During the training days, the “ trainers ” cover the OSCP material in a structured manner and consistently integrate theory with demonstrations, hands-on exercises, and realistic attack scenarios.
After the training, you’ll reinforce what you’ve learned on your own with your Learn One subscription. For 365 days, you’ll have access to OffSec learning materials and extensive labs to further develop your practical skills and prepare specifically for the exam.
Upon request, participants have the option to attend a half-day refresher session after the training concludes to reinforce their knowledge in preparation for the exam. The refresher session takes place on a separate date to be scheduled after the training. There is no additional cost for participation.
The Learn One subscription includes:
- 365 days of access to the OffSec digital course and the accompanying labs
- Digital OffSec course materials, which can also be downloaded
- Two attempts at the OffSec certification exam included in the course
- Access to over 200 Proving Grounds Practice Labs for additional hands-on training
- Bonus access to the KLCP (Kali Linux Certified Professional) course, including the exam
- Bonus access to the OSWP course (OffSec Wireless Professional), including the exam
The exam fees are included in the seminar price.
You have a total of two attempts at the corresponding certification exam.
With the PEN-200, you'll prepare for the OffSec Certified Professional Plus (OSCP+) certification. The exam is entirely hands-on: You'll work in a controlled network environment and must successfully complete and document real-world penetration testing tasks.
- Exam duration: 23 hours and 45 minutes
- Documentation: an additional 24 hours following that to submit the audit report
- Format: practical, supervised hands-on exam
- Maximum score: 100 points
- Passing score: 70 out of 100 points
- Test environment: 6 systems in a private network environment
- Examination contents:
- 3 independent systems – 60 points total
- Initial Access – 10 points per system
- Privilege Escalation – 10 points per system
- Active Directory environment with 3 systems – 40 points total
- Client 1 – 10 points
- Client 2 – 10 points
- Domain Controller – 20 points
- 3 independent systems – 60 points total
- Test Report: All attacks carried out, commands used, and results obtained must be documented in a professional penetration test report.
OffSec currently assigns the following weightings to the assessed competencies: 33% for documentation of findings, 26% for Active Directory, 18% for privilege escalation, 12% for identification of vulnerabilities, and 11% for exploitation of systems.
Additional Requirements for the Online Exam
The exam will be administered online and under supervision. You will also need:
- a built-in or external webcam; smartphones and tablets are not permitted as webcams
- A stable Internet connection with a download speed of at least 20 Mbit/s and an upload speed of at least 10 Mbit/s; a supported browser, such as Google Chrome, Firefox, Chromium, Brave, or Microsoft Edge
- a private exam room
- a valid government-issued photo ID with information clearly visible in English
The webcam must remain on throughout the entire exam and be positioned so that your face, upper body, and immediate surroundings are visible. Before the exam, your identity, workstation, running programs, and technical configuration will be verified.
Please review the current OffSec requirements well in advance of the training and exam: OffSec Proctored Exam Requirements
Certification
Upon successful completion of the exam, you will receive the OffSec Certified Professional Plus (OSCP+) certification, as well as a digital certificate and badge from OffSec.
Upon passing the current exam, you will receive both the OSCP and OSCP+ designations. The standard OSCP certification remains valid indefinitely, while the additional OSCP+ certification is valid for three years.
Recertification
The OSCP+ certification is valid for three years. There are several options available for maintaining the OSCP+ designation, such as earning 120 CPE credits within three years, taking a recertification exam, or passing a qualifying OffSec certification. In addition, annual maintenance coverage is required through the OffSec Annual Membership Program (AMP) or the Annual Maintenance Fee (AMF).
The OSCP certification itself, however, does not expire. Even if the OSCP+ designation is not renewed after three years, OSCP status remains valid indefinitely.
The PEN-200 is ideal for you if you want to build or deepen your practical knowledge of offensive security and penetration testing and earn the internationally recognized OSCP certification. The course is specifically designed for:
Penetration Testers & Ethical Hackers: You'll continue to develop your practical skills and learn how to systematically identify, exploit, and professionally document vulnerabilities.
Security Engineers & Analysts: You want to understand attack techniques from an attacker's perspective and use that knowledge to better identify vulnerabilities and attack vectors in your own environment.
System and Network Administrators: You already have technical experience with systems and networks and would like to make the move into penetration testing and offensive security.
Cybersecurity Professionals & career changers: You have a solid foundation in IT and want to specialize in the technical field of cybersecurity and build an internationally recognized professional profile through OSCP certification.
.svg)