OSEP

It targets advanced offensive tradecraft rather than fundamentals: client-side and phishing-based initial access, defence evasion against AV and EDR, application whitelisting bypass, Windows and Active Directory privilege escalation and lateral movement, and Linux post-exploitation. If you are still learning basic enumeration and web exploitation, that groundwork should come first.

We cannot state this reliably. The official certification page returned a 404 when retrieved, so duration, target count and point structure are unconfirmed here and are marked null. Check OffSec's own certification and exam guide documentation, and treat any number quoted on third-party sites as unverified until you confirm it at the source.

Unconfirmed. Because the source page could not be retrieved, passing score, report requirements, certification validity period and renewal expectations are all null on this page. OffSec publishes these terms in its official exam guide and policy pages; read those before booking, since they govern your result and any later recertification obligation.

No fee figure is available here - the pricing details sit on pages that did not load during retrieval. OffSec bundles course access and exam attempts in several configurations, and retake terms differ between them. Confirm the current pricing, bundle contents and retake policy directly on OffSec's site at the time you purchase.

Candidates consistently describe it as a step up in depth, because it rewards reliable technique under defensive pressure rather than a single exploit. The hard part is rarely knowing a tool; it is making a payload survive modern endpoint protection, then chaining access without losing it. Budget substantial lab hours, not just reading time.

Build the client-side and payload-delivery skills first, since everything downstream depends on getting an initial execution. Then work on evasion and whitelisting bypass, which you must retest continuously as defences update. Move to Windows and Active Directory escalation and lateral movement next, and finish with Linux post-exploitation, practising pivoting between the two operating systems.

Time management tops the list: candidates over-invest in one stubborn host instead of banking achievable objectives. Others fail by relying on memorised payloads that current endpoint protection blocks, by not practising clean pivoting and tunnelling, or by neglecting documentation during the engagement and then struggling to write a coherent report afterwards.

Report requirements are not confirmed on this page because the official source failed to load. OffSec's advanced exams have historically required written documentation of the attack path and evidence, and the exact submission format and deadline are defined in the official exam guide. Verify the current requirement before your attempt.

You can build most of the required skill set in a home lab, but you must simulate defenders: run current endpoint protection, enable logging, and test whether your payloads actually execute rather than assuming they do. The official course adds structure and OffSec-specific methodology that self-study tends to miss, so weigh both.

The page was last checked against the official OffSec certification URL, which returned a 404 and therefore supplied no exam data. All quantitative fields here are null and flagged for review, and the four domain areas listed are provisional placeholders. Re-verify everything against OffSec's live certification page before making scheduling or budgeting decisions.