OSEP case studies

The OffSec Experienced Penetration Tester (OSEP) credential - historically tied to the PEN-300 course track - is an advanced, hands-on certification aimed at practitioners who already operate comfortably in Windows and Linux environments and want to demonstrate tradecraft beyond basic exploitation: phishing and client-side delivery, evading antivirus and EDR controls, bypassing application whitelisting, escalating privileges in Active Directory, moving laterally, and sustaining post-exploitation access on Linux hosts. Candidates are typically red teamers, senior penetration testers, or security engineers whose day job involves operating against defended networks rather than isolated vulnerable boxes. The OSEP case studies are 5 cases and about 3,816 words.