OffSec Wireless Professional

It is a four-hour exam proctored by an OffSec employee inside a private VPN. You face three network scenarios and must obtain the wireless key in each, connect to the target access point, and gain a proof file from http://192.168.1.1/proof.txt. Only one scenario can work at a time, so plan your sequence rather than expecting all three to be reachable simultaneously.

OffSec positions PEN-210 at Level 200, and the OSWP is described as more specialized than broader certifications such as OSCP+. Difficulty comes less from breadth than from precision: you must correctly identify encryption types, capture the right handshake or WPS exchange, and crack it within the time limit. Candidates already fluent in Linux and TCP/IP report the steepest learning curve is wireless-specific tooling and frame analysis.

OffSec's published material does not state a retake policy or fee on the pages summarized here, so confirm current terms with OffSec before booking. On expiration the source is explicit: unlike the OSCP+, OSIR, and OSTH, the OffSec Wireless Professional (OSWP) certification does not expire, so once earned it remains valid without renewal.

Follow the 16 PEN-210 modules in sequence. Start with 802.11 foundations and network architectures, then reconnaissance and traffic capture with Kismet and Wireshark, then encryption and WPS weaknesses, then rogue AP and deauthentication work. Keep adapter chipset and driver identification and the mac80211 framework alongside the early modules, because you need a working monitor-mode adapter before any capture exercise succeeds.

Three failures recur: an adapter or driver that cannot reliably enter monitor mode or inject frames, capturing traffic on the wrong channel or without waiting for a client to reconnect, and cracking attempts run against an incomplete capture. Verify chipset and driver support first, confirm channel and BSSID before capturing, and validate that a handshake or WPS exchange is complete before spending time on cracking.

The exam runs in OffSec's private VPN and labs, so check the exam guide for what is provided versus what you supply. In practice, wireless work depends on adapter chipset and driver support, and PEN-210 teaches determining both even when you cannot physically access the hardware. Confirm adapter compatibility and monitor-mode support before exam day rather than discovering a limitation mid-session.

OffSec states there are no formal prerequisites, though it strongly recommends Linux command-line experience, solid TCP/IP networking understanding, basic wireless concepts such as 802.11 protocols and encryption, and some familiarity with standard penetration testing skills. PEN-210 is the associated course; OffSec notes it is included free with any Learn subscription, and Learn One bundles one 200- or 300-level course with labs and two exam attempts.

OffSec states that all of its fully released courses may qualify students for up to 40 (ISC)2 CPE credits. Whether you are eligible to request a completion letter, and what the course completion requirements are, is covered in OffSec's article on obtaining (ISC)2 CPE credits and course completion letters, so check that before assuming eligibility.

OffSec lists wireless security specialist, penetration tester focused on Wi-Fi and wireless attack surfaces, network security analyst, system administrator, security engineer, IT administrator with security responsibilities, and technical support specialist in security-focused environments. It is a specialization credential, so it complements rather than replaces broader offensive security certifications when applying for generalist roles.