Core · Penetration Testing

OSCP+

OffSec Certified Professional+

Develop a complete penetration-testing methodology for identifying, exploiting and documenting weaknesses across standalone and Active Directory environments.

Course overview

Skills with real-world context

Designed around the workflows and decisions practitioners use—not a collection of disconnected tool demonstrations.

Develop a complete penetration-testing methodology for identifying, exploiting and documenting weaknesses across standalone and Active Directory environments. The learning path combines guided concepts, repeatable lab methodology, evidence collection and professional communication.

Penetration Tester Red Team Associate Security Consultant

2026 market direction

OSCP+ remains a widely requested practical credential for penetration-testing roles. Current preparation places strong emphasis on Active Directory, repeatable methodology and professional reporting.

Course content

What you will study

A focused six-module roadmap. Exact official syllabus and assessment policies remain subject to OffSec updates.

Methodology & Reporting

Rules of engagement and scoping

Note-taking and evidence standards

Information gathering workflow

Professional penetration-test reporting

Vulnerability Discovery

Service enumeration

Web technology identification

Vulnerability research

Manual validation and prioritization

Web Application Attacks

Directory and parameter discovery

Authentication and file attacks

SQL injection fundamentals

Client-side and server-side weaknesses

System Exploitation

Exploit modification and transfer

Shells and payload handling

Password attacks

Port forwarding and tunneling

Privilege Escalation

Linux enumeration and escalation

Windows enumeration and escalation

Misconfigurations and credentials

Post-exploitation discipline

Active Directory

AD enumeration and attack paths

Authentication abuse

Lateral movement and pivoting

Domain compromise lab scenarios

Plan your preparation

Audience, prerequisites and exam

Who should attend

Aspiring penetration testers
Security engineers moving into offensive work
Administrators who need attacker perspective

Recommended prerequisites

Comfort with TCP/IP, Linux and Windows administration, Bash or Python basics, and security fundamentals.

Certification assessment

A proctored hands-on penetration-testing exam plus report submission. Passing the updated exam awards OSCP and the renewable OSCP+ designation; verify renewal rules in the official guide.

Learning outcomes

Capabilities you will build

Run structured reconnaissance and enumeration

Exploit and stabilize vulnerable systems

Escalate privileges on Linux and Windows

Attack Active Directory and write a professional report

Primary curriculum reference: Official OSCP+ course information . Pricing, exam format and availability should always be confirmed with OffSec.