☁️ OSCP (PEN-200) - Exam-Prep

For aspiring penetration testers preparing for OffSec's 24-hour hands-on OSCP exam: master enumeration, exploitation, privilege escalation, and Active Directory attacks end-to-end. The course is organized into 13 modules, ending with a final exam (pass mark 70%). It is independent, free exam-preparation training — not an official or accredited review course.

What you'll learn

• Penetration Testing Methodology & Report Writing
• Information Gathering: Passive & Active Enumeration
• Web Application Attacks: SQLi, XSS, Command Injection, Traversal & File Uploads
• Locating, Fixing & Using Public Exploits
• Common Services Enumeration & Exploitation: SMB, FTP, SSH, SNMP
• Password Attacks & Cracking
• Client-Side Attacks
• Linux Privilege Escalation
• Windows Privilege Escalation
• Antivirus Evasion
• Port Redirection, Tunneling & Pivoting
• Active Directory Enumeration & Attacks
• The OSCP Exam: Standalone Machines & the Active Directory Set Methodology

Learning objectives

• Build a methodical penetration testing workflow: passive and active information gathering, enumeration, and scoping.
• Discover and exploit common web application vulnerabilities (SQL injection, XSS, command injection, directory traversal, file uploads).
• Identify network services, locate public exploits, and adapt/fix exploit code to gain initial access.
• Perform Linux and Windows privilege escalation through systematic local enumeration.
• Conduct full Active Directory attacks: enumeration, lateral movement, and domain compromise.
• Apply password attacks, client-side attacks, and antivirus evasion techniques.
• Use port redirection, tunneling, and pivoting to reach internal hosts.
• Document findings and produce a professional, exam-quality penetration test report.