Offensive Security Certified Professional
OffSec logo

Offensive Security Certified Professional

OSCP

Master the art of penetration testing with the industry-standard OSCP certification, focusing on hands-on exploitation, vulnerability assessment, and advanced Active Directory attack methodologies.

Exam syllabus, organized by domain

Try a real question

Sample Offensive Security Certified Professional exam question

Answer this question the same way you would on exam day. No sign-up needed — one random question, three tries to swap it out.

MasterPrivilege Escalation

In a penetration test, an automated scan finds no vulnerability in a PHP application where the 'template' parameter is used unsafely in an include operation. You suspect an LFI-to-RCE chain that can give you a foothold as the web server user, after which local privilege escalation is required. Which approach best reflects manual verification, contextual payload selection, and the OSCP mindset?

Frequently asked questions

Key facts about the Offensive Security Certified Professional certification and how to prepare for it.

Skills & Requirements

What you need to know before attempting the Offensive Security Certified Professional exam.