OSEP (PEN-300) Certification Training Course

• Advanced offensive techniques and tool development
  • Learn when to use common frameworks such as Metasploit and when to build custom toolchains or exploits tailored to the target environment.
• Client-side attacks and social engineering
  • Design and execute convincing client-side vectors that compromise users and applications, including advanced phishing methods.
• EDR and AV evasi
  • Master advanced antivirus evasion tactics, detection avoidance strategies, process migration, and in-memory payload delivery techniques.
• Privilege escalation and lateral movement
  • Chain exploits to escalate privileges on Windows and Linux hosts, leverage Active Directory weaknesses, and reduce exposure created by a single misconfiguration or vulnerability. Learners will also develop vulnerability assessment skills to identify and prioritize weaknesses across enterprise environments.
• Advanced Windows offensive tradecraft
  • Cover Windows-specific techniques such as credential harvesting, exploitation of administrative groups, persistence mechanisms, reflection-based stealth techniques, and executing staged payloads directly in memory.
• Application exploitation
  • Find and exploit weaknesses in modern application stacks, including Java and JavaScript components, and craft reliable attack vectors against web and enterprise applications. Learners will perform realistic penetration tests that simulate modern enterprise attack scenarios.
• Maintaining access and post-exploitation
  • Implement advanced methods for persistence, data exfiltration, and long-term control while minimizing detection risk and protecting sensitive data across enterprise systems and applications.

The PEN-300 training is ideal for:

• Experienced Penetration Testers and security professionals
• Those seeking to master advanced penetration testing methodologies
• Existing OSCP+ certification holders

• Working familiarity with Kali Linux and the Linux command line.
• Solid ability in the enumeration of targets to identify vulnerabilities.
• Basic scripting abilities in Bash, Python, and PowerShell.
• Ability to identify and exploit vulnerabilities like SQL injection, file inclusion, and local privilege escalation.
• Foundational understanding of Active Directory and knowledge of basic AD attacks.
• Familiarity of C# programming is a plus for this course.
• Completion of PEN-200 and passing OSCP+ is highly recommended.

• Develop advanced penetration testing skills to assess and compromise modern enterprise environments.
• Learn how to bypass endpoint protection mechanisms, including EDR and antivirus solutions, using advanced evasion techniques.
• Gain hands-on experience in Active Directory exploitation, privilege escalation, lateral movement, and persistence techniques.
• Understand and apply advanced client-side attack techniques, phishing simulations, and social engineering methodologies.
• Build custom offensive tooling and modify payloads to evade modern defensive controls.
• Master post-exploitation strategies across Windows and Linux systems in enterprise networks.
• Apply living-off-the-land techniques and stealth operations to minimize detection during engagements.