[{"id":67463,"name":"Brian McKay","profession":"Computer Scientist","body":"

The OSCP journey taught me to think like an attacker—a critical skill for defending sensitive assets in today’s cybersecurity landscape, and I’m excited to apply these skills in my career. I highly recommend OffSec's rigorous training to anyone looking to elevate their penetration testing expertise or security skills in general. WEB-200 next!

\n","review_topics":[{"id":1269,"name":"PEN-200/OSCP+","slug":"pen-200-oscp"}]},{"id":67462,"name":"Pham Ngoc Loi","profession":"Cybersecurity Consultant","body":"

I'm thrilled to have obtained the OSCP certification, marking a significant accomplishment in my cybersecurity journey.

OffSec's exceptional training materials, hands-on labs, and challenging exercises play an important role in honing my practical skills and application of the acquired knowledge in real-world penetration testing engagements.

\n","review_topics":[{"id":1269,"name":"PEN-200/OSCP+","slug":"pen-200-oscp"}]},{"id":67412,"name":"Anonymous Learner","profession":"","body":"

My journey has taken me through the intricacies of reverse engineering, crafting custom shellcode... I'm grateful for my dedication and curiosity about cybersecurity, and the resilience I've developed along the way.

\n","review_topics":[{"id":1273,"name":"EXP-301/OSED","slug":"exp-301-osed"}]},{"id":67411,"name":"Andy Olchawa","profession":"Offensive Security Professional","body":"

The challenges were far from easy, and it was evident that their intention was to evaluate not only technical skills but also the ability to think outside the box. Also, awesome experience, lots of fun!

\n","review_topics":[{"id":1271,"name":"WEB-200/OSWA","slug":"web-200-oswa"}]},{"id":67410,"name":"Discord community member","profession":"","body":"

The way it's all presented, and the fact that there are VMs you can start that let us break the problem into smaller problems... makes for a very pleasant learning experience.

\n","review_topics":[{"id":1271,"name":"WEB-200/OSWA","slug":"web-200-oswa"}]},{"id":67409,"name":"Alex Caughey","profession":"Security Engineer","body":"

I would 100% recommend this course to anyone seeking a broad and thorough technical understanding of many fundamental pentest concepts and practices, all delivered through a hands-on, well structured and complete lab environment.

\n","review_topics":[{"id":1269,"name":"PEN-200/OSCP+","slug":"pen-200-oscp"}]},{"id":67408,"name":"John Hammond","profession":"Cybersecurity Researcher","body":"","review_topics":[{"id":1267,"name":"General OffSec Review","slug":"general-offsec-review"}]},{"id":67407,"name":"Rana Khalil","profession":"Application Security/Training Lead","body":"","review_topics":[{"id":1267,"name":"General OffSec Review","slug":"general-offsec-review"}]},{"id":67405,"name":"Milton Valencia","profession":"Red Teamer","body":"","review_topics":[{"id":1267,"name":"General OffSec Review","slug":"general-offsec-review"}]},{"id":67400,"name":"Ygor Bittencourt","profession":"Offensive Security Leader","body":"

Try Harder is a reminder that the challenges you encounter, whether while preparing for certifications like OSCP, OSCE3, or in your daily cybersecurity work, require continuous effort and determination to solve.
\nIt's about:
\n- Not giving up easily: Answers are often not obvious and require creativity and persistence.
\n- Embracing discomfort: Real learning happens outside of your comfort zone, tackling problems that seem unsolvable.

\n","review_topics":[{"id":1267,"name":"General OffSec Review","slug":"general-offsec-review"}]},{"id":67403,"name":"Sandra Lu","profession":"Cybersecurity Practitioner","body":"","review_topics":[{"id":1268,"name":"SEC-100/OSCC","slug":"sec-100-oscc"}]},{"id":67401,"name":"David Bombal","profession":"Cisco Certified Systems Instructor","body":"","review_topics":[{"id":1268,"name":"SEC-100/OSCC","slug":"sec-100-oscc"}]},{"id":67399,"name":"Wumbobfusation","profession":"Discord community member","body":"

I’ve said it before and I’ll say it again— this Discord/Admin system is the best support I’ve ever received in any class, including ones from conferences, private providers, and SANS.

\n","review_topics":[{"id":1267,"name":"General OffSec Review","slug":"general-offsec-review"}]},{"id":67397,"name":"Paul Werther","profession":"CTO & Instructor Hacking Team","body":"

The OSCP is one of the best-known pentesting certifications around. It requires complete, practical hacking skills— not a multiple choice test, but a real attack simulation in a fictitious company's infrastructure. It really doesn't get anymore practical than this.

\n","review_topics":[{"id":1269,"name":"PEN-200/OSCP+","slug":"pen-200-oscp"}]},{"id":67402,"name":"Day Johnson","profession":"Security Engineer","body":"","review_topics":[{"id":1276,"name":"TH-200/OSTH","slug":"th-200-osth"}]},{"id":67371,"name":"Jorge Giménez Duro","profession":"Security Researcher","body":"

Finally OSED! After 36 hours of no sleep I finally succeed. This is, by far, the most challenging (and fun) exam of Offensive Security I have done so far, but It was worth the time; the content is extremely well structured :)

\n","review_topics":[{"id":1273,"name":"EXP-301/OSED","slug":"exp-301-osed"}]},{"id":67372,"name":"Dani R.","profession":"Threat Intelligence Analysis, QuoIntelligence","body":"

The OSED journey has been 3 months of intense sweat, tears, but overall much fun and learning. Everything that I learned will be helpful in my malware reverse engineering path. I want to thank...the great community in Discord, where there were always people happy to help you think and understand.

\n","review_topics":[{"id":1273,"name":"EXP-301/OSED","slug":"exp-301-osed"}]},{"id":67386,"name":"Adam Davies","profession":"","body":"

This Threat Hunting Essentials LP is pretty good and I have been through the Crowdstrike training before and this access to Crowdstrike in the last section here is really nice for student. To be able to use CS and RTR is pretty cool and should peak the interest of students. This content is good. Whoever put this together, great job.

\n","review_topics":[{"id":1279,"name":"Threat Hunting Essentials LP","slug":"threat-hunting-essentials-lp"}]},{"id":67385,"name":"Enterprise Customer","profession":"","body":"

our interns and junior engineers are really enjoying it, the pace is just right with it being slower in the beginning to get people comfortable and them getting more intense as it goes along and it's really preparing them for PEN-200.

\n","review_topics":[{"id":1278,"name":"Learn Fundamentals","slug":"learn-fundamentals"}]},{"id":67384,"name":"Stephen Lane","profession":"","body":"

Because I came from a non-technical background, I knew I needed additional training on the fundamentals...PEN-100...got me familiar with the basics like networking, web, Linux.
\nAs someone who is coming into the offensive side of things, that really pays off. [Learning] Scripting was a huge bonus for me, since I don't have a programming background.

\n","review_topics":[{"id":1278,"name":"Learn Fundamentals","slug":"learn-fundamentals"}]},{"id":67383,"name":"Aaron Gray","profession":"","body":"

I took this exam after purchasing the Learn One course...and I'd thoroughly recommend anyone who is intending to dip their toes into penetration testing to consider the subscription courses provided by OffSec. Having the time to work through the material while balancing work and family was key to my success here, and the support and guidance provided by OffSec in the creation of my pentesting methodology was crucial to my passing mark in the exam.

\n","review_topics":[{"id":1265,"name":"Learn One","slug":"learn-one"}]},{"id":67382,"name":"Stephen Lane","profession":"","body":"

The options that I saw with it intrigued me...because I was not coming from a technical background. I knew I needed some sort of additional training [for] the fundamentals. That's where I saw PEN-100...it got you familiar with the basics [like] networking, web fundamentals...the Linux kernel.

That has drastically helped me in the PEN-200 course. I think for someone who is coming into the offensive security side of things, it really pays off...that exposure and the hands-on lab that comes with PEN-100 and PEN-200.

\n","review_topics":[{"id":1265,"name":"Learn One","slug":"learn-one"}]},{"id":67381,"name":"Musab Kharabsheh","profession":"","body":"

As a Learn One Student, I gained extremely robust knowledge after finishing the 100-levels; this level's benefits are Countless. It's recommended to everyone. Thanks to Offensive Security for this gamify fun course.

\n","review_topics":[{"id":1265,"name":"Learn One","slug":"learn-one"}]},{"id":67380,"name":"KCGregor","profession":"","body":"

The new OSCP 2.0 course work has been a vast improvement over the first series. I found the topics have been updated to more modern attack scenarios. The active directory portions in particular are highly relevant to modern attacks such as AD-CS privilege escalation.
\nTo me the Learn One membership really has allowed me to focus more on studying and stress less about the time crunch of monthly lab blocks. It lets me focus on my non-work life and the OSCP.
\nDiscord really is a helpful place. The methodology of \"Try Harder\" still exists but Offensive Security is really helping to reduce the hurdles of the exam. Plus it provides a great spot to network within the industry.
\nI chose the OSCP due to its recognition in the industry and also because I truly believe their new approach is a solution that is great for the community as well as their company. With my new job I actually no longer have a requirement to get the OSCP. However, I am staying the course and want to obtain it by this fall as I believe in the Offensive Security vision, and would love having my OSCP badge of honor!

\n","review_topics":[{"id":1265,"name":"Learn One","slug":"learn-one"},{"id":1269,"name":"PEN-200/OSCP+","slug":"pen-200-oscp"}]},{"id":67379,"name":"Eugene Lim","profession":"","body":"

I'm delighted to pass the Offensive Security Exploit Development course, and in so doing, achieved the Offensive Security Certified Expert (OSCE3)! OSCE3 holders must have passed all three of Offensive Security's 300-level courses: Windows User Mode Exploit Development (EXP-301), Evasion Techniques and Breaching Defenses (PEN-300), and Advanced Web Attacks and Exploitation (WEB-300).

This was the hardest exam I've taken so far. It was truly a beast of a challenge but it demonstrated all the hallmarks of the OffSec \"try harder\" rigour. On to the next!

\n","review_topics":[{"id":1277,"name":"OSCE3","slug":"osce3"}]},{"id":67373,"name":"cr7pt0pl4gu3","profession":"","body":"

I'm happy to announce that I've achieved the #OSMR certification!
\nSpecial thanks to @offsectraining and @theevilbit for arguably the best certification in the macOS infosec field.

\n","review_topics":[{"id":1274,"name":"EXP-312/OSMR","slug":"exp-312-osmr"}]},{"id":67370,"name":"Ronald Ocubillo","profession":"","body":"

It was so tough that you have to combine everything taught in the course: stack/SEH overflow, reverse engineering, custom shellcode, egghunter, ASLR/DEP bypass, and custom ROP chains. That was a challenge that kept me awake for 48 hours with almost no sleep but it's all worth it.

\n","review_topics":[{"id":1273,"name":"EXP-301/OSED","slug":"exp-301-osed"}]},{"id":67369,"name":"Xiaofan Zhang","profession":"","body":"

My journey has taken me through the intricacies of reverse engineering, crafting custom shellcode, and tackling complex topics such as stack overflow, SEH Overflow, DEP and ASLR bypass, etc. What an amazing journey it's been—grueling yet thrilling in equal measure.

\n","review_topics":[{"id":1273,"name":"EXP-301/OSED","slug":"exp-301-osed"}]},{"id":67368,"name":"Donavan Cheah","profession":"Senior Cybersecurity Consultant","body":"

Despite the large variances in extra miles, I recommend doing them. Some extra miles encourage the student to perform self-initiated research, often leading into new peripheral learning journeys.

\n","review_topics":[{"id":1272,"name":"WEB-300/OSWE","slug":"web-300-oswe"}]},{"id":67367,"name":"Khalil Abdul-Karym Thiero","profession":"Cybersecurity Consultant","body":"

As always, Offensive Security did a great job. The course and the exam were well designed.

I highly recommend it for developers and also for anyone doing audits in white box mode.

Next OSED.

OSCE3, i'm coming...

\n","review_topics":[{"id":1267,"name":"General OffSec Review","slug":"general-offsec-review"},{"id":1272,"name":"WEB-300/OSWE","slug":"web-300-oswe"}]},{"id":67366,"name":"Stepan Sojka","profession":"Full Stack Developer - Ryanair","body":"

I am happy to announce that I passed OffSec's (in)famous 48-hour long exam and obtained the Offensive Security Web Expert (OSWE) certification.

It is an excellent course. I'd recommend this to any full-stack developer who wants to get better at what they do.

Thanks for a great course, Offensive Security!

\n","review_topics":[{"id":1272,"name":"WEB-300/OSWE","slug":"web-300-oswe"}]},{"id":67365,"name":"Daniel José P.","profession":"Senior Cyber Controls Officer","body":"

I was able to use my dev background and combine it with everything I've been learning since I began with this dream a year ago. I spent countless hours studying, trying to absorb so many concepts, tools, strategies, techniques.What a ride so far.

\n","review_topics":[{"id":1272,"name":"WEB-300/OSWE","slug":"web-300-oswe"}]},{"id":67360,"name":"Randy Becker","profession":"Principle Security Architect - Blue Mantis","body":"

I’ve been able to utilize what I learned in the course to develop innovative approaches, especially in dealing with the most advanced EDR/XDR/MDR solutions available today.

\n","review_topics":[{"id":1270,"name":"PEN-300/OSEP","slug":"pen-300-osep"}]},{"id":67359,"name":"Nullg0re","profession":"Penetration Tester","body":"

I can take the skills taught in this course and immediately apply it to my day job.This course does a very impressive and consistent job of starting with theory and then diving into practical application of that theory.

\n","review_topics":[{"id":1270,"name":"PEN-300/OSEP","slug":"pen-300-osep"}]},{"id":67358,"name":"J3rryBl4nks","profession":"Information Security Engineer","body":"

I have already been able to apply the fundamentals learned in PEN-300 in my day-to-day work and have increased my skillset in a meaningful way.

\n","review_topics":[{"id":1270,"name":"PEN-300/OSEP","slug":"pen-300-osep"}]},{"id":67357,"name":"Andreea I.","profession":"Senior Security Specialist","body":"

My favorite course, going beyond execution of existing tools to developing them! Besides the top-notch Active Directory and evasion content, this course is a treasure trove for offensive C# development and getting started with Win32 APIs.

\n","review_topics":[{"id":1270,"name":"PEN-300/OSEP","slug":"pen-300-osep"}]},{"id":67340,"name":"Denis Kucinic","profession":"VP of Operations - Packetlabs","body":"

There aren't many others offering this exam format. It's engaging and challenging, which is great to have, and shows that the quality of the content is good - it really does separate the passion from the hobby.

\n","review_topics":[{"id":1267,"name":"General OffSec Review","slug":"general-offsec-review"}]},{"id":67389,"name":"Dennis Barnekow","profession":"Penetration Tester","body":"

Looking back, this experience taught me more than just technical skills. I learned a lot about my body, my emotions, and the importance of strategic breaks. The OSCP is not just a test of hacking skills, it's a mental and physical endurance challenge for me.

\n","review_topics":[{"id":1269,"name":"PEN-200/OSCP+","slug":"pen-200-oscp"}]},{"id":67387,"name":"Stephen G.","profession":"Pentester","body":"

The OSCP+ does not just test your technical skills. It pushes your ability to focus under pressure, to stay disciplined, and to know when to push forward and when to step back and reassess.

This was as much a mental game as a technical one. Grateful for the journey and the growth.

\n","review_topics":[{"id":1269,"name":"PEN-200/OSCP+","slug":"pen-200-oscp"}]},{"id":67378,"name":"Forrest Connelly","profession":"Cyber Threat Hunter","body":"

Excited to share that I've successfully passed OffSec's brand-new Threat Hunter (OSTH) exam! The exam was an 8-hour hands-on challenge, followed by a report on my findings, which were both graded by OffSec. I had a great time with the course, working with Splunk, CrowdStrike Falcon, and Wireshark. Big thanks to the team for creating such an awesome experience!

\n","review_topics":[{"id":1276,"name":"TH-200/OSTH","slug":"th-200-osth"}]},{"id":67329,"name":"Tucker Weibell","profession":"Security Engineer","body":"

Just wrapped up the PG Clue machine. This machine was a beast...rated VERY HARD. Took me just under 3 hours to root the system. Definitely chased a good number of rabbit holes on this one. Root was a sweet sweet relief.

\n","review_topics":[{"id":1266,"name":"PG Practice","slug":"pg-practice"}]},{"id":67341,"name":"Forrest Connelly","profession":"Cyber Threat Hunter","body":"

Getting through SEC-100 course was absolutely fantastic material and the content I wish I was able to consume when I first began diving into information security. Great work to the team that worked on it! 👏🏼

\n","review_topics":[{"id":1268,"name":"SEC-100/OSCC","slug":"sec-100-oscc"}]},{"id":67376,"name":"Yusuf Efil ","profession":"SOC Analyst","body":"

It's been quite a journey and hard work, in truth, but I have finally made it. The intensive training and challenging examination of this course endowed me with advanced skills to detect, analyze, and mitigate threats in a manner that enhances our ability to protect and defend organizational assets against cyber threats.

\n","review_topics":[{"id":1275,"name":"SOC-200/OSDA","slug":"soc-200-osda"}]},{"id":67361,"name":"Anaïs Dehandschutter","profession":"Penetration Tester","body":"

Thank you OffSec for the thrilling challenges. Some of these machines really made me question my sanity. This 24-hour exam proved that web hacking can really be tricky and difficult.

\n","review_topics":[{"id":1271,"name":"WEB-200/OSWA","slug":"web-200-oswa"}]},{"id":67345,"name":"Luca Demers","profession":"Offensive Security Engineer","body":"

This achievement stands as a testament to sustained effort and perseverance. The long hours, the challenges, and the relentless pursuit of excellence have sharpened my skills and expanded my ability to innovate and solve problems.

\n","review_topics":[{"id":1270,"name":"PEN-300/OSEP","slug":"pen-300-osep"}]},{"id":67356,"name":"Omry Zur","profession":"Cyber Security Researcher - Israeli Ministry of Defense","body":"

3 months of material, lots of material! And within them are the labs that I sat for weeks, but there is no doubt that the knowledge I gained during the training will accompany me later in my career.

\n","review_topics":[{"id":1270,"name":"PEN-300/OSEP","slug":"pen-300-osep"}]},{"id":67355,"name":"Chris Magowan","profession":"Cybersecurity Professional","body":"

PEN-300 was awesome. It's packed with tons of great content and labs that really help reinforce what's taught in the course.

\n","review_topics":[{"id":1270,"name":"PEN-300/OSEP","slug":"pen-300-osep"}]},{"id":67374,"name":"Malek Ezzar","profession":"Cyber Security Consultant","body":"

I gained expertise in using SIEM tools for monitoring and analyzing security events. My training covered threat hunting, advanced log analysis, and defensive techniques for system protection. Additionally, I learned about hacker tactics, enabling me to anticipate and counter threats.

\n","review_topics":[{"id":1275,"name":"SOC-200/OSDA","slug":"soc-200-osda"}]},{"id":67342,"name":"Douglas Costa","profession":" Cyber Threat Intelligence and Digital Forensics","body":"

It was a significant challenge tackling target identification and enumeration, executing privilege escalation and exploring AD. This certification reinforced my ability to think creatively, manage time and resources effectively, and persist through complex challenges.

\n","review_topics":[{"id":1269,"name":"PEN-200/OSCP+","slug":"pen-200-oscp"}]},{"id":67344,"name":"Ludwig Schober","profession":"Junior IT Security Engineer","body":"

Balancing my day job while preparing for the exam was a big challenge, but I managed to push through and succeed. The \"try harder\" mentality fits the OSCP journey very well—not because it's impossible, but because it demands persistence and the refusal to give up.

\n","review_topics":[{"id":1269,"name":"PEN-200/OSCP+","slug":"pen-200-oscp"}]},{"id":67363,"name":"DeAnne Roseen","profession":"Product Security Engineer III","body":"

I am officially OSWE-certified. So grateful to have had the opportunity to train for, take, and pass this certification. It was a fun one, and I'm happy to say it sharpened my skills as an AppSec engineer.

\n","review_topics":[{"id":1272,"name":"WEB-300/OSWE","slug":"web-300-oswe"}]},{"id":67350,"name":"Leonardo Corrêa Damasceno","profession":"Pentester","body":"

This was an arduous journey for which I prepared every day, and upon achieving the highest result in the exam, there were no doubts about the learning. This experience and the skills acquired are invaluable and were enhanced by the support of everyone who accompanied me on this journey.

\n","review_topics":[{"id":1270,"name":"PEN-300/OSEP","slug":"pen-300-osep"}]}]

WEB-300: Advanced Web Attacks and Exploitation (OSWE)

Details