How long until I pass OSCP?

Realistically three to six months at ten to fifteen hours a week, depending on your background.

How many exam attempts are included?

The Course + Cert Bundle includes one, Learn One includes two. Extra attempts can be purchased.

Can I get a company invoice?

Yes. XPLT invoices in EUR through a German entity, with VAT shown.

PEN-200 · OSCP · Attack · Intermediate

PEN-200: Penetration Testing with Kali Linux - on the way to OSCP.

PEN-200 is OffSec's foundational course leading to the OSCP certification: enumeration, web and service exploitation, privilege escalation on Linux and Windows and Active Directory fundamentals, ending in a 24-hour practical exam.

See licences & pricing Ask for guidance Official OffSec course page One-pager (PDF)

Certification: OSCP - OffSec Certified Professional
Level: Intermediate
Discipline: Attack
Audience: For individual practitioners

Who this course is for

People entering or moving into penetration testing, plus admins who need to understand the attacker side.

Not the right course yet if

-You are still uneasy on the Linux command line - start with SEC-100
-You have less than 10 hours a week to study

What you can do afterwards

→Independently enumerate a network and prioritise attack surface
→Reliably exploit known weaknesses instead of only scanning
→Escalate privileges on Linux and Windows and move laterally
→Write a pentest report that survives review

Prerequisites

·Solid TCP/IP and networking knowledge
·Linux and Windows administration at the command line
·Basic Bash or Python

Not sure whether you meet them? We run a short placement conversation before you buy.

Course content (official scope)

What PEN-200 covers.

Enumeration and information gathering
Web exploitation basics
Privilege escalation on Linux/Windows
Active Directory fundamentals
Reporting and exam preparation

Course content, labs and the OSCP exam are provided by OffSec. Precedence always sits with the official course description. This page reviewed: 2026-08-12.