PEN-200 · OSCP · For individual practitioners
PEN-200: what the course covers - and what we add.
PEN-200 is OffSec's foundational course and leads to the OSCP certification. It covers enumeration, web and service exploitation, privilege escalation on Linux and Windows, and Active Directory fundamentals, and ends in a hands-on lab exam.
Who it is for
People entering or moving into penetration testing, plus admins who need to understand the attacker side.
Course content (official scope)
- →Enumeration and information gathering
- →Web exploitation basics
- →Privilege escalation on Linux/Windows
- →Active Directory fundamentals
- →Reporting and exam preparation
Course content, labs and the OSCP exam are provided by OffSec. The official course description always takes precedence. This page reviewed: 2026-08-07.
What Exploit Labs adds
- +Mentoring in German or English by practising operators
- +A study plan and checkpoints instead of pure self-study
- +Procurement and invoicing in EUR through a German entity
For security teams
Multiple people, role paths, reporting and procurement run through OffSec Learn Enterprise.
See Learn EnterpriseFor individual practitioners
Individual licence, access duration, exam attempts and preparation - start here.
See OSCP licences