Cybersecurity Guide

A deep dive on the OSCP certification aka the Offensive Security Certified Professional

Written by Steven Bowcut – Last updated:

In this guide

We don’t just talk about security—we break it ethically.

The Offensive Security Certified Professional (OSCP) is the cybersecurity industry’s definitive statement on hands-on practical skills.

This rigorous credential from Offensive Security (OffSec) is not based on multiple-choice questions; it’s earned only by those who can successfully exploit and document the compromise of a live network. Holding the OSCP means you possess proven, tangible abilities in ethical hacking and penetration testing.

It’s a respected multi-dimensional certification for InfoSec professionals. In preparation for the exam, candidates learn and demonstrate penetration testing skills alongside sound concepts of cyber defense. 

Get started in offensive security with a certification in ethical hacking
Sponsored Listings

Becoming an OSCP establishes that you will be a valuable security team member because you have practical knowledge of attack methods used against infrastructure, systems, and devices.

OSCPs are generally well-versed in identifying known and unknown vulnerabilities, including configuration mistakes. 

What is an OSCP/OSCP+ certification? 

OSCP is an ethical hacking certification offered by Offensive Security (OffSec). Holding this certification validates a professional’s knowledge of penetration testing methodologies using tools inherent in the Kali Linux distribution.

Kali is an open-source, Debian-based Linux distribution that enables security and IT professionals to assess the security of their systems.

Hiring cybersecurity professionals who have the knowledge required to deploy malicious hacker tools and methods is especially valuable to any security team.

Intimate knowledge of the offensive strategies likely to be used against their systems is vital to building an effective defense.  

Holding an OSCP certification indicates the holder has acquired essential skills required to work in any of the following roles, among others:

The growing acceptance within the security industry of offensive security certifications reinforces the belief that ethical hacking is a respectable profession, not just a practical ability. This acceptance has created a demand for the subset of computer and network skills once pursued only by malicious actors. 

How does an OSCP differ from a CEH certification?

There are currently two prevalent penetration testing certifications available: the Certified Ethical Hacker (CEH) and the OSCP/. Each fills a unique role in the cybersecurity industry, although jobs requiring one of these certifications will often accept either. 

Individuals holding a CEH certification are qualified from a vendor-neutral perspective. The CEH validates its ability to think and act like malicious hackers.

This certification is suited for non-penetration testers and people who lack detailed security knowledge, as it focuses less on hands-on labs and is considered more of an entry-level certification than is the OSCP. 

To validate information security professionals who are equipped with the necessary skills and knowledge required in a specialized information security domain that will help them avert a cyber conflict, should the need ever arise.

OSCP candidates should be able to enumerate a machine, identify vulnerabilities, and develop solutions to produce shells. It is fair to say that the OSCP is the gold standard certification for penetration testing.

According to Payscale, the average salary for a CEH is $96k, while an OSCP brings down $103k. 

What are the OSCP/OSCP+ exam requirements?

OffSec’s Penetration Testing with Kali Linux (PWK/PEN-200) course packages include one or more exam attempts. After completing the course, or when the student feels ready, they can sit for the OSCP certification. 

Unlike some professional certifications, there are no educational or work experience prerequisites for taking the OSCP exam.

OffSec suggests that candidates should have a solid understanding of TCP/IP networking, reasonable Windows and Linux administration experience, and be familiar with basic Bash or Python scripting. Candidates take the exam as the concluding portion of the OffSec training course. 

Students or professionals considering an OSCP certification should be problem-solvers and analytical thinkers. OffSec has designed the preparation course and exam to test candidates’ ability to apply critical thinking to problem-solving. 

OSCP/OSCP+ exam information and cost

  • Format: 23 hours and 45 minutes of hands-on hacking, followed by a 24-hour report submission window.
  • Structure: Targets in a live lab environment, typically a mix of stand-alone machines and an Active Directory (AD) set.
  • Passing Score: Minimum of 70 points out of a possible 100 on the targets.
  • Course & Exam Cost: $1,749 (Course & Cert Bundle): Includes 90 days of lab access and one exam attempt.
  • Subscription Cost: $2,749/year (Learn One): Includes one year of course/lab access and two exam attempts.
  • Retake Cost: A standalone retake attempt is approximately $250.

Deep Dive into the PEN-200 Course and OSCP exam

The OSCP test preparation PEN-200 course is unique because it combines traditional course materials with hands-on simulations in a virtual lab environment.

The course covers the following topics:

  • Penetration Testing: What You Should Know
  • Getting Comfortable with Kali Linux
  • Command Line Fun
  • Practical Tools
  • Bash Scripting
  • Passive Information Gathering
  • Active Information Gathering
  • Vulnerability Scanning
  • Web Application Attacks
  • Introduction to Buffer Overflows
  • Windows Buffer Overflows
  • Linux Buffer Overflows
  • Client-Side Attacks
  • Locating Public Exploits
  • Fixing Exploits
  • File Transfers
  • Antivirus Evasion
  • Privilege Escalation
  • Password Attacks
  • Port Redirection and Tunneling
  • Active Directory Attacks
  • The Metasploit Framework
  • PowerShell Empire
  • Assembling the Pieces: Penetration Test Breakdown
  • Trying Harder: The Labs

Certification renewal (OSCP vs. OSCP+)

OffSec introduced a distinction between the original and new certifications to reflect the need for current knowledge.

CertificationValidityRenewal Requirement
Original OSCPValid for Life (Non-expiring)None
OSCP+3 Years (Expires)Requires renewal to maintain the “+” designation.

To renew the OSCP+ designation, you must complete one of the following before the three-year expiration date:

  1. Pass a Qualifying OffSec Exam: Pass a higher-level or parallel OffSec certification exam (e.g., OSEP, OSWA).
  2. Pass the OSCP+ Recertification Exam: Re-take and pass the current OSCP+ exam (cost applies).
  3. Complete the CPE Program: Complete OffSec’s Continuing Professional Education (CPE) program (a points-based system).

If the OSCP+ is not renewed, you lose the “+” designation but retain the original, non-expiring OSCP certification.

OSCP salary information

The average salary for OSCP holders will vary because the certification applies to many security roles across numerous organizational types. Obtaining this certification will qualify a candidate for advancement to higher-paying positions or entitle them to additional pay in their current role. 

With the high demand for experienced cybersecurity professionals in the market today, obtaining an OSCP will open doors for mid-level positions. As a security professional’s career develops, they should consider additional professional certifications. Read more about how to choose the best cybersecurity certifications here. 

According to the job site Indeed, the average salary for cybersecurity professionals in roles that often require or compensate for OSCP certification is as follows:

The Bureau of Labor Statistics indicates that the job outlook for Information Security Analysts is expected to grow 29 percent from 2024 to 2034. This anticipated increase is much faster than the average rate of job growth. 

Frequently asked questions

What is the OSCP certification?

OSCP (Offensive Security Certified Professional) is a hands-on and challenging certification designed for penetration testers and offered by Offensive Security.

Who is the OSCP certification for?

It’s tailored for security professionals wanting to prove their practical skills in penetration testing and ethical hacking.

What are the prerequisites for the OSCP exam?

While there are no strict prerequisites, a solid understanding of networking, Linux, and scripting is beneficial. Many candidates also take the “Penetration Testing with Kali Linux (PWK)” course as preparation.

What sets the OSCP apart from other cybersecurity certs?

OSCP is entirely hands-on, emphasizing real-world skills over theoretical knowledge. It’s known for its challenging exam and practical approach to penetration testing.

Are there any advanced certifications after OSCP?

Yes, Offensive Security offers advanced certifications like OSCE (Offensive Security Certified Expert) and OSEE (Offensive Security Exploitation Expert) for those looking to further hone their skills. The OSCP certification is a rigorous test of one’s practical skills in the realm of ethical hacking and penetration testing. Earning it can be a significant feather in the cap of any cybersecurity professional.

Conclusion

The OSCP certification validates the technical skills needed to execute offensive white hat hacking. For security professionals with an established career in cybersecurity and hands-on hacking experience, becoming an OSCP is an excellent way to demonstrate their skills and expertise. 

Security teams need individuals who can use information-gathering techniques to identify and enumerate targets running various operating systems and services. Analyzing, correcting, modifying, cross-compiling, and porting public exploit code are in-demand skills, and the outlook for growth in these areas is exceptional.

The OffSec PEN-200 test preparation training will equip candidates with the ability to write basic scripts and create automated tools to assist the pen testing process, conduct privilege escalation, and carry out client-side attacks. 

Successful OSCP candidates understand the mechanics of vulnerabilities and think critically about leveraging the vulnerability into code execution. An aptitude for creative problem solving with lateral thinking skills will serve OSCPs well as they contribute to the overall success of their organization’s cybersecurity defense. 

Sources