OSCP (OSCP+)
OffSec Certified Professional (OSCP and OSCP+) · OffSec
The OSCP is the best-known practical penetration testing certification: during a proctored exam of almost 24 hours you must compromise standalone machines and an Active Directory set, then hand in a professional report. It is the credential most often cited in pentest job ads, in France as internationally. Its strength is that it proves you can actually get in, under time pressure; its limit is the price of the bundle and a format that tests individual technique more than an engagement with a client.
- Exam
- Proctored practical exam of 23 h 45: three standalone machines (60 points) and an Active Directory set of three machines from supplied credentials (40 points). Pass mark 70/100, then 24 h for the report.
- Exam price
- $1,699Exam alone, with two attempts. Course + Cert Bundle (90 days of PEN-200, one attempt): US$1,749. Learn One subscription: US$2,749 a year. Retake: US$249.
- Required experience
- None formally. OffSec recommends solid TCP/IP networking, Windows and Linux administration and basic scripting.
- Validity and maintenance
- OSCP+ is valid 3 years: renew through a recertification exam, a higher OffSec exam or 120 CPE, plus a yearly fee (US$145, or US$299 for the AMP plan). The underlying OSCP never expires.
- Format
- Hands-on
Who is it for?
Juniors aiming for a first pentest job, system administrators and developers switching to offensive security, after preparation on easier labs (eJPT, PNPT or similar).
Domains covered
- Information gathering, enumeration and vulnerability scanning
- Web attacks: XSS, command and SQL injection, directory traversal, file uploads
- Client-side attacks and password attacks
- Antivirus evasion
- Windows and Linux privilege escalation
- Pivoting, tunnelling and lateral movement
- Active Directory enumeration, authentication attacks and lateral movement
- AWS cloud infrastructure enumeration and exploitation
- Professional reporting (required for the exam)
Nestor’s take
Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.
The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.
