Offensive Security Certified Professional OSCP
The OSCP (Offensive Security Certified Professional) is a certification in offensive security (pentesting) issued by Offensive Security, a major player in the field of cybersecurity, notably responsible for projects such as Kali Linux, Exploit Database, and Google Hacking Database. The OSCP validates the skills acquired during the PWK (Penetration Testing with Kali) training.
One of the main advantages of this training is access to a practical lab simulating a real corporate network. Unlike certifications based solely on multiple-choice questionnaires, the OSCP emphasizes practice and covers all stages of a penetration test. The enumeration phase is a crucial element of the methodology: Enumerate, enumerate, enumerate!
Fingerprinting is indeed a fundamental step on which participants must focus their efforts. The OSCP is also recognized for its active community that promotes mutual assistance through various exchange spaces.
The training includes:
A course material of about 375 pages
About 150 videos lasting from 2 to 10 minutes
A practical lab allowing practice in realistic conditions
The lab consists of four networks:
Student Network
Development Network
IT Network
Admin Network
Participants will need to:
List the machines and services (DNS, domain controllers, web applications, vulnerabilities, etc.)
Obtain initial user access
Perform privilege escalation to gain administrator rights (root or SYSTEM)
Implement post-exploitation techniques
Perform pivoting between different networks
Bypass certain protections such as antivirus and firewalls
The lab has a balanced number of Windows and Linux systems. The exploits used are primarily referenced in the Exploit Database and can be searched using the command line tool searchsploit.
Regarding the exploits:
Some work directly
Others require adaptations to match the target, integrate a custom payload, or bypass certain protections
The training also covers the basics of buffer overflow attacks through practical exercises on executables that do not have DEP or ASLR protections.
The lab can be extended before its expiration to continue exercises and best prepare for the 24-hour final exam.