OffSec · Advanced
OffSec OSCP study guide
Exam domains and weights, what to study first, and the jobs asking for OffSec OSCP right now.
Exam domains and weights
How to study for OffSec OSCP
- Start with Active Directory Attacks. It is about 25% of the exam.
- Then Enumeration and Information Gathering (20%).
- Then Web Application Attacks (20%).
- Take a practice exam, find your weakest domain, and study that next. Repeat until you score comfortably above the pass mark.
Jobs that ask for OffSec OSCP
Create a free account to see how well each one matches you.
Track your OffSec OSCP progress
A free domain-by-domain checklist, matching jobs and a study group.
Create a free accountFrequently asked questions
What is on the OffSec OSCP exam?
OffSec OSCP (PEN-200) covers 5 domains: Active Directory Attacks (25%), Enumeration and Information Gathering (20%), Web Application Attacks (20%), Linux and Windows Privilege Escalation (20%), Exploit Modification, Pivoting and Tunneling (15%).
Which OffSec OSCP domain should I study first?
Active Directory Attacks carries the most weight at about 25% of the exam, so it earns the most study time. Then work down the list by weight and spend extra time on any domain where your practice scores are low.
What level is OffSec OSCP?
OffSec OSCP is an advanced-level certification from OffSec.
Are there jobs that ask for OffSec OSCP?
Yes. ReconHire currently lists postings that mention OffSec OSCP, such as Security Engineer, Cloud at Vercel; Channel Sales Engineer, Singapore at Horizon3.ai; Engineering Manager, Security (Cloud, Infrastructure & Application Security) at Replit.
Can I practice for OffSec OSCP for free?
ReconHire's cert tracker is free: it gives you a domain-by-domain study checklist and shows jobs that ask for OffSec OSCP.