Where teams start
Most Popular Offsec Certifications
Most teams assign PEN-100 first. It sets a baseline in Kali, Linux and Windows command lines, networking, and Metasploit, so staff are ready for Expert-level PEN-200 work in privilege escalation and Active Directory attacks.
PEN-100
PEN-100: Network Penetration Testing Essentials is foundational OffSec training for aspiring ethical hackers. Learn Linux and Windows command line, network protocols, scripting with Bash and Python, and explore essential security tools like Nmap, Kali Linux, and Metasploit. Build a strong ethical hacking mindset with hands-on practice in reconnaissance, exploitation, and post-exploitation techniques. Perfect for beginners looking to start a cybersecurity career.
Erik Choron
OSCP PEN-200
Security teams that rely on outside contractors or annual audits to find exploitable weaknesses often learn about them too late. This advanced PEN-200 course helps IT Directors build an internal penetration testing capability, so teams can validate vulnerability findings in controlled, authorized environments before they turn into incidents or audit findings. Built for security engineers, IT practitioners moving into offensive security, and Team Leads standing up a red-team function, the course follows a practical testing workflow. It starts with reconnaissance and scanning using Nmap, Nessus, OpenVAS, and passive discovery. It then moves through web application assessment with Burp Suite, Metasploit exploitation and post-exploitation, password attacks, Windows and Linux enumeration, tunneling, and antivirus evasion concepts. Trainer Erik Choron covers the topics that support OSCP+ preparation. The course runs about 37 hours across 46 skills. Training Managers should plan roughly a full training week per learner, plus extra practice time for certification readiness. Assign the course within clear rules of engagement, use Playlists to sequence the rollout, and use Team Reporting to track per-learner progress and completion. To see how it fits your team plan, Book a Demo.
Erik Choron
Recently added
Newest Releases
The latest Offsec training added to the catalog — new courses land here within a day of publication.
Frequently asked questions about Offsec training
Common questions IT directors ask when evaluating Offsec training for their team.
Which roles and experience levels do the OffSec courses serve?
PEN-100 suits entry-level security staff and help desk or network admins moving toward security roles. PEN-200 is Expert-level content for security analysts, blue team members moving into red team work, and professionals building advanced penetration testing skills.
How should a Training Manager sequence a team through the OffSec courses?
Start with PEN-100 to standardize baseline knowledge across Kali setup, Linux and Windows command lines, networking, scripting, Metasploit, cryptography, web applications, and Active Directory concepts. Then assign PEN-200 to staff who are comfortable with those fundamentals and ready for reconnaissance, vulnerability scanning, exploitation, privilege escalation, and tunneling.
How much time should we plan per learner?
PEN-100 runs about 14 hours, 18 minutes of video, which fits within a typical onboarding window for new security staff. PEN-200 is deeper Expert-level material, so plan additional time for learners moving on to it.
Which tools will our team practice with?
The courses work with Kali, Nmap, Wireshark, Metasploit, PowerShell, Bash, and Python, and PEN-200 adds Nessus, OpenVAS, and Burp Suite for vulnerability scanning and web application testing of XSS, directory traversal, file inclusion, and command injection.
Does the training cover how to report findings to leadership?
Yes. PEN-200 teaches teams to report findings in executive summaries that non-technical leadership can act on, so offensive testing results translate into decisions about risk and remediation.
How do we track team progress and document completion?
Team reporting shows per-learner progress and completion, cohort and group views, and completion exports for audit evidence. That gives an IT Director one place to assign OffSec training and confirm who has finished each course.