Advanced Evasion Techniques and Breaching Defenses

Duration

PEN-300: Advanced Evasion Techniques and Breaching Defenses

15 days (e-learning)

Overview

Building on the skills acquired in PEN-200, OffSec’s PEN-300 course explores advanced penetration testing techniques against hardened targets. Learners gain hands-on experience bypassing security defenses and crafting custom exploits in real-world scenarios, enhancing their expertise in ethical hacking and vulnerability assessment.

This self-paced course culminates in a challenging exam, leading to the OffSec Experienced Penetration Tester (OSEP) certification. Achieving the OSEP certification distinguishes professionals with advanced penetration testing skills, making them highly sought-after experts in securing organizations from sophisticated threats.

Benefits

Upon completing PEN-300 and successfully passing the OSEP exam, you’ll have mastered advanced penetration testing skills, including:

• In-depth vulnerability analysis and exploitation
• Custom exploit development
• Bypassing modern security defenses
• Exploiting authentication and authorization flaws
• Attacking Active Directory and cloud environments
• Post-exploitation techniques for maintaining access and escalating privileges

About the exam

• The PEN-300 course and online lab prepares you for the OffSec Experienced Penetration Tester (OSEP) exam
• 48-hour exam
• Proctored

Target Audience

The PEN-300 course is ideal for experienced penetration testers and security professionals seeking to master advanced penetration testing methodologies, ultimately earning the OSEP certification. While completion of PEN-200 (Penetration Testing with Kali Linux) is not a formal prerequisite, it is highly recommended due to the advanced nature of PEN-300.

Prerequisites

While there are no formal certification prerequisites, a strong understanding of operating systems, networking, and scripting (e.g., Python, Bash) is highly recommended. Additionally, familiarity with the concepts and techniques covered in PEN-200 (Penetration Testing with Kali Linux) is highly recommended for success in this course.

Syllabus

• Evasion Techniques and Breaching Defenses: General Course Information
• Operating System and Programming Theory
• Client Side Code Execution With Office
• Client Side Code Execution With Windows Script Host
• Process Injection and Migration
• Introduction to Antivirus Evasion
• Advanced Antivirus Evasion
• Application Whitelisting
• Bypassing Network Filters
• Linux Post-Exploitation
• Kiosk Breakouts
• Windows Credentials
• Windows Lateral Movement
• Linux Lateral Movement
• Microsoft SQL Attacks
• Active Directory Exploitation
• Combining the Pieces
• Trying Harder: The Labs

Programme scope, delivery arrangements and suitability are confirmed during enquiry.