PEN-200 Exam Information and Outline
OffSec Certified Professional (OSCP+)
Syllabus Update Checked on: October 28, 2026
PEN-200 Exam Syllabus & Study Guide
Before you start practicing with our exam simulator, it is essential to understand the
official PEN-200 exam objectives. This course outline serves as your roadmap.
The information below reflects the 2026 syllabus defined by
OffSec.
Below are complete topics detail with latest syllabus and course outline, that will help you good knowledge about exam objectives and topics that you have to prepare. These contents are covered in questions and answers pool of exam.
- Exam Format
- Proctored 23 hour 45 minute hands-on exam (Active Directory set plus standalone machines) plus 24-hour report submission
- Penetration Testing Methodology and Reporting
- Information Gathering
- Passive and active reconnaissance
- Vulnerability Scanning
- Web Application Attacks
- Directory traversal, file inclusion, SQL injection, XSS
- Client-Side Attacks and Phishing Payloads
- Public Exploits and Fixing Exploits
- Antivirus Evasion
- Password Attacks
- Windows and Linux Privilege Escalation
- Port Redirection, Tunnelling and Pivoting
- Metasploit Framework
- Active Directory Enumeration, Attacks and Lateral Movement
- Cloud Infrastructure Attacks (AWS basics)