From £5,240 + VAT
Book online today or, if you need help choosing the right course or would like to discuss business discounts, call us on 0113 220 7150.
Overview
This hands-on course OffSec PEN-200 (OSCP) class introduces learners to professional penetration testing using Kali Linux. PEN-200 is OffSec’s industry leading course for aspiring ethical hackers and forms the pathway to achieving the prestigious OffSec Certified Professional (OSCP and OSCP+) certifications. Learners will develop deep technical skills through a structured approach to ethical hacking, mastering penetration testing methodology, tools, and techniques in a self-paced learning environment.
The course blends theory with immersive practice, equipping participants with the capability to identify, exploit, and report vulnerabilities across real-world systems. Learners gain access to the OffSec PEN-200 (OSCP) learning content, and labs for 12-months to support their OSCP exam preparation journey.
Prerequisites
While there are no formal prerequisites, learners are strongly advised to have:
- A solid understanding of TCP/IP networking
- Familiarity with Linux and Windows operating systems
- Basic scripting ability in languages such as Bash or Python
To prepare for PEN-200, learners may benefit from completing the OffSec SEC-100: Security Essentials course.
Target audience
This course is aimed at cybersecurity professionals looking to build advanced ethical hacking skills and pursue the OSCP certification. It is particularly suitable for:
- Security analysts, penetration testers, and threat hunters
- IT professionals with prior experience in networking and system administration
- Learners seeking a career transition into offensive security
Delegates will learn how to
By the end of the course, learners will be able to:
- Apply penetration testing methodology to assess and exploit system vulnerabilities
- Conduct advanced information gathering and vulnerability analysis
- Exploit common web application vulnerabilities including XSS, SQL injection, and session hijacking
- Execute client-side attacks to compromise browsers and user-facing components
- Locate, customise, and deploy public exploits responsibly
- Write detailed, actionable penetration testing reports with remediation recommendations
- Prepare effectively for the OSCP and OSCP+ certifications through practical, lab-based experience
Outline
Introduction to cybersecurity
- Overview of key concepts, threats, and technologies
- Role of ethical hacking in modern cybersecurity
Report writing for penetration testers
- Structuring technical findings for business stakeholders
- Writing clear, concise, and impactful remediation advice
Information gathering
- Using tools like Nmap and Shodan for reconnaissance
- Network mapping and identifying potential targets
Vulnerability scanning
- Using common tools and more
- Interpreting scan results and prioritising vulnerabilities
Introduction to web applications
- Architecture of modern web applications
- Identifying structural weaknesses and exposure points
Common web application attacks
- Exploiting cross-site scripting (XSS)
- Injection flaws and session management weaknesses
SQL injection attacks
- Identifying injectable parameters
- Extracting data and escalating privileges via SQLi
Client-side attacks
- Analysing browser-based vulnerabilities
- Exploiting client-side flaws in JavaScript and plugins
Locating public exploits
- Finding and evaluating exploits from trusted sources
- Integration into the penetration testing workflow
Fixing exploits
- Customising existing payloads to bypass defences
- Developing reliable proof-of-concept attacks
Exams and assessments
Learners will have x2 exam vouchers, those who complete the course and successfully pass the 24-hour hands-on OSCP exam will earn the OffSec Certified Professional (OSCP) or OSCP+ certification. These certifications demonstrate the ability to compromise multiple machines in a controlled lab environment and are recognised for their rigorous practical requirements.
Hands-on learning
This course provides immersive practical experience through:
- Live lab environments simulating enterprise-grade infrastructure
- Real-world scenarios for each exploit covered
- A full 12-month OffSec LearnOne (PEN-200) subscription
- Continuous support and guidance through interactive learning modules
QA is proud to be the UK official partner with Offensive Security.
Click here to view all our OffSec courses.
Click here to view the Learn Online subscriptions.
Special Notices
This course includes a complimentary OffSec LearnOne (PEN-200) 1 year subscription worth £1,800 to aid in preparing for the OSCP exam after the class.
Cyber Security learning paths
Want to boost your career in cyber security? Click on the roles below to see QA's learning pathways, specially designed to give you the skills to succeed.
Offensive Cyber Operations learning paths
Want to boost your career in the world of Offensive Cyber Operations? View QA's learning pathway below, specially designed to give you the skills to succeed.
Offensive Security learning path
Want to boost your career in Offensive Security? View QA's learning pathway below, specially designed to give you the skills to succeed.
Frequently asked questions
How can I create an account on myQA.com?
There are a number of ways to create an account. If you are a self-funder, simply select the "Create account" option on the login page.
If you have been booked onto a course by your company, you will receive a confirmation email. From this email, select "Sign into myQA" and you will be taken to the "Create account" page. Complete all of the details and select "Create account".
If you have the booking number you can also go here and select the "I have a booking number" option. Enter the booking reference and your surname. If the details match, you will be taken to the "Create account" page from where you can enter your details and confirm your account.
Find more answers to frequently asked questions in our FAQs: Bookings & Cancellations page.
How do QA’s virtual classroom courses work?
Our virtual classroom courses allow you to access award-winning classroom training, without leaving your home or office. Our learning professionals are specially trained on how to interact with remote attendees and our remote labs ensure all participants can take part in hands-on exercises wherever they are.
We use the WebEx video conferencing platform by Cisco. Before you book, check that you meet the WebEx system requirements and run a test meeting to ensure the software is compatible with your firewall settings. If it doesn’t work, try adjusting your settings or contact your IT department about permitting the website.
How do QA’s online courses work?
QA online courses, also commonly known as distance learning courses or elearning courses, take the form of interactive software designed for individual learning, but you will also have access to full support from our subject-matter experts for the duration of your course. When you book a QA online learning course you will receive immediate access to it through our e-learning platform and you can start to learn straight away, from any compatible device. Access to the online learning platform is valid for one year from the booking date.
All courses are built around case studies and presented in an engaging format, which includes storytelling elements, video, audio and humour. Every case study is supported by sample documents and a collection of Knowledge Nuggets that provide more in-depth detail on the wider processes.
When will I receive my joining instructions?
Joining instructions for QA courses are sent two weeks prior to the course start date, or immediately if the booking is confirmed within this timeframe. For course bookings made via QA but delivered by a third-party supplier, joining instructions are sent to attendees prior to the training course, but timescales vary depending on each supplier’s terms. Read more FAQs.
When will I receive my certificate?
Certificates of Achievement are issued at the end the course, either as a hard copy or via email. Read more here.