OffSec Advanced Evasion Techniques and Breaching Defenses PEN-300 (OSEP) Training
Offered to the Jacksonville and Northeast Florida community through UNF Professional and Lifelong Learning in partnership with Applied Technology Academy — live online or in person, taught by ATA's practitioner instructors.
Join our premier PEN-300 OffSec OSEP Training to acquire advanced skills in evading defenses and conducting effective penetration tests.
Course Overview
PEN-300 builds on the knowledge and techniques taught in PEN-200, teaching learners to perform advanced penetration tests against mature organizations with an established security function and bypassing security mechanisms that are designed to block attacks.
This is an advanced-level course designed for OSCP-level penetration testers who want to develop their skills against hardened systems and for job roles such as senior penetration tester, security researcher, application penetration tester, and any software developer working on security products.
Learners who complete the course and pass the exam earn the OffSec Experienced Penetration Tester (OSEP) certification and are prepared for more advanced penetration testing fieldwork.
- Evasion techniques and Breaching Defenses: General Course Information
- Operating System and Programming Theory
- Phishing with Microsoft Office
- Phishing with Calendars
- Phishing with Jscript
- Reflective PowerShell
- Reflective Code Execution in Client Side Attacks
- Process Injection and Migration
- Introduction to Antivirus Evasion
- Advanced Antivirus Evasion
- Application Whitelisting
- Bypassing Network Filters
- Linux Post-Exploitation
- Kiosk Breakouts
- Windows Credentials
- Windows Lateral Movement
- Linus Lateral Movement
- Microsoft SQL Attacks
- Active Directory Exploitation
- Attacking Active Directory
- Combining the Pieces
- Trying Harder: The Labs
Course Outline
- Lesson 1: Evasion Techniques and Breaching Defenses: General Course Information
- Lesson 2: Operating System and Programming Theory
- Lesson 3: Phishing with Microsoft Office
- Lesson 4: Phishing with Calendars
- Lesson 5: Phishing with Jscript
- Lesson 6: Reflective PowerShell
- Lesson 7: Reflective Code Execution in Client Side Attacks
- Lesson 8: Process Injection and Migration
- Lesson 9: Introduction to Antivirus Evasion
- Lesson 10: Advanced Antivirus Evasion
- Lesson 11: Application Whitelisting
- Lesson 12: Bypassing Network Filters
- Lesson 13: Linux Post-Exploitation
- Lesson 14: Kiosk Breakouts
- Lesson 15: Windows Credentials
- Lesson 16: Windows Lateral Movement
- Lesson 17: Linux Lateral Movement
- Lesson 18: Microsoft SQL Attacks
- Lesson 19: Active Directory Exploitation
- Lesson: 20: Attacking Active Directory
- Lesson 21: Combining the Pieces
- Lesson 22: Trying Harder: The Labs
Intended Audience
PEN-300 is an advanced course designed for OSCP-level penetration testers who want to develop their skills against hardened systems
Job roles like senior penetration tester, security researcher, application penetration tester, and any software developer working on security products could benefit from the course
Prerequisites
We strongly suggest that students taking PEN-300 have either taken PWK and passed the OSCP certification or have equivalent knowledge and skills in the following areas:
- Working familiarity with Kali Linux command line
- Solid ability run enumerating targets to identify vulnerabilities
- Basic scripting abilities in Bash, Python and PowerShell
- Identifying and exploiting vulnerabilities like SQL injection, file inclusion and local privilege escalation
- Foundational understanding of Active Directory and knowledge of basic AD attacks
- Familiarity with C# programming is a plus