OffSec Penetration Testing with Kali Linux (PEN200/OSCP) (SF)

Course Description & Learning Outcomes

Course Objectives

Upon completing this course, participants will be able to:

• Learn to document vulnerability assessment and penetration testing reports.

• Learn passive and active information gathering techniques to identify and enumerate target machines running various operating systems and services.

• Learn to write basic scripts and tools to aid penetration testing.

• Learn to analyse, correct, modify, compile and port public exploit code for penetration testing.

• Learn to conduct remote, local privilege escalation and client-side attacks.

• Learn to identify and exploit SQL injection in web applications.

• Learn to leverage various tunnelling techniques to pivot between networks.

• Learn to conduct attacks on active directory authentication and lateral movement in the Active directory.

Course Outline

1. Introduction to Cybersecurity

2. Report Writing for Penetration Testers

3. Information Gathering

4. Vulnerability Scanning

5. Locating Public Exploits

6. Fixing Exploits

7. Introduction to Web Applications

8. SQL Injection Attacks

9. Password Attacks

10. Port Redirection and SSH Tunnelling

11. Linux Privilege Escalation

12. Windows Privilege Escalation

13. Active Directory Introduction and Enumeration

14. Attacking Active Directory Authentication

15. Lateral Movement in Active Directory

Certificate Obtained and Conferred by:

Certificate of Completion from NTUC LearningHub

• Upon meeting at least 75% attendance and passing the assessment(s), participants will receive a Certificate of Completion from NTUC LearningHub.

Statement of Attainment (SOA) from SkillsFuture Singapore

• After passing the assessment(s), participants will receive a SOA from SkillsFuture Singapore, certifying that they have achieved the following Competency Standard(s):

  • ICT-DIT-3012-1.1 Security Assessment and Testing

External Certification

The participant will be given one attempt for OffSec Certified Professional (OSCP) certification exam after attending this course. You have up to three opportunities to reschedule before locking in a specific date and time. For detailed instructions on scheduling, rescheduling, and checking exam expiration dates, please reference the Exams: Scheduling, Expiry, Rules and Recommendations. Upon passing the exam, you will receive the OSCP+. The OSCP certification itself never expires, while the OSCP+ status can be renewed every three years. Find out more about the renewal of Offsec certifications. This certification demonstrate proficiency in identifying vulnerabilities, exploiting systems, escalating privileges, and documenting their findings in a real-world environment. The certification is relevant to roles such as penetration testers, security analysts, and consultants, confirming their ability to conduct comprehensive security assessments.

The course fee includes 1 exam attempt. For 2nd attempt onwards you can purchase via exam e-shop.

Exam duration: 23 hours and 45 minutes to complete the exam

Exam format: 60 points (3 independent targets) + 40 points (2 clients, 1 domain controller), proctored

Passing score: Not applicable Find out more information about the OSCP Exam Guide.

*You will be awarded with the following digital badge(s) upon passing OffSec Certified Professional (OSCP) certification