PEN-300: Advanced Evasion Techniques and Breaching Defenses

Course Overview

Evasion Techniques and Breaching Defenses (PEN-300) is an advanced penetration testing course. Learners who complete the course and pass the exam will earn the OffSec Experienced Pentester (OSEP) certification. This course builds on the knowledge and techniques taught in Penetration Testing with Kali Linux, teaching learners to perform advanced penetration tests against mature organizations with an established security function and focuses on bypassing security mechanisms that are designed to block attacks. The OSEP is one of three certifications making up the OSCE³ certification along with the OSWE for advanced web attacks and OSED for exploit development. This course is intended for OSCP-level penetration testers who want to develop their skills against hardened systems. Job roles like senior penetration tester, security researcher, application penetration tester, and any software developer working on security products could benefit from the course. At the conclusion of this course, participants will achieve the following:

• Preparation for heightened fieldwork proficiency
• Comprehensive understanding of infiltrating network perimeter defenses via client-side attack methods, circumventing antivirus, and whitelist protocols
• Tailoring and interconnecting sophisticated attack strategies, with a focus on exploiting web vulnerabilities

Schedule

Program Level

Beginner

Prerequisites

• Solid ability in enumerating targets to identify vulnerabilities
• The ability to identify and exploit vulnerabilities like SQL injection, file inclusion, and local privilege escalation
• A foundational understanding of Active Directory and knowledge of basic AD attacks

Course Outline

Exam Information