OffSec Live - PEN200 PDF - 06142022

Download as pdf or txt
Download as pdf or txt
You are on page 1of 28
At a glance
Powered by AI
The document outlines the structure and goals of the OffSec Live: PEN-200 program which provides additional learning resources and community support for students enrolled in the PEN-200 course.

OffSec Live: PEN-200 aims to facilitate learning, improve engagement and increase preparedness for the OSCP certification through a weekly learning journey, live streaming sessions, demonstration labs and a dedicated Discord channel for collaboration.

The recommended approach includes reviewing weekly objectives and materials, completing assigned exercises, attempting demo labs prior to sessions, and collaborating with other students in the OffSec Live Discord channel.

Welcome to OffSec Live: PEN-200!

(as of 6/14/2022)

OffSec Live: PEN-200 is our scheduled and open streaming offering that includes a learning
journey designed to facilitate learning, improve engagement and ultimately increase
Offensive Security Certified Professional (OSCP) certification preparedness and
achievement designed for OffSec students currently enrolled in PEN-200.*

OffSec Live: PEN-200 includes a week-by-week learning journey - including learning


objectives, recommended hours to dedicate, course modules to focus and topic / lab
exercises to complete - along with twice per week live Twitch streaming sessions where our
OffSec team provides course specific, interactive learning guidance and lab concept
demonstrations to better assist currently enrolled PEN-200 students. In addition, the
OffSec Live offering will facilitate a dedicated OffSec Live Discord channel where currently
enrolled PEN-200 students may collaborate to better understand the PEN-200 materials
and methodology.

OffSec Live’s weekly Twitch streaming is open to the public, and no additional fees will be
charged to active OffSec PEN-200 subscription holders. Currently enrolled OffSec PEN-200,
Learn One and Learn Unlimited subscription holders will also be provided access to an
overall PEN-200 learning journey, recorded Twitch streaming sessions, specialized
demonstration lab exercises, and an OffSec Live Discord channel. Those who do not have a
current OffSec PEN-200, Learn One PEN-200 or Learn Unlimited PEN-200 subscription will
have access to the weekly OffSec Live Twitch streaming sessions.

We hope you enjoy the offering and learning journey!

For additional questions, please see our OffSec Live: PEN-200 FAQs here.

*OffSec Live: PEN-200 will most benefit Learn One PEN-200 and/or Learn Unlimited PEN-200
subscribers due to the 25-week learning journey duration.

1
Getting Ready

To prepare for PEN-200, please see quick reference guidance that will help you get started
with the OffSec Training Library (OTL) platform and improve your learning experience.

Getting Started Community, Mentoring and Support

● Familiarize with the OTL ● Join OffSec Community (OffSec Discord


● Virtual Machine Requirements Server)
● Lab Connectivity Guide ● Join OffSec Live: PEN-200 Community
(dedicated OffSec Live Discord channel
for student sharing and Office Hours)*
● Mentoring Guideline (help with course
exercises and lab machines)
● Technical Support Services (help with
technical issues such as platform, VPN,
lab machine connectivity, etc.)
● OffSecOfficial - Twitch (Coming soon!)
● OffSec Forum (exchange ideas and
course discuss issues)

PEN-200 Course Exam

● Getting started with your ● Exam Guide


PEN-200 course ● Exam Preparation (tips and suggestions
● PEN-200 Topic Exercises (course to prepare for your OSCP exam)
exercises) ● Exam Scheduling (how to schedule
● Learning Path Guide (a set of your OSCP exam)
lab machines that will help you ● Reporting (OSCP exam reporting
get started) requirements)

*All currently enrolled PEN-200 students will have access to the OffSec Live: PEN-200 Discord
channel.

For more detailed information and FAQ, please click here!

2
Preparing for OffSec Live: PEN-200 - weekly sessions guidance:

Recommended approach - Top 10 secrets to success

1) Review weekly learning objectives and recommended learning time allocation.


2) Read content for the PEN-200 course Topic covered in the week.
3) Watch videos for PEN-200 Topic covered in the week.
4) Complete the Topic Exercises covered in the week.
5) Attempt the demo labs for the weekly topic prior to OffSec Live Wednesday and
Friday Twitch streaming sessions.
6) Complete the target PEN-200 lab exercises each week.
7) Collaborate with OffSec Live students in Discord channel.
8) Attend weekly office hours to address open questions.*
9) Seek OffSec Student Mentor support for general content related questions, as
needed.
10) Have fun and enjoy your learning experience.

*Weekly OffSec Live: PEN-200 Office Hours will cover materials reviewed up to that point in
the learning journey. Any questions regarding content beyond that point in the learning
journey will be reserved for other OffSec student support channels.

Please follow the recommended approach above + the Learning Journey below to most
effectively prepare for the OSCP exam.

Please note that PG Play & Practice is not a substitute for the PEN200 lab environment.
Successful completion of PEN200 requires active and consistent engagement in the course
PEN-200 lab environment. Those students who successfully complete all topic exercises
and more than 50 PEN200 lab machines have a significantly higher OSCP pass rate than
those who do not do so.

3
OffSec Live- PEN-200 Learning Journey:

OffSec Live: PEN-200 Learning Journey

Week 1: Learning 1) Understand some popular Linux command line programs.


Terminal Best Objectives 2) Learn more about the Bash/ZSH environment.
Practices 3) Learn about environment variables and how to use them.

Learning 10
time (Hours)

Office Hours Monday, June 20 - NONE

OffSec Live Wednesday, June 22 - 12 pm - 1 pm (ET):


Weekly Kick-off
Demo Terminal best practices

OffSec Live Friday, June 24 - 12 pm - 1 pm (ET): Terminal best practices


Weekly
Demo

Readings: Command-Line Fun: 3.1 - 3.9


Topic in LMS

Watch: Command-Line Fun: 2.1 - 2.5


Videos in
LMS

Topic 3.1.4. Practice - The Bash Environment


exercises to 3.2.6. Practice - Piping and Redirection
complete 3.3.6. Practice - Text Searching and Manipulation
3.5.4. Practice - Comparing Files
3.6.4. Practice - Managing Processes
3.7.3. Practice - File and Command Monitoring
3.8.4. Practice - Downloading Files
3.9.4. Practice - Customizing the Bash Environment

Lab None
exercises to
complete

4
Week 2 : Learning 1) Understand some practical tools that are found in every pentester's
Practical Objectives toolkit.
Tools 2) Understand packet structures and learn how to sniff traffic.
3) Identify the difference between reverse and bind shells.

Learning 10
time (Hours)

Office Hours Monday, June 27 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, June 29 - 12 pm - 1 pm (ET): Practical Tools


Weekly
Demo

OffSec Live Friday, July 1 - 12 pm - 1 pm (ET): Practical Tools


Weekly
Demo

Readings: Practical Tools: 4.1 - 4.5


Topic in LMS

Watch: Practical Tools: 3.1 - 3.5


Videos in
LMS

Topic 4.1.5. Practice - Netcat


exercises to 4.2.5. Practice - Socat
complete 4.3.9. Practice - PowerShell and Powercat
4.4.6. Practice - Wireshark
4.5.3. Practice - Tcpdump

Lab None
exercises to
complete

5
Week 3: Learning 1) Learn the importance of Passive Information Gathering.
Passive Objectives 2) Practical examples that show the impact of online presence.
Information
Gathering Learning 10
time (Hours)

Office Hours Monday, July 4, 12 pm - 1 pm (ET)

OffSec Live Wednesday, July 6 - 12 pm - 1 pm (ET): Passive Information Gathering


Weekly
Demo

OffSec Live Friday, July 8, 1 pm - 2 pm (ET): MegaCorpOne


Weekly
Demo

Readings: Passive Information Gathering: 6.1 - 6.16


Topic in LMS

Watch: Passive Information Gathering: 5.1 - 5.14


Videos in
LMS

Topic 6.3.1. Practice - Whois Enumeration


exercises to 6.4.1. Practice - Google Hacking
complete 6.5.1. Practice - Netcraft
6.6.1. Practice Recon-ng
6.7.1. Practice - Open-Source Code
6.12.3. Practice - User Information Gathering
6.13.2. Practice - Social Media Tools

Lab 10.11.1.222 - Chris


exercises to
complete

6
Week 4: Learning 1) Understand some common active information gathering techniques
Active objectives including port scanning and DNS, SMB, NFS, SMTP, and SNMP
Information enumeration.
Gathering
Learning 10
time (Hours)

Office Hours Monday, July 11, 12 pm - 1 pm (ET)

OffSec Live Wednesday, July 13, 12 pm - 1 pm (ET): Active Information Gathering


Weekly
Demo

OffSec Live Friday, July 15, 12 pm - 1 pm (ET): Getting Started with PWK Labs - Jeremy
Weekly Miller, Active Information Gathering
Demo

Readings: Active Information Gathering: 7.1 - 7.7


Topic in LMS

Watch: Active Information Gathering: 6.1 - 6.3


Videos in
LMS

Topic 7.1.7. Practice - DNS Enumeration


exercises to 7.2.3. Practice - Port Scanning
complete 7.3.3. Practice - SMB Enumeration
7.4.3. Practice - NFS Enumeration
7.5.1. Practice - SMTP Enumeration
7.6.4. Practice - SNMP Enumeration

Lab Complete Initial Enumeration of PWK Labs.


exercises to 10.11.1.5 - Alice
complete 10.11.1.146 - Susie
10.11.1.231 - Mailman

7
Week 5: Learning 1) Understand automated and manual vulnerability scanning.
Vulnerability objectives
Scanning
Learning 10
time (Hours)

Office Hours Monday, July 18, 12 pm - 1 pm (ET)

OffSec Live Wednesday, July 20, 12 pm - 1 pm (ET): Vulnerability Scanning


Weekly
Demo

OffSec Live Friday, July 22 - 12 pm - 1 pm (ET): Vulnerability Scanning


Weekly
Demo

Readings: Vulnerability Scanning: 8.1 - 8.4


Topic in LMS

Watch: Vulnerability Scanning: 7.1 - 7.3


Videos in
LMS

Topic 8.2.9. Practice - Scanning with Individual Nessus Plugins


exercises to 8.3.1. Practice - Vulnerability Scanning with Nmap
complete

Lab Scan PWK Lab machines for specific vulnerabilities.


exercises to 10.11.1.5 - Alice
complete 10.11.1.146 - Susie

8
Week 6: Learning 1) Learn web application vulnerability enumeration and exploitation.
Web objectives 2) Demonstrate the exploitation of several common web application
Application vulnerabilities listed in the OWASP Top 10.
Attacks
Learning 15
time (Hours)

Office Hours Monday, July 25 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, July 27 - 12 pm - 1 pm (ET): Web App Attacks


Weekly
Demo

OffSec Live Friday, July 29 - 12 pm - 1 pm (ET): Web App Attacks


Weekly
Demo

Readings: Web Application Attacks: 9.1 - 9.3


Topic in LMS

Watch: Web Application Attacks: 8.1 - 8.3


Videos in
LMS

Topic 9.2.6. Practice - Web Application Enumeration


exercises to 9.3.4. Practice - Web Application Assessment Tools
complete

Lab 10.11.1.71 - Alpha


exercises to 10.11.1.72 - Beta
complete 10.11.1.13 - Disco
10.11.1.50 - Bethany
10.11.1.217 - Hotline

9
Week 7: Learning 1) Learn web application vulnerability enumeration and exploitation.
Web Objectives 2) Demonstrate the exploitation of several common web application
Application vulnerabilities listed in the OWASP Top 10.
Attacks
Learning 15
time (Hours)

Office Hours Monday, August 1 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, August 3 - 12 pm - 1 pm (ET): Web App Attacks


Weekly
Demo

OffSec Live Friday, August 5 - 12 pm - 1 pm (ET): Web App Attacks


Weekly
Demo

Readings: Web Application Attacks: 9.4 - 9.10


Topic in LMS

Watch: Web Application Attacks: 8.4 - 8.9


Videos in
LMS

Topic 9.5.2. Practice - Exploiting Admin Consoles


exercises to 9.6.6. Practice - Cross-Site Scripting (XSS)
complete 9.7.2. Practice - Directory Traversal Vulnerabilities
9.8.7. Practice - Remote File Inclusion (RFI)
9.8.10. Practice - PHP Wrappers
9.9.9. Practice - Extracting Data from the Database
9.9.11. Practice - From SQL Injection to Code Execution
9.9.13. Practice - Automating SQL Injection
9.10.1. Practice - Extra Miles

Lab 10.11.1.222 - Chris


exercises to 10.11.1.231 - Mailman
complete 10.11.1.251 - Sean
+ 2 PWK Lab Machines

10
Week 8 : Learning None
Catch-up objectives
Week
Learning None
time (Hours)

Office Hours None

OffSec Live None


Weekly
Demo

Readings: None
Topic in LMS

Watch: None
Videos in
LMS

Topic None
exercises to
complete

Lab None
exercises to
complete

11
Week 9: Learning 1) Learn the principles behind a buffer overflow attack.
Introduction objectives 2) Discover and exploit a remote buffer overflow.
to Buffer
Overflows Learning 15
and Windows time (Hours)
Buffer
Overflows Office Hours Monday, August 15 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, August 17 - 12 pm - 1 pm (ET): Introduction to Buffer


Weekly Overflows
Demo

OffSec Live Friday, August 19 - 12 pm - 1 pm (ET): Windows Buffer Overflow


Weekly
Demo

Readings: Introduction to Buffer Overflows: 10.1 - 10.3


Topic in LMS Windows Buffer Overflows: 11.1 - 11.3

Watch: Introduction to Buffer Overflows: 9.1 - 9.2


Videos in Windows Buffer Overflows: 10.1 - 10.3
LMS

Topic 10.2.5. Practice - Introduction to Buffer Overflows


exercises to 11.1.2. Practice - Discovering the Vulnerability
complete 11.2.4. Practice - Controlling EIP
11.2.8. Practice - Checking for Bad Characters
11.2.10. Practice - Finding a Return Address
11.2.15. Practice - Improving the Exploit
11.2.16. Extra Mile Exercises

Lab None
exercises to
complete

12
Week 10: Learning 1) Introduction Linux buffer overflows.
Linux Buffer objectives
Overflows
Learning 15
time (Hours)

Office Hours Monday, August 22 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, August 24 - 12 pm - 1 pm (ET): Linux Buffer Overflows


Weekly
Demo

OffSec Live Friday, August 26 - 12 pm - 1 pm (ET): Linux Buffer Overflows


Weekly
Demo

Readings: Linux Buffer Overflows: 12.1 - 12.8


Topic in LMS

Watch: Linux Buffer Overflows: 11.1 - 11.8


Videos in
LMS

Topic 12.2.1. Practice - Replicating the Crash


exercises to 12.3.1. Practice - Controlling EIP
complete 12.5.1. Practice - Checking for Bad Characters
12.6.1. Practice - Finding a Return Address
12.7.1. Practice - Getting a Shell

Lab 3 PWK Labs Machines


exercises to
complete

13
Week 11: Learning 1) Identify factors that are important to consider for client-side attacks.
Client-Side objectives 2) Learn exploitation scenarios involving malicious HTML Applications and
Attacks Microsoft Word documents.

Learning 15
time (Hours)

Office Hours Monday, August 29 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, August 31 - 12 pm - 1 pm (ET): Client-Side Attacks


Weekly
Demo

OffSec Live Friday, September 2 - 12 pm - 1 pm (ET): Client-Side Attacks


Weekly
Demo

Readings: Client-Side Attacks: 13.1 - 13.4


Topic in LMS

Watch: Client-Side Attacks: 12.1 - 12.3


Videos in
LMS

Topic 13.1.5. Practice - Know Your Target


exercises to 13.2.3. Practice - Leveraging HTML Applications
complete 13.3.3. Practice - Microsoft Word Macro
13.3.5. Practice - Object Linking and Embedding
13.3.7. Practice - Evading Protected View

Lab 3 PWK Labs Machines


exercises to
complete

14
Week 12: Learning 1) Identify online resources that host exploits for publicly known
Locating and objectives vulnerabilities.
Fixing Public 2) Learn how to modify public exploit code to fit a specific attack platform
Exploits
and target.

Learning 15
time (Hours)

Office Hours Monday, September 5 - 1 pm - 2 pm (ET)

OffSec Live Wednesday, September 7 - 1 pm - 2 pm (ET): Locating Public Exploits and


Weekly Fixing Exploits
Demo

OffSec Live Friday, September 9 - 1 pm - 2 pm (ET): Locating Public Exploits and Fixing
Weekly Exploits
Demo

Readings: Locating Public Exploits: 14.1 - 14.4


Topic in LMS Fixing Exploits: 15.1 - 15.3

Watch: Locating Public Exploits: 13.1 - 13.3


Videos in Fixing Exploits: 14.1 - 14.2
LMS

Topic 14.3.1. Practice - Putting It All Together


exercises to 15.1.4. Practice - Cross-Compiling Exploit Code
complete 15.1.6. Practice - Changing the Socket Information
15.1.8. Practice - Changing the Return Address
15.1.10. Practice - Changing the Payload
15.2.4. Practice - Changing Connectivity Information
15.2.6. Practice - Troubleshooting the "index out of range" Error

Lab 10.11.1.146 - Susie


exercises to 10.11.1.71 - Alpha
complete 10.11.1.71 - Beta
10.11.1.50 - Bethany
10.11.1.231 - Mailman
10.11.1.5 - Alice

15
Week 13: Learning 1) Identify various file transfer methods that can be used in an assessment.
File Transfers objectives: 2) Learn how to bypass antivirus software on target machines.
and Anti Virus
Bypass Learning 18
time (Hours)

Office Hours Monday, September 12 -1 pm - 2 pm (ET)

OffSec Live Wednesday, September 14 - 1 pm - 2 pm (ET): File Transfers and Anti Virus
Weekly Bypass
Demo

OffSec Live Friday, September 16 - 1 pm - 2 pm (ET): File Transfers


Weekly
Demo

Readings: File Transfers: 16.1 - 16.3


Topic in LMS Anti Virus Bypass : 17.1 - 17.4

Watch: File Transfers: 15.1 - 15.2


Videos in Anti Virus Bypass: 16.1 - 16.3
LMS

Topic 16.1.4. Practice - Considerations and Preparations


exercises to 16.2.6. Practice - Transferring Files with Windows Hosts
complete 17.3.5. Practice - Antivirus Evasion

Lab 10.11.1.251 - Sean


exercises to 10.11.1.146 - Susie
complete + 3 PWK Lab Machines

16
Week 14: Learning 1) Learn privilege escalation techniques to elevate privileges on Windows
Privilege objectives and Linux-based targets from non-privileged user accounts.
Escalation
(Linux, Learning 18
Windows) time (Hours)

Office Hours Monday, September 19 -12 pm - 1 pm (ET)

OffSec Live Wednesday, September 21 - 12 pm - 1 pm (ET): Privilege Escalation (Linux,


Weekly Windows)
Demo

OffSec Live Friday, September 23 - 12 pm - 1 pm (ET): Privilege Escalation (Linux,


Weekly Windows)
Demo

Readings: Privilege Escalation: 18.1 - 18.4


Topic in LMS

Watch: Privilege Escalation: 17.1 - 17.3


Videos in
LMS

Topic 18.1.2. Practice - Manual Enumeration


exercises to 18.1.4. Practice - Automated Enumeration
complete 18.2.4. Practice - User Account Control (UAC) Bypass: fodhelper.exe Case
Study
18.2.6. Practice - Insecure File Permissions: Serviio Case Study
18.3.3. Practice - Insecure File Permissions: Cron Case Study
18.3.5. Practice - Insecure File Permissions: /etc/passwd Case Study

Lab 10.11.1.13 - Disco


exercises to + 3 PWK Lab Machines
complete

17
Week 15: Learning 1) Learn privilege escalation techniques to elevate privileges on Windows
Windows objectives and Linux-based targets from non-privileged user accounts.
Privilege
Escalation Learning 20
Vectors time (Hours)

Office Hours Monday, September 26 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, September 28 - 12 pm - 1 pm (ET): Windows Privilege


Weekly Escalation Vectors
Demo

OffSec Live Friday, September 30 - 1 pm - 2 pm (ET): Windows Privilege Escalation


Weekly Vectors
Demo

Readings: None
Topic in LMS

Watch: None
Videos in
LMS

Topic None
exercises to
complete

Lab 3 PWK Lab Machines


exercises to
complete

18
Week 16: Learning 1) Learn how to leverage password attacks to gain access to a
Password objectives Windows-based target.
Attacks
Learning 20
time (Hours)

Office Hours Monday, October 3 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, October 5 - 12 pm - 1 pm (ET): Password Attacks


Weekly
Demo

OffSec Live Friday, October 7 - 12 pm - 1 pm (ET): Password Attacks


Weekly
Demo

Readings: Password Attacks: 19.1 - 19.5


Topic in LMS

Watch: Password Attacks: 18.1 - 18.4


Videos in
LMS

Topic 19.2.1. Practice - Brute Force Wordlists


exercises to 19.3.2. Practice - HTTP htaccess Attack with Medusa
complete 19.3.4. Practice - Remote Desktop Protocol Attack with Crowbar
19.3.6. Practice - SSH Attack with THC-Hydra
19.3.8. Practice - HTTP POST Attack with THC-Hydra
19.4.2. Practice - Retrieving Password Hashes
19.4.4. Practice - Passing the Hash in Windows
19.4.6. Practice - Password Cracking

Lab 10.11.1.123 - xor-app59


exercises to + 4 PWK Lab Machines
complete

19
Week 17: Learning 1) Understand various forms of port redirection, tunneling, and traffic
Port objectives encapsulation.
Redirection 2) Manipulate the directional flow of targeted traffic in restricted network
and
environments.
Tunneling
Learning 20
time (Hours)

Office Hours Monday, October 10 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, October 12 - 12 pm - 1 pm (ET): Port Redirection and


Weekly Tunneling
Demo

OffSec Live Friday, October 14 - 12 pm - 1 pm (ET): Port Redirection and Tunneling


Weekly
Demo

Readings: Port Redirection and Tunneling: 20.1 - 20.6


Topic in LMS

Watch: Port Redirection and Tunneling: 19.1 - 19.5


Videos in
LMS

Topic 20.1.2. Practice - Port Forwarding


exercises to 20.2.6. Practice - SSH Dynamic Port Forwarding
complete 20.3.1. Practice - PLINK.exe
20.4.1. Practice - NETSH
20.5.1. Practice - HTTPTunnel-ing Through Deep Packet Inspection

Lab 4 PWK Lab Machines


exercises to
complete

20
Week 18: Learning 1) Learn the basic concepts of Active Directory.
Active objectives 2) Demonstrate Active Directory enumeration, authentication, and lateral
Directory movement techniques.
Attacks
(Part 1) Learning 20
time (Hours)

Office Hours Monday, October 17 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, October 19 - 12 pm - 1 pm: Active Directory Attacks (Part 1)


Weekly
Demo

OffSec Live Friday, October 21 - 12 pm - 1 pm (ET): Active Directory Attacks (Part 1)


Weekly
Demo

Readings: Active Directory Attacks: 21.1 - 21.6


Topic in LMS

Watch: Active Directory Attacks: 20.1 - 20.5


Videos in
LMS

Topic 21.2.2. Practice - Traditional Approach


exercises to 21.2.4. Practice - A Modern Approach
complete 21.2.6. Practice - Resolving Nested Groups
21.2.8. Practice - Currently Logged on Users
21.2.10. Practice - Enumeration Through Service Principal Names
21.3.4. Practice - Cached Credential Storage and Retrieval
21.4.3. Practice - Overpass the Hash
21.4.5. Practice - Pass the Ticket
21.4.7. Practice - Distributed Component Object Model
21.5.4. Practice - Active Directory Attacks

Lab 4 PWK Lab Machines


exercises to
complete

21
Week 19: Learning 1) Learn the basic concepts of Active Directory
Active objectives 2) Demonstrate Active Directory enumeration, authentication, and lateral
Directory movement techniques.
Attacks
(Part 2) Learning 20
time (Hours)

Office Hours Monday, October 24 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, October 26 - 12 pm - 1 pm (ET): Active Directory Attacks (Part


Weekly 2)
Demo

OffSec Live Friday, October 28 - 12 pm - 1 pm (ET): TBD


Weekly
Demo

Readings: None
Topic in LMS

Watch: None
Videos in
LMS

Topic None
exercises to
complete

Lab 4 PWK Lab Machines


exercises to
complete

22
Week 20: Learning 1) Conduct a simulated penetration test inspired by real-world findings.
Assembling objectives:
the pieces
Learning 20
time (Hours)

Office Hours Monday, October 31 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, November 2 - 12 pm - 1 pm (ET): Assembling the pieces


Weekly
Demo

OffSec Live Friday, November 4 - 12 pm - 1 pm (ET): TBD


Weekly
Demo

Readings: Assembling the pieces: 24.1 - 24.10


Topic in LMS

Watch: Assembling the pieces: 23.1 - 23.9


Videos in
LMS

Topic None
exercises to
complete

Lab 4 PWK Lab Machines


exercises to
complete

23
Week 21: Learning 1) Practice concepts with PWK Lab machines/Challenge Labs.
Practice objectives:
concepts
Learning 20
time (Hours)

Office Hours Monday, November 7 - 12 pm - 1 pm (ET)

OffSec Live Wednesday, November 9 - 12 pm - 1 pm (ET): Discussion on cybersecurity


Weekly careers
Demo

OffSec Live Friday, November 11: None


Weekly
Demo

Readings: None
Topic in LMS

Watch: None
Videos in
LMS

Topic None
exercises to
complete

Lab 5 PWK Lab Machines


exercises to
complete

24
Week 22: Learning 1) Practice concepts with PWK Lab machines/Challenge Labs.
Practice objectives:
concepts
Learning 20
time (Hours)

Office Hours Monday, November 14: None

OffSec Live Wednesday, November 16 - 12 pm - 1 pm (ET): How to prepare for the


Weekly OSCP exam
Demo

OffSec Live Friday, November 18: None


Weekly
Demo

Readings: None
Topic in LMS

Watch: None
Videos in
LMS

Topic None
exercises to
complete

Lab 5 PWK Lab Machines


exercises to
complete

25
Week 23: Learning 1) Practice concepts with PWK Lab machines/Challenge Labs.
Practice objectives:
concepts
Learning 20
time (Hours)

Office Hours Monday, November 21: None

OffSec Live Wednesday, November 23: None


Weekly
Demo

OffSec Live Friday, November 25: None


Weekly
Demo

Readings: None
Topic in LMS

Watch: None
Videos in
LMS

Topic None
exercises to
complete

Lab 5 PWK Lab Machines


exercises to
complete

26
Week 24: Learning 1) Practice concepts with PWK Lab machines/Challenge Labs.
Practice objectives:
concepts
Learning 20
time (Hours)

Office Hours Monday, November 28: None

OffSec Live Wednesday, November 30 12 pm - 1 pm (ET): AMA Session - Morten, Sicky


Weekly and Jeremy
Demo

OffSec Live Friday, December 2: None


Weekly
Demo

Readings: None
Topic in LMS

Watch: None
Videos in
LMS

Topic None
exercises to
complete

Lab 5 PWK Lab Machines


exercises to
complete

27
Week 25: Learning 1) Attempt the Mock Exam.
Attempt objectives:
mock exam &
practice Learning 20
concepts time (Hours)

Office Hours Monday, December 5: None

OffSec Live Wednesday, December 7: None


Weekly
Demo

OffSec Live Friday, December 9: None


Weekly
Demo

Readings: None
Topic in LMS

Watch: None
Videos in
LMS

Topic None
exercises to
complete

Lab 5 PWK Lab Machines


exercises to
complete

28

You might also like