7 timed, auto-graded OffSec practice exams and 1 certification path. Your first exam is free; every pass gives a certificate anyone can verify.
Knowledge practice test (the real OSEE is hands-on) on advanced concepts: modern Windows mitigations, browser and kernel memory-safety classes, attack-surface reduction and defensive meaning.
Knowledge practice test (the real OSED is hands-on) on concepts: memory-safety vulnerability classes, Windows mitigations, debugging and analysis ideas, and secure-coding remediation and detection.
Knowledge practice test (the real OSEP is hands-on) on defensive meaning, detection and mitigation of advanced techniques: client-side execution, process injection, endpoint controls, lateral movement
Knowledge practice test (the real OSWE is hands-on) on white-box review concepts: vulnerability classes, secure comparison, injection, deserialisation, XXE, SSTI, prototype pollution, SSRF, token stre
Knowledge practice test (the real OSDA is hands-on) on SOC analysis: MITRE ATT&CK, Windows and Linux logging, Sysmon, network and AV detections, attack indicators, Active Directory attacks and Elastic
Knowledge practice test (the real OSWA is hands-on) on web assessment: enumeration and tooling, XSS, CSRF and CORS, SQL injection, traversal and inclusion, XXE, SSTI, SSRF, command injection, IDOR and
Scenario-based practice exam, a knowledge practice test for PEN-200 topics (the real exam is hands-on): enumeration, web and client-side attacks, privilege escalation, tunnelling, Active Directory and
No exam matches. Try another word, or clear the area and level.
Practice exams written by CareerByteCode. Not affiliated with OffSec; certification names are trademarks of their owners.
