PEN-300 Advanced Evasion Techniques and Breaching Defenses by OffSec explores advanced penetration testing techniques against hardened targets. Learners gain hands-on experience bypassing security defenses and crafting custom exploits, enhancing their expertise in ethical hacking and vulnerability assessment. The course culminates in a challenging exam for the OffSec Experienced Penetration Tester (OSEP) certification. Achieving the OSEP certification distinguishes professionals with advanced penetration testing skills. Topics covered in PEN-300 include Operating System and Programming Theory, providing a deep understanding of operating systems and fundamental programming concepts. You’ll study memory management, process scheduling, file systems, and other essential OS components, gaining a solid foundation for understanding and exploiting vulnerabilities. This module focuses on leveraging known vulnerabilities in Microsoft Office applications (Word, Excel, PowerPoint) to craft malicious documents that trigger code execution on a victim’s machine, gaining unauthorized access and control. Learn to exploit Jscript for code execution attacks and unauthorized access in Windows environments. Master process injection and migration to inject malicious code into legitimate processes, evade detection, and maintain control. Introduction to antivirus evasion. This module introduces techniques to bypass antivirus software, such as obfuscation and packing, allowing you to create undetected malware. Learn sophisticated methods like signature-based and heuristic-based evasion. Understand how to circumvent application whitelisting and bypass network filters. Discover advanced techniques to bypass network filters and firewalls, gaining access to restricted resources. Linux Post-Exploitation covers techniques for maintaining access and escalating privileges on compromised Linux systems, including navigating file systems, manipulating user accounts, extracting sensitive information, and establishing persistent backdoors. Windows Post-Exploitation. Learn advanced techniques for maintaining access and escalating privileges on compromised Windows systems, including navigating file systems, manipulating user accounts, extracting sensitive information, and establishing persistent backdoors. The OSEP exam is a challenging, proctored 48-hour assessment designed to evaluate advanced penetration testing skills in a real-world environment. You’ll demonstrate your ability to identify, exploit, and report on vulnerabilities, culminating in the development of custom exploits. The OSEP exam is entirely hands-on. You will be given access to a target network and tasked with compromising it using various techniques. The PEN-300 course is ideal for experienced penetration testers and security professionals seeking to master advanced penetration testing methodologies, ultimately earning the OSEP certification. Completion of PEN-200 (Penetration Testing with Kali Linux) is recommended for PEN-300. A strong understanding of operating systems, networking, and scripting (e.g., Python, Bash) is also recommended. Familiarity with concepts and techniques from PEN-200 is important for success in this course. Upon completing PEN-300 and passing the OSEP exam, you’ll have mastered advanced penetration testing skills.
