This intensive bootcamp supports OSCP+ candidates working through OffSec's PEN-200 course. Over five guided days you build a repeatable penetration testing method, drill enumeration, exploitation, privilege escalation and Active Directory attacks, then practise managing exam time and writing the report. The goal is to reach exam day with a steady method rather than a bag of tricks.
The essentials
Publisher : OffSec
Certification : OffSec Certified Professional (OSCP+)
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : 23 h 45 min hands-on exam · report within 24 h · 70 of 100 points to pass
Exam voucher : OSCP+ exam: exam attempts are only sold within OffSec plans (Learn One, Learn Unlimited…). Our bootcamp prepares you for the exam; the OffSec subscription is purchased separately — contact us.
Adopt a structured, repeatable penetration testing method
Gather information and enumerate services and vulnerabilities efficiently
Exploit web applications, including SQL injection, and run client-side attacks
Find, adapt and fix public exploits
Escalate privileges on Windows and Linux
Compromise an Active Directory environment end to end
Write a professional report that meets exam requirements
Program
Method and reporting
Offensive security fundamentals
Note-taking and report writing for penetration testers
Reconnaissance
Active and passive information gathering
Vulnerability scanning and its limits
Web and client-side attacks
Introduction to web applications
Common web application attacks
SQL injection
Client-side attacks
Exploits
Locating public exploits
Adapting and fixing exploits
Privilege escalation and Active Directory
Windows and Linux privilege escalation
Active Directory enumeration and attacks
Timed mock exam
Prerequisites
Solid networking foundations (TCP/IP, common services)
Comfort with the Linux and Windows command line
Basic scripting (Bash, Python or PowerShell)
An active PEN-200 subscription with OffSec is strongly recommended
Target audience
Junior penetration testers aiming for OSCP+
SOC analysts and sysadmins moving to offensive work
Candidates who failed a first attempt and want to rebuild their method
Red teams upskilling new members
The exam
The OSCP+ exam is fully hands-on and remotely proctored: 23 hours 45 minutes to compromise the targets, then 24 hours to submit a PDF report. It is worth 100 points: three standalone machines at 20 points each (initial access plus privilege escalation) and a three-machine Active Directory set worth 40 points; you need 70 to pass. AI chatbots and LLMs, automatic exploitation tools and mass vulnerability scanners are banned, and Metasploit may be used on one target only. Since 1 November 2024, passing earns OSCP+, valid for three years, plus the non-expiring OSCP.
Preparation tips
Go for the Active Directory set first: it is worth 40 points
Document everything as you go with screenshots and proof so the report is not rebuilt at the end
Plan breaks and sleep: a 24-hour exam is a marathon, not a sprint
Frequently asked questions (FAQ)
What is the difference between OSCP and OSCP+?
It is the same exam. Since 1 November 2024, successful candidates receive OSCP+, which expires after three years, and OSCP, which never expires.
Does the bootcamp replace the PEN-200 course?
No. Securevalley is not an OffSec partner: access to the PEN-200 course, its labs and the exam attempt comes from OffSec. The bootcamp structures your preparation and gives you instructor-led practice.
Can I use ChatGPT during the exam?
No. AI chatbots and large language models are explicitly banned during the exam. Practise without them during preparation so your workflow does not depend on them.
What level do I need before starting?
OffSec sets no formal prerequisites but recommends solid networking foundations and basic familiarity with Linux and Windows.
How long does preparation take?
It depends heavily on your background. OffSec's basic package includes 90 days of lab access, and many candidates schedule the bootcamp midway through to correct course. Others book it after a failed attempt to rebuild their approach.