How long is the course and how is it scheduled?

The program runs about four months of mentor-led, hands-on sessions, scheduled on weekends or weekday evenings to fit around work or study. New batches open regularly, and you can enrol at nuexus.com/trainings or via nuexus.com/contact.

Is this course beginner friendly?

OSCP is best described as intermediate. You do not need prior penetration testing experience, but you should be comfortable with Linux, networking, and a little scripting before you start. If your fundamentals are light, our trainers will point you to the right groundwork so you can keep pace.

Can I take it online or does it have to be onsite?

Both. You can join online from anywhere in the world, or attend onsite in Islamabad. We offer batch classes and 1-on-1 training, so you can pick the format and pace that suits you.

Do I get a certificate, and is the OSCP exam included?

You receive a NUEXUS completion certificate when you finish the course. The OSCP certification itself is a separate OffSec credential earned by passing their 24-hour practical exam, which is purchased directly from OffSec and is not part of the course fee.

What will I actually build and practise?

This is a lab and project based course. You spend most of your time in hands-on labs enumerating, exploiting, and escalating privileges on real target machines, pivoting through networks, touching Active Directory attack paths, and writing professional penetration test reports, exactly the workflow the OSCP exam tests.

Does the course guarantee I will pass the exam or get a job?

No, and we will always be honest about that. The course is exam-aligned and job-focused, and we work to maximise your chances, but we cannot guarantee an exam pass or employment. What we commit to is rigorous, practical training and mentor support throughout.

Cybersecurity4 monthsPrepares for OffSec OSCP (PEN-200)

OSCP (PEN-200) Offensive Security Certified Professional

Become a hands-on penetration tester who can compromise real networks and prove it under exam conditions.

See pricing & enroll

In this programme

Mentor-led live sessions, online or onsite, in batch or 1-on-1
Hands-on labs and real-world projects, not slides alone
Recordings of your own sessions to revisit anytime
Exam-aligned study material and practice questions

Duration4 months

LevelIntermediate

FormatOnline or onsite, 1-on-1 or batch

CertificateNUEXUS certificate on completion

Target examOSCP+ (PEN-200)

LabsHands-on, real environment

Overview

What you will be able to do

This is an intensive, lab-heavy program built around OffSec's PEN-200 syllabus, the course behind the industry-respected OSCP certification. You learn offensive security the way it is actually practiced: enumerate a target, find a foothold, escalate privileges, and pivot deeper into a network, all in a live lab rather than through slides. Over roughly four months of mentor-led, hands-on sessions you build the manual tradecraft and the disciplined "try harder" methodology that OSCP is known for, and you finish exam-ready for the 24-hour practical assessment. It is delivered online from anywhere or onsite in Islamabad, in a batch or 1-on-1 format.

Outcomes

Run structured enumeration and reconnaissance against hosts, services, and web applications

Find and exploit common vulnerabilities to gain an initial foothold, including web, service, and client-side attacks

Perform privilege escalation on both Linux and Windows targets using manual techniques

Pivot and move laterally through segmented networks, including exposure to Active Directory attack paths

Adapt, fix, and use public exploits responsibly, and build simple tooling in Bash and Python

Document your work in a clear, professional penetration test report as required by the OSCP exam

Who it is for

Aspiring penetration testers and red teamers who want a rigorous, practical entry into offensive security
IT, network, or system administrators moving into a security or ethical hacking role
SOC analysts and blue teamers who want to understand attacks from the attacker's side
Security enthusiasts and CTF players ready to formalise their skills toward the OSCP
Graduates and career changers targeting a recognised, hands-on offensive security credential

Prerequisites

Solid comfort with the Linux command line and general networking (TCP/IP, ports, services, DNS)
Basic scripting familiarity, for example Bash and a little Python, is strongly recommended
A machine able to run Kali Linux (natively or in a VM) with a stable internet connection
Persistence and self-discipline, since OSCP rewards methodical, independent problem solving

Skills you will gain

Information Gathering

Vulnerability Scanning

Web Application Attacks

SQL Injection

Client-Side Attacks

Locating & Fixing Public Exploits

Antivirus Evasion

Password Attacks

Windows Privilege Escalation

Linux Privilege Escalation

Port Redirection & SSH Tunneling

The Metasploit Framework

Active Directory Attacks

Lateral Movement

Report Writing

Enrollment

Pricing and training modes

Every mode is mentor-supported and hands-on. Pick how you want to learn; the price and what's included update as you choose.

Choose your training mode

Quoted per engagement

Private mentorAny start dateFlexible hoursPersonalised curriculum

Live mentor-led training (4 months), online or onsite
Pace and focus tuned to you, per participant
Doubt-clearing and revision built in

Total

On request

Enroll now Request more info

Course curriculum

What you will cover

9 parts, 36 topics, with hands-on labs and scenarios throughout.

The penetration testing lifecycle and the OffSec approachSetting up and working effectively in Kali LinuxReport-taking, note discipline, and organising findingsLegal, ethical, and scoping fundamentals for engagements

In your enrollment

What's included in your training

Everything you need to learn the skill and move toward the certification, in one programme.

Manifest

01Mentor-led live sessions, online or onsite, in batch or 1-on-1

02Hands-on labs and real-world projects, not slides alone

03Recordings of your own sessions to revisit anytime

04Exam-aligned study material and practice questions

05Doubt-clearing and revision support through the program

06A verifiable NUEXUS completion certificate

07Career and next-step guidance after you finish

Hands-on lab

Learn by doing, in a real environment

OSCP is won in the lab. The whole program is time on target in a large practice network.

Fig.The lab work behind OSCP (PEN-200) Offensive Security Certified Professional, run in a live environment rather than a slide deck.

In the lab

Dozens of practice machines from easy to hard

Full Active Directory attack chains and pivoting

Manual Linux and Windows privilege escalation

Exam-style report writing on every box you own

Where it takes you

Career outcomes

The roles this training points toward, and what the wider market pays for them.

Job rolesPenetration TesterRed Team OperatorOffensive Security EngineerSecurity ConsultantExploit Developer

Typical salary range (global)

EntryUSD 60,000 to 90,000

MidUSD 90,000 to 130,000

SeniorUSD 130,000 to 170,000

SourceGlobal averages from Glassdoor and PayScale, 2025. Actual pay varies by country, employer and experience.

Certification path

Two credentials, and they are not the same thing

This course prepares you for the OffSec OSCP certification (PEN-200), earned by passing a 24-hour hands-on practical exam in which you compromise machines in an isolated network and then submit a professional penetration test report. The OSCP exam is challenging and deliberately practical; NUEXUS trains you to be exam-ready and maximises your chances, but the exam is taken directly with OffSec and no course can guarantee a pass. The exam attempt itself is purchased separately from OffSec and is not included in the training fee.

NUEXUS training certificate

Issued by NUEXUS when you complete the course. Anyone can confirm it is genuine on our verification portal.

Verify a NUEXUS certificate

OffSec OSCP (PEN-200)

Earned separately by passing the official exam. This credential is issued and verified by the certification body itself, through its own portal, not by NUEXUS.

Verification: with the certification body directly

Certification exam at a glance

ExamOSCP+ (PEN-200)

Questions3 standalone machines (60 points) plus a 3-machine Active Directory set (40 points)

FormatFully hands-on, live-proctored exam plus a professional penetration-test report

Duration23 hours 45 minutes of exam time, then 24 hours to submit the report

Passing score70 out of 100 points (bonus points were removed in November 2024)

DeliveryOffSec proctored exam over a private VPN

NoteAn exam attempt comes with the official OffSec course and lab bundle, purchased separately from OffSec. Passing now earns the OSCP+ designation, which is valid for three years; the underlying OSCP does not expire. Even when NUEXUS arranges your exam voucher, the resulting certification is issued and verified by the certification body directly.

Questions