OffSec Web Expert (OSWE)
The OffSec Web Expert certification demonstrates your ability to identify, exploit, and document complex security vulnerabilities in a realistic environment.
The OSWE certification exam simulates a real-world network containing several vulnerable systems. Participants must attack these computers and provide evidence of a successful attack. The goal of this certification task is to demonstrate creative thinking and the ability to successfully breach the target systems.
- Exam duration: 47 hours and 45 minutes
- Documentation: an additional 24 hours afterward to submit the exam report
- Format: practical, proctored hands-on exam in a private VPN environment
- Maximum score: 100 points
- Passing score: 85 out of 100 points
- Exam environment: multiple vulnerable target systems with individual exam objectives
- Exam tasks:
- Identification and analysis of complex vulnerabilities
- Exploitation of identified vulnerabilities
- Chaining multiple vulnerabilities
- Development of your own functional exploits or PoC scripts
- Demonstration of successful compromise
- Exam report: All attack steps, commands used, results, and self-developed exploits must be documented in such a way that a technically skilled person can reproduce the procedure step by step.
A unique feature of the OSWE exam: You demonstrate your expertise by linking complex vulnerabilities into an attack chain and developing your own, automatically executable exploit from it.
Certification
Upon successful completion of the exam, you will receive the OffSec Web Expert (OSWE) certification, as well as a digital certificate and badge from OffSec. The OSWE certification is valid indefinitely and does not need to be renewed.
Comprehensive preparation