Offensive Security Professional
Develop a systematic assessment method across networks, applications, cloud services and cryptographic controls. Study the mechanism, interpret the evidence and explain the remediation.
PreparationRecommended preparation: Cyber Security Foundation or equivalent networking, operating-system and HTTP foundations.
What you will work towards
- Build an asset and service exposure inventory
- Interpret access, vulnerability and detection evidence
- Assess web application trust boundaries
- Explain wireless, cloud and cryptographic controls
A clear sequence for your study
- 01
Discovery & exposure
Modules 01–03 · 2h 45m estimated study
- 02
System controls & human factors
Modules 04–07 · 3h 25m estimated study
- 03
Network visibility & resilience
Modules 08–11 · 3h 35m estimated study
- 04
Web assessment methodology
Modules 12–15 · 4h 15m estimated study
- 05
Wireless, cloud & cryptography
Modules 16–18 · 3h 5m estimated study
Concepts, evidence & practice
Footprinting and Reconnaissance
Build an evidence-based inventory of an authorised organisation’s exposed assets without mistaking public information for assessment permission.
Network Scanning and Service Discovery
Interpret host, port and service observations while accounting for filtering, scan scope and uncertainty.
Service Enumeration and Exposure Review
Understand how exposed services reveal configuration and why information disclosure must be assessed against intended access.
System Security and Access Assessment
Review identity, account permissions and endpoint controls through safe examples of system access assessment.
Vulnerability Assessment Workflow
Plan, interpret and report a vulnerability assessment while separating scanner output from verified findings.
Malware Threats and Analysis
Study malware behaviour through inert examples, supplied analysis reports and the controls needed for safe investigation.
Social Engineering Awareness and Defence
Understand deceptive requests and build verification procedures that protect people without collecting real credentials.
Packet Analysis and Sniffing
Interpret packet captures and explain the limits of network visibility without intercepting other people’s traffic.
Denial of Service and Resilience
Study service exhaustion conceptually and build a resilience plan using bounded load scenarios and recorded telemetry.
Session Security and Hijacking Concepts
Explain session tokens, lifecycle controls and the distinction between a stolen identity token and an authorisation decision.
IDS, Firewalls and Honeypot Assessment
Compare firewall, IDS and honeypot roles, then assess their coverage through policies and recorded events.
Burp Suite for Authorised Web Testing
Use Burp Suite as an evidence tool in an authorised dummy web application, with clear scope and manual request reasoning.
Web Server Security Assessment
Review web-server exposure, deployment configuration and operational controls through supplied evidence.
Web Application Assessment Methodology
Apply a structured web-application assessment to identity, data boundaries, input handling and business rules.
SQL Injection Assessment and Prevention
Understand how a database query boundary fails and how parameterisation, permissions and verification prevent SQL injection.
Wireless Network Security
Assess wireless configuration and client trust through documented settings and supplied traces, without disrupting nearby networks.
Cloud Computing and Security Controls
Explain cloud service models and map identity, configuration and data controls to the responsible owner.
Cryptography and Key Management
Distinguish encryption, hashing and signatures, then connect cryptographic protection to key management and application design.