OffSec

OffSec OSCE3

OSCE3 · Status not verified

Historical catalog data — verify exam details and pricing with the issuer. Salary premiums are estimates, not a promise of a raise.

Add to My Portfolio
Exam cost
$0 USD (historical estimate)
Questions · time · passing score
The OSCE3 is an achievement certification. Its components are:
Prerequisites
To achieve the OSCE3, candidates must first earn the OSWE (OffSec Web Expert), OSEP (OffSec Experienced Penetration Tester), and OSED (OffSec Exploit Developer) certifications. Each of these component certifications has its own prerequisites: OSWE (WEB-300): Intended for experienced penetration testers. Learners should be familiar with basic web technologies and scripting languages (JavaScript, PHP, Java, C#) and have a high level of experience in offensive techniques taught in PEN-200 (OSCP equivalent knowledge) 1. OSEP (PEN-300): Intended for those with a strong foundation in offensive security. Students are expected to have completed PEN-200 and passed OSCP+, or possess equivalent knowledge and experience. Learners should be comfortable with operating systems, TCP/IP networking, scripting (e.g., Python or Bash), and basic exploit development 2. OSED (EXP-301): Intended for those with a strong understanding of programming concepts (C/C++), Windows internals, and assembly language. Prior experience with reverse engineering and exploit development is highly recommended 3.
Estimated salary premium
20–20% (historical estimate)
Renewal requirements
120-year cycle · 120 CPE/CEU credits per year
Difficulty
Not rated

Domains covered

  • ** Upon achieving the OSCE3
  • professionals will have demonstrated mastery in a comprehensive range of advanced offensive
  • security skills
  • including:
  • Advanced web application vulnerability identification and exploitation
  • Advanced client-side and server-side attacks
  • Web application vulnerability chaining
  • Analyzing and exploiting deserialization vulnerabilities
  • Advanced information gathering and enumeration for web applications
  • Stack buffer overflows and SEH overflows
  • Shellcode creation and optimization
  • Bypassing ASLR and DEP protections

Where this credential fits

MyCyberPath career mappings are planning guidance, not universal employer requirements.

Compare this certification

Recent catalog changes

    No recent changes are recorded for this credential.

    Browse all certification updates

    Sources and verification

      No reviewed source links are attached. Confirm current requirements with the issuer.