OffSec OSWE

Exam cost

$1,749 USD (historical estimate)

Questions · time · passing score

47 hours and 45 minutes to complete the exam. Minimum score of 85 points to pass out of a maximum of 100 points. Exam consists of several target machines that must be compromised. Requires a professional report describing the exploitation process for each target, including source code of custom exploits. Objective is to provide a single functional script that exploits multiple vulnerabilities on each exam machine without user interaction.

Prerequisites

While there are no formal certification prerequisites, OffSec strongly recommends that candidates possess: Comfort reading and writing at least one coding language Familiarity with Linux Ability to write simple Python / Perl / PHP / Bash scripts Experience with web proxies General understanding of web attack vectors, theory, and practice

Estimated salary premium

20–20% (historical estimate)

Renewal requirements

Cycle not verified · CPE/CEU requirement not verified

Difficulty

Not rated

Domains covered

• ** Analyzing and exploiting deserialization Remote Code Execution (RCE) vulnerabilities
• Mastering advanced web security methodologies such as fuzzing
• static and dynamic analysis
• and manual code review
• Practicing session hijacking techniques to gain unauthorized access to sensitive data and functionality
• Exploiting RCE vulnerabilities using dedicated virtual machines
• Identifying
• exploiting
• and reporting real-world vulnerabilities in live lab systems
• Developing custom exploits for complex web application vulnerabilities
• Advanced SSRF exploitation
• Persistent XSS exploitation

Where this credential fits

MyCyberPath career mappings are planning guidance, not universal employer requirements.

• Application Security →

Recent catalog changes

No recent changes are recorded for this credential.

Sources and verification

No reviewed source links are attached. Confirm current requirements with the issuer.