OSCP Exam Guide: What to Expect and How to Prepare

Preparing for the OSCP is a big commitment. Maybe you’re working toward your first penetration testing role, or maybe earning your OSCP has been on your list for years. Either way, you’ve probably spent more than a few evenings working through labs, troubleshooting exploits, and wondering if you’re ready for the exam.

The OSCP has a reputation for being challenging, and for good reason. But here’s something worth remembering: nobody starts out knowing everything. Since 2006, OffSec has helped tens of thousands of security professionals earn their OSCP. Many struggled with concepts that eventually clicked, questioned whether they were ready, or needed more than one attempt to pass. What mattered was learning from those challenges and continuing to build their skills.

You don’t have to figure everything out on your own. Plenty of people have been where you are now, and there’s a lot you can learn from their experience. This guide covers what to expect on exam day, how to make the most of your preparation, and practical advice to help you approach the OSCP with confidence.

The OSCP exam puts your penetration testing skills to the test in a hands-on environment. You’ll work through a private network of vulnerable machines, find ways to compromise systems, and document your approach in a technical report.

Pass the exam, and you’ll earn both the OSCP and OSCP+ certifications. Your OSCP is valid for life, while OSCP+ is valid for three years and can be renewed through eligible options.

Want to understand the difference? Check out our OSCP+ overview.

The more you know about the exam format ahead of time, the fewer surprises you’ll have on exam day. Here’s a breakdown of what you’ll be working with, how much time you’ll have, and what happens after the practical assessment.

IMPORTANT: Make time to read the OSCP+ Exam Guide well before exam day. It covers the official rules and requirements, so you know exactly what’s expected.

During the exam, you’ll need to investigate potential vulnerabilities, decide which approaches to pursue, and adapt when something doesn’t work. Gaining initial access is just the beginning. You’ll also need to investigate privilege escalation opportunities, and in the Active Directory environment, information from one machine may help you compromise another.

The good news? These are the same kinds of decisions you’ve been practicing in the labs. OffSec’s Student Mentors share helpful advice on enumeration, organizing findings, and approaching challenges in their OSCP exam experience article. It’s worth a read as you prepare, alongside the current Exam Guide for the latest rules.

There are no formal prerequisites for taking the standalone OSCP exam, but you’ll want a solid foundation before jumping in. We recommend familiarity with TCP/IP networking, basic scripting, and working in Linux and Windows environments.

If you’ve been working through PEN-200: Penetration Testing with Kali Linux and its challenge labs, you’re already building the technical skills and methodology you’ll need for the exam.

Of course, some topics will come more naturally than others. Maybe you’re comfortable navigating Linux but still getting your footing with Windows environments. That’s normal. Pay attention to where you’re getting stuck, revisit the material, and give yourself extra practice where you need it. The goal isn’t to spend equal time on everything. It’s to build confidence in the areas that need the most work.

For more guidance on getting started, check out our guide to preparing for your first OffSec certification.

Not every study session will end with a rooted machine. Some days, you’ll make great progress. Other days, you’ll spend hours troubleshooting an exploit or chasing an approach that goes nowhere. That’s part of the process.

What matters is what you take away from each session. Understanding why something didn’t work can be just as valuable as getting it right, especially when you use that knowledge to approach the next challenge differently.

Here are six ways to make the most of your OSCP preparation:

• Build a realistic study plan that fits your schedule and helps you stay consistent.
• Learn from setbacks and know when to change your approach.
• Take better notes so you can revisit techniques without starting from scratch.
• Practice under exam conditions to prepare for the time pressure, reporting, and decision-making.
• Connect with the OffSec community to share experiences and learn from others.
• Get comfortable documenting your work so you’re ready for the exam’s reporting requirements.

Start with the PEN-200 course material and module labs, then work your way through the capstone exercises and challenge labs. Each step gives you a chance to put what you’ve learned into practice and identify where you need more work.

When you hit a roadblock, take note of what’s giving you trouble. Go back to the relevant material, then try the machine again. Can you get further without hints? Can you explain why each step works? Those are good signs that you’re building a stronger understanding, not just memorizing an exploit.

Need help organizing your study time? 

OffSec offers 12-week and 24-week learning plans to give your preparation some structure. Choose a pace you can realistically maintain. Consistent practice will serve you better than an ambitious schedule you can’t stick to.

We’ve all been there. You’ve spent hours on a machine, tried everything you can think of, and still haven’t found a way forward. It’s frustrating, especially when you’ve carved out precious study time around work and everything else life throws at you.

But here’s where OffSec’s Try Harder philosophy comes in. It doesn’t mean endlessly repeating the same approach or refusing to take a break. It means staying curious, questioning your assumptions, trying something different, and learning from what didn’t work. Sometimes the smartest move is to step away and come back with fresh eyes.

During your preparation, don’t hesitate to ask for help understanding a concept or compare approaches with other learners. Building the judgment to know when to dig deeper, change direction, or seek a fresh perspective is part of becoming a better penetration tester.

And remember, not every OSCP journey ends with a pass on the first attempt. Cybersecurity consultant Akas Wisnu Aji earned his OSCP+ after two unsuccessful attempts. He reassessed his preparation, adjusted his approach, and came back stronger. Read his story for a firsthand look at what persistence and learning from setbacks can accomplish.

For more on the mindset behind the motto, explore what it really means to Try Harder.

Trust us, you don’t want to spend valuable exam time trying to remember how you solved a similar problem three weeks ago.

Build the habit of taking clear, organized notes as you practice. Record the commands you used, the results you got, and, most importantly, why you took each step. Don’t forget to document approaches that didn’t work, especially when they taught you something useful.

Then put your notes to the test. Can you revisit a machine and follow your own documentation without getting stuck? If something’s missing or unclear, fix it now. Your future self (especially the one sitting for a 24-hour exam) will thank you.

For more practical advice, check out our OSCP study tips.

Knowing how to exploit a machine is one thing. Doing it under time pressure, while keeping track of your findings and managing your energy, is another.

Before exam day, give yourself a practice run under timed conditions. Work through machines without relying on hints, document your findings as you go, and practice writing a report afterward. It’s a good way to spot gaps in your process before they matter.

Get comfortable knowing when to move on, too. If you’re stuck on one target, switching to another can be more productive than spending hours chasing the same dead end. And don’t forget to plan for meals, breaks, and rest. You’ve got a long exam ahead of you, and staying focused is part of the challenge.

For more advice on simulating exam conditions, check out our OSCP+ preparation guidance.

Not everyone understands why getting a shell after hours of troubleshooting is cause for celebration. But in the OffSec Discord, you’ll find plenty of people who do.

Connect with other learners preparing for their OSCP, swap study tips, ask questions, and learn from people who’ve already been through the process. Sometimes hearing how someone else worked through a difficult concept is exactly what you need to get unstuck.

And the community doesn’t disappear once you’ve passed. Plenty of OSCP holders stick around to share what they’ve learned, support new learners, and celebrate each other’s wins. Before long, you might be the one helping someone tackle a challenge you once struggled with.

Just remember to keep the conversation focused on learning. Exam content must remain confidential, and sharing or requesting exam hints through Discord or other platforms is prohibited.

Finding a way into a system is only part of the OSCP exam. You also need to document your work clearly enough that another technically competent person could reproduce your steps.

Capture screenshots, commands, and other required evidence as you go. The last thing you want is to finish the practical exam and realize you’re missing something important for your report.

Before exam day, familiarize yourself with the reporting requirements in the OSCP+ Exam Guide. Missing evidence can affect your score, and you won’t be able to add anything once your report is submitted.

Preparing for the OSCP takes time, patience, and plenty of persistence. When you hit a frustrating stretch in the labs, remember why you started. Whether you’re working toward your first penetration testing role, looking to advance your career, or simply ready to prove what you can do, every challenge you work through brings you closer to that goal.

And the opportunities can extend well beyond the certification itself. For Mihai, earning the OSCP helped him land his first penetration testing job. He later went on to pursue the OSWE to specialize in web application security. Your path might look different, but the skills you’re building now can open doors you haven’t considered yet.

So keep practicing, stay curious, and lean on the community when you need it. You don’t have to know everything going into the exam. You need a solid methodology, the ability to adapt when things don’t go as planned, and the confidence to put your skills to the test.

Ready to take the next step?

Explore PEN-200 and start preparing for your OSCP

Still have questions about the OSCP exam? Here are answers to a few of the most common ones.