OSAOffensive Security Academy
BeginnerIntermediate

Jr. Penetration Tester

The full offensive security path — reconnaissance, scanning, exploitation, privilege escalation, Active Directory and professional reporting.

17 modules 84 rooms 621 tasks 0 completed
Course progress 0% Not started
Course roadmap

17 modules, in order

Each module builds on the last. Rooms can be taken out of order — progress is tracked per task either way.

01 Start Your Cyber Security Journey 3 rooms · 15 tasks 0%
  1. Offensive Security Intro 5 tasks
  2. Defensive Security Intro 4 tasks
  3. Search Skills 6 tasks
02 Penetration Testing Foundation 5 rooms · 40 tasks 0%
  1. Guided Pentest: Web 6 tasks
  2. Guided Pentest: Infrastructure 7 tasks
  3. Dive Into Pentesting 8 tasks
  4. Cyber Kill Chain 9 tasks
  5. Pentration Testing Framework 10 tasks
03 Network Reconnaissance 4 rooms · 31 tasks 0%
  1. Passive Reconnaissance 9 tasks
  2. Active Reconnaissance 7 tasks
  3. Protocols and Servers 8 tasks
  4. Protocols and Servers 2 7 tasks
04 Nmap 4 rooms · 32 tasks 0%
  1. Nmap Live Host Discovery 9 tasks
  2. Nmap Basic Port Scans 8 tasks
  3. Nmap Advanced Port Scans 9 tasks
  4. Nmap Post Port Scans 6 tasks
05 Web Applications Fundamentals Security 5 rooms · 37 tasks 0%
  1. Walking An Application 7 tasks
  2. Content Discovery 7 tasks
  3. Modern Web Stacks 7 tasks
  4. Web Server Attacks -I 8 tasks
  5. Web Server Attacks-II 8 tasks
06 Brup Suite 5 rooms · 54 tasks 0%
  1. Burp Suite: The Basics 15 tasks
  2. Burp Suite: Repeater 9 tasks
  3. Burp Suite: Intruder 13 tasks
  4. Burp Suite: Other Modules 11 tasks
  5. Burp Suite: Extensions 6 tasks
07 Web Application Vulnerabilities I 5 rooms · 38 tasks 0%
  1. SQL Injection Introduction 9 tasks
  2. CSRF Introduction 8 tasks
  3. XSS Introduction 9 tasks
  4. Intro to SSRF 5 tasks
  5. IDOR 7 tasks
08 Web Application Vulnerabilities II 5 rooms · 35 tasks 0%
  1. Session Management 7 tasks
  2. Broken Authentication 7 tasks
  3. File Inclusion 8 tasks
  4. Command Injection 6 tasks
  5. API Pentesting 7 tasks
09 Vulnerability Knowledge 8 rooms · 52 tasks 0%
  1. Understanding Vulnerability Databases 7 tasks
  2. Vulnerability Scanning Tools 7 tasks
  3. Basic Vulnerability Identification Techniques 9 tasks
  4. NoScope: Finding RCE 4 tasks
  5. n8n: CVE-2025-68613 5 tasks
  6. AD: BadSuccessor 7 tasks
  7. CVE-2026-46300: Fragnesia 6 tasks
  8. CVE-2026-42945: Nginx Rift 7 tasks
10 OWASp TOP 10 3 rooms · 16 tasks 0%
  1. OWASP Top 10 2025: IAAA Failures 6 tasks
  2. OWASP Top 10 2025: Application Design Flaws 6 tasks
  3. OWASP Top 10 2025: Insecure Data Handling 4 tasks
11 Password Attacks 4 rooms · 22 tasks 0%
  1. Phishing Basics 7 tasks
  2. Hydra 2 tasks
  3. Introduction to Wordlists 6 tasks
  4. Password Cracking 7 tasks
12 Metasploit and Exploitation 7 rooms · 52 tasks 0%
  1. Metasploit: The Basics 6 tasks
  2. Metasploit: Scanning and Exploitation 7 tasks
  3. Metasploit: Post-Exploitation 6 tasks
  4. Metasploit: Payload Generation 8 tasks
  5. Exploitation and Weaponisation 8 tasks
  6. Shells & Listeners Fundamentals 9 tasks
  7. Shell Payload Generation & Delivery 8 tasks
13 Privilege Escalation 5 rooms · 39 tasks 0%
  1. Host-Server Configuration Reviews 9 tasks
  2. Linux Privilege Escalation: Enumeration 7 tasks
  3. Linux Privilege Escalation: Basics 8 tasks
  4. Linux Privilege Escalation: Automation 6 tasks
  5. Windows Privilege Escalation 9 tasks
14 Active Directory Security Testing Basics 7 rooms · 51 tasks 0%
  1. Active Directory Basics 12 tasks
  2. Intro to AD Authentication 7 tasks
  3. Intro to AD Breaching 8 tasks
  4. AD: Basic Enumeration 6 tasks
  5. AD: Authenticated Enumeration 6 tasks
  6. Intro to Credential Harvesting 5 tasks
  7. Intro to AD Lateral Movement 7 tasks
15 Specialized Domains 6 rooms · 47 tasks 0%
  1. Wireless Security 8 tasks
  2. Mobile Application Security 8 tasks
  3. Cloud Security Fundamentals 8 tasks
  4. LLM Pentesting 8 tasks
  5. The Blue Team Perspective 8 tasks
  6. DevSecOps Basics 7 tasks
16 Python Scripting Basic 4 rooms · 28 tasks 0%
  1. Python: Simple Demo 5 tasks
  2. Python: Core Concepts 7 tasks
  3. Python: Building Scripts 7 tasks
  4. Python: Pentesting Scripts 9 tasks
17 Pentesting Methodologies and Reporting 4 rooms · 32 tasks 0%
  1. Threat Modeling for Pentesters 8 tasks
  2. Planning and Scoping 9 tasks
  3. Writing Pentest Reports 7 tasks
  4. Re-Testing 8 tasks