OSEP — Evasion Techniques & Breaching Defenses (PEN-300)
Bypass EDRs. Breach modern defenses.
OSEP is the natural step after OSCP for aspiring red-team operators. Process injection, custom shellcode, EDR bypass, advanced AD exploitation — Macksofy's bootcamp uses real CrowdStrike, SentinelOne and Defender environments.
What is the OSEP certification?
The Offensive Security Experienced Penetration Tester (OSEP, OffSec) is an advanced credential in evading defences, bypassing antivirus/EDR, and compromising hardened Active Directory environments. Macksofy runs an OSEP exam-prep bootcamp for experienced pentesters in India.
Outcomes — concrete, measurable.
Every capability you walk away with, mapped to the cybersecurity domains and the career roles they unlock in India + UAE.
Build custom payloads that bypass commercial EDRs
- Red Team Operator₹25–40 LPA
- Adversary Emulation Engineer₹20–35 LPA
Is OSEP right for you?
- OSCP holders moving into red team
- Senior penetration testers
- Adversary emulation engineers
What we assume you know
- OSCP or equivalent practical experience
- C# / PowerShell scripting comfort
18 modules. 90-day OffSec lab + 48-hour exam.
Search modules and topics, and switch between Split and Track views to see how every module flows into the next.
- Windows API & PE format internals
- x64 calling conventions
- Writing tooling in C# and PowerShell
- VBA macro payloads
- DDE attacks
- Excel 4.0 macros (XLM)
- JScript / VBScript payloads
- HTA & WSF payload delivery
- ScriptControl abuse
- CreateRemoteThread + LoadLibrary
- Reflective DLL loading
- Process hollowing
- Thread-local-storage callbacks
- Static signature analysis
- PE structure modification
- Custom packers
- Dynamic / behavioural evasion
- AMSI bypass techniques
- ETW patching
- AppLocker bypass paths
- WDAC bypass
- Living-off-the-land binaries (LOLBINs)
- Domain fronting concepts
- Proxy / outbound NTLM authentication
- DNS tunneling
- Persistence on Linux endpoints
- Loadable kernel module abuse (concept)
- Pivoting from Linux
- Restricted desktop escapes
- Citrix / RDP breakouts
- Group-Policy enforcement bypass
- LSASS dumping techniques
- DPAPI secrets
- Credential Guard considerations
- Mimikatz advanced workflows
- Pass-the-hash / pass-the-ticket
- Overpass-the-hash
- Token impersonation
- WMI, WinRM, PsExec, DCOM
- SSH agent forwarding abuse
- Trust relationships on Linux
- Pivoting via misconfigured services
- xp_cmdshell exploitation
- Linked-server attacks
- Trustworthy database abuse
- MSSQL Kerberos attacks
- Kerberos delegation — unconstrained, constrained, RBCD
- Shadow Credentials (msDS-KeyCredentialLink)
- ADCS attacks (ESC1-ESC11)
- Forest & domain trust attacks
- End-to-end goal-based engagement
- EDR-bypass case studies
- MITRE ATT&CK mapping of TTPs
- Live bypass walkthroughs
- Custom payloads in real EDR environments
- Detection-engineering handoff
- Two mock exams with mentor review
- Time-allocation playbook
- Professional report deliverable
The same toolkit our consultants use on real engagements.
Not academic exercises. The tools below are exactly what Macksofy consultants run on paying client engagements every week — so the muscle memory you build in class carries straight into your first job.
What roles open up after you complete this.
| Role | Salary band | Experience |
|---|---|---|
| Red Team Operator | ₹25–40 LPA | 5+ years |
| Adversary Emulation Engineer | ₹20–35 LPA | 4+ years |
We don’t promise jobs. We open doors.
Macksofy's placement desk works directly with 80+ hiring partners across India and the UAE. Resume coaching, mock interviews and direct intros included.
- 1:1 resume + LinkedIn rewrite with our hiring desk
- Mock interviews with active practitioners
- Direct intros to BFSI, fintech and Big-4 partners
- UAE placement support (Dubai, Abu Dhabi)
Things students ask before enrolling.
OSCP — Penetration Testing with Kali Linux (PEN-200)
Try harder. Pass with proof.
OSWE — Advanced Web Attacks & Exploitation (WEB-300)
White-box web exploitation. Source-code-driven.
OSED — Windows User Mode Exploit Development (EXP-301)
Develop your own Windows exploits.
Macksofy delivers this work to the following standards and regulator requirements. Definitions and controls are sourced from the issuing bodies below.
Get a fixed-price proposal in 48 hours.
Tell us about your security need — pentest, audit, training or a wider engagement. A senior consultant will reply within a few business hours.
- CERT-In Empanelled
- EC-Council ATC · CompTIA Authorized
- Thousands of professionals trained
- India + UAE engagements