IntermediateCEH v13
Think like an attacker, defend like a professional: the benchmark ethical hacking certification, now powered by AI.
5 days · 40 h✓ Voucher included
From21,900 MAD
OffSec
OSCP+ Training in Morocco
OffSec Certified Professional (OSCP+) — PEN-200
Try Harder, but not alone: the most demanding pentest certification on the market, prepared with a coach who guides you all the way to the final report.
- Vendor
- OffSec
- Exam code
- PEN-200
- Duration
- 10 days · 80 hours
- Level
- Advanced
Overview
OffSec's OSCP (formerly Offensive Security) is the penetration testing certification technical teams respect most, precisely because it has no multiple-choice questions. To earn it you have to compromise real machines over almost 24 hours, including a full Active Directory environment, then write a professional report that proves every step. Since November 2024, passing the exam grants the OSCP+ title, valid for 3 years, alongside the original OSCP, which is still awarded for life. The official course behind it, PEN-200 (Penetration Testing with Kali Linux), covers the whole attack chain: enumeration, web exploitation, privilege escalation, pivoting and Active Directory attacks.
In Morocco, audit and pentest firms, bank red teams and providers serving European clients from Casablanca or Rabat regularly list the OSCP in their job ads. With law 05-20 on cybersecurity and the DGSSI framework, the organisations concerned must have their systems audited, so they look for auditors who can demonstrate practical skill rather than theory alone. The OSCP+ is one of the most direct ways to prove that level.
PEN-200 is built for self-study, and many candidates lose momentum facing the labs on their own. Our 10-day programme (80 hours of guided coaching) gives your progress a structure: sessions on every module, walkthroughs of lab machines, a note-taking methodology, time management on exam day and report writing. PEN-200 lab access and one exam attempt are included in the price.
Who is it for?
- Junior pentesters who want a credential audit firms recognise
- CEH or Security+ holders ready to move to a fully hands-on certification
- SOC analysts and security engineers aiming for red team or technical audit roles
- System and Active Directory administrators who want to see how their infrastructure gets attacked
- Consultants serving European clients from Morocco, where the OSCP is often required
Prerequisites
- Solid Linux skills (command line, permissions, services) and good Windows knowledge
- Good networking basics: TCP/IP, ports, DNS, HTTP, SMB
- Ability to read and adapt Bash, Python or PowerShell scripts
- Security+, CEH or equivalent experience recommended before you start
What you will be able to do
- Apply a rigorous pentest methodology, from enumeration to post-exploitation
- Find and exploit web vulnerabilities (SQL injection, file inclusion, file upload, command injection)
- Locate, adapt and fix public exploits instead of running them blindly
- Escalate privileges on Linux and Windows and pivot through segmented networks
- Enumerate, attack and fully compromise an Active Directory domain
- Write a clear, reproducible pentest report at the standard a client or auditor expects
Course outline
- 01Penetration testing tools, methodology and report writing
- 02Passive and active information gathering (OSINT, Nmap)
- 03Vulnerability scanning
- 04Web application attacks (tooling, XSS)
- 05Common web vulnerabilities: directory traversal, file inclusion, file upload, command injection
- 06SQL injection attacks
- 07Client-side attacks (Office documents, weaponised files)
- 08Locating, fixing and adapting public exploits
- 09Antivirus evasion
- 10Password attacks (cracking, Net-NTLMv2, pass-the-hash)
- 11Windows privilege escalation
- 12Linux privilege escalation
- 13Port redirection and SSH tunnelling
- 14Tunnelling through deep packet inspection (HTTP, DNS)
- 15The Metasploit Framework
- 16Active Directory introduction and enumeration
- 17Attacking Active Directory authentication (Kerberoasting, AS-REP roasting)
- 18Lateral movement and persistence in Active Directory
- 19Attacking AWS cloud environments (introduction)
- 20Assembling the pieces: a full enterprise network pentest
The exam
| Exam code | PEN-200 |
|---|---|
| Format | Fully hands-on proctored exam: an Active Directory set plus standalone machines to compromise, followed by a professional pentest report |
| Duration | 23 hours 45 minutes of hands-on exam + 24 hours to submit the report |
| Passing score | 70 out of 100 points |
| Validity | OSCP+: 3 years, renewable through the options offered by OffSec (including CPE credits); the base OSCP certification remains valid for life |
Career opportunities in Morocco
- Penetration tester
- Red team consultant
- Technical information security auditor
- Offensive security engineer
- Senior vulnerability management analyst
Frequently asked questions
How much does OSCP+ preparation cost in Morocco and what is included?
Prices start at MAD 29,900. This covers 10 days of guided coaching (80 hours), access to the official PEN-200 labs and one OSCP+ exam attempt. Extra attempts or extended lab access are quoted separately.
Which payment methods do you accept?
You can pay by bank transfer or card. Payment in instalments is possible on request, and we can invoice your company directly if your employer is funding the training.
Are sessions held in a classroom or online?
Coaching runs in a classroom in Casablanca or Rabat, or as a live virtual class. Either way you work in the same online PEN-200 labs, which you can also use between sessions to practise at your own pace.
How does the OSCP+ exam work?
The exam is taken remotely, from home or your office, proctored via webcam and screen sharing. You get 23 hours 45 minutes to compromise an Active Directory set and standalone machines, then 24 hours to submit your report. You need 70 out of 100 points to pass.
What level do I need before starting?
OSCP+ is an advanced certification. You should be comfortable with Linux, networking and reading scripts (Bash, Python, PowerShell). Security+, CEH or equivalent experience is recommended; if in doubt, we can schedule a call to assess your level before you enrol.
Complementary certifications
Intermediate
IntermediatePenTest+
Plan, run and document a professional penetration test, from scoping to the final report.
5 days · 35 h✓ Voucher included
From12,900 MAD
BeginnerSecurity+
The benchmark certification for starting a cybersecurity career, recognised by employers in Morocco and worldwide.
5 days · 35 h✓ Voucher included
From10,900 MAD
Related articles
Certifications· 9 min read
Best Cybersecurity Training Centers in Morocco (2026 Guide)
The best cybersecurity training center in Morocco in 2026 is not the one that calls itself number one, but the one whose vendor authorisation you can verify, that includes the official exam voucher, trains you in hands-on labs and publishes its prices in dirhams. Here are the criteria, the certifications (CEH, Security+, CISSP, Cisco) and the questions to ask before you enrol.
Read the article
Certifications· 7 min read
Which Cybersecurity Certification to Choose in Morocco in 2026?
Student, IT technician, SOC analyst, pentester, CISO or auditor: this guide explains which cybersecurity certification to target in Morocco, in what order, and how local employers see it.
Read the article
Certifications· 7 min read
Cybersecurity certification prices in Morocco in 2026 (in MAD)
How much does a cybersecurity certification cost in Morocco? Here are 2026 prices in dirhams for the 12 most requested certifications, what they cover and the extra costs to plan for.
Read the articleReady to earn your certification?
Book a free 15-minute call with an advisor: we assess your level and recommend the fastest path to your goal.