Every link below was opened and checked by RoleMath, labelled official or independent, and shown with the date it was last checked where one is recorded. Nothing here is sponsored, and no exam dumps are listed.
RoleMath has checked 2 free resources for this certification: 1 learning resource and 1 official scope document.
See the certification itself: OffSec Certified Professional (OSCP) and OSCP+.
Best free resources
| Resource | Type | Publisher | Cost | Source |
|---|---|---|---|---|
| OffSec PEN-200 OSCP Syllabus PDF | Exam objectives / outline | Official: OffSec | Free (see notes) | official |
| PortSwigger Web Security Academy (free labs) | Free platform / subscription tier | Independent community: PortSwigger | Free tier (account req.) (see notes) | independent community |
What to know
- OffSec PEN-200 OSCP Syllabus PDF: RoleMath records this against exams PEN-200 and OSCP+ and has not verified whether those are still the current exam — check the vendor's page before relying on it. Official OffSec objective source with unweighted domains. (noted when we read this source, 2026-06-30)
- PortSwigger Web Security Academy (free labs): Web application security only — it does not cover Active Directory; buffer overflows; privilege escalation or pivoting. Check the current OffSec exam guide for the scope you actually need. Not affiliated with OffSec and not written to the OSCP syllabus. (noted when we read this source, 2026-07-30)
The free path, in order
1. Start from the exam objectives / outline — it is the scope the certifying body itself publishes, and where a vendor also publishes domain weightings they are in it. It may not be a comprehensive list of every exam topic. Study against it, not against a course's table of contents. Where the entry below records an exam version RoleMath has not verified as current, confirm on the vendor's page that you are reading the outline for your exam before you study against it.
2. Work the free structured course(s) above to build the skills — first check each one against What to know above, and where a course was written for a different exam version than the one you will sit, treat it as background rather than as your main preparation. Treat official material as scope authority and community material as instruction; use official sample questions where they exist.
3. Free study lowers what you spend preparing, not what the exam itself costs — verify the current price on the vendor's official exam page before budgeting.
Free resources reduce what you spend to study. No resource guarantees a pass, and a course is not the certification.