OSWA
OffSec

Offensive Security Web Assessor

Intermediate 48hr practical + report Pass: 100+ points $1,499

Web application penetration testing — SQL injection, XSS, SSRF, deserialization.

Official Page
IssuerOffSec
Format48hr practical + report
Duration72 hours total
Pass Score100+ points
Valid For3y
Syllabus Overview

7 exam domains — click "Syllabus" tab for full breakdown

Web Application Reconnaissance 15%
Cross-Site Scripting (XSS) 15%
SQL Injection 20%
Authentication & Session Attacks 15%
File Inclusion & Path Traversal 10%
File Upload Vulnerabilities 10%
XXE & SSRF 15%