The AD Exploitation & Post-Exploitation domain is one of 5 exam domains on the OffSec Experienced Penetration Tester (OSEP) certification exam by OffSec. At 20% of the total exam, this is one of the most heavily weighted domains, mastering it is critical for passing.

The OSEP exam consists of 100 questions with a time limit of 48 hours and a passing score of 70%. That means approximately 20 questions on your exam will come from the AD Exploitation & Post-Exploitation domain.

Study Strategy

Start with practice questions filtered to this topic to identify weak areas
Use flashcards for key terms and concepts within AD Exploitation & Post-Exploitation
Review the glossary terms below for foundational vocabulary
Take a full exam simulation periodically to practice time management across all domains
Don't neglect other domains, Client-Side Attacks & Code Execution (20%) and Process Injection & Migration (20%) are also heavily tested

Key Terms for AD Exploitation & Post-Exploitation

Penetration Testing

An authorized simulated cyberattack on a computer system, network, or application performed to evaluate its security pos...

CVSS

The Common Vulnerability Scoring System, an open framework that produces a 0.0-10.0 severity score from characteristics ...

Cyber Kill Chain

Lockheed Martin's seven-stage model of an intrusion -- reconnaissance, weaponisation, delivery, exploitation, installati...

View full cybersecurity glossary (87 terms) →

All OSEP Exam Domains

Client-Side Attacks & Code Execution20%Process Injection & Migration20%Antivirus Evasion & App Whitelisting Bypass20%Lateral Movement & Pivoting20%AD Exploitation & Post-Exploitation20%

Certifications with Similar Topics

These certifications also cover topics related to AD Exploitation & Post-Exploitation:

OSAIby OffSec

RAG and Embedding Exploitation, 18% of exam

PenTest+by CompTIA

Post-exploitation and Lateral Movement, 14% of exam

eJPTby INE Security

Pivoting & Post-Exploitation, 10% of exam

GPENby GIAC

Exploitation & Post-Exploitation, 30% of exam

PNPTby TCM Security

Active Directory Exploitation, 20% of exam

GWAPTby GIAC

Web Application Exploitation Tools, 15% of exam

All OSEP Topics Practice AD Exploitation & Post-Exploitation

Study Guide: AD Exploitation & Post-Exploitation

Study Strategy

Start with practice questions filtered to this topic to identify weak areas
Use flashcards for key terms and concepts within AD Exploitation & Post-Exploitation
Review the glossary terms below for foundational vocabulary
Take a full exam simulation periodically to practice time management across all domains
Don't neglect other domains, Client-Side Attacks & Code Execution (20%) and Process Injection & Migration (20%) are also heavily tested

100 Practice Exam Questions, OffSec Experienced Penetration Tester

AD Exploitation & Post-Exploitation

Exam Weight Breakdown

Practice AD Exploitation & Post-Exploitation Questions

Study Guide: AD Exploitation & Post-Exploitation

Study Strategy

Key Terms for AD Exploitation & Post-Exploitation

All OSEP Exam Domains

Certifications with Similar Topics

100 Practice Exam Questions, OffSec Experienced Penetration Tester

AD Exploitation & Post-Exploitation

Exam Weight Breakdown

Practice AD Exploitation & Post-Exploitation Questions

Study Guide: AD Exploitation & Post-Exploitation

Study Strategy

Key Terms for AD Exploitation & Post-Exploitation

All OSEP Exam Domains

Certifications with Similar Topics