OSWP: OffSec Wireless Professional

What OSWP is and who runs it

The OSWP — OffSec Wireless Professional — is Offensive Security’s (OffSec’s) certification focused entirely on attacking Wi-Fi networks. It’s tied to the PEN-210 course, “Foundational Wireless Network Attacks.” The credential proves you can identify encryption weaknesses in 802.11 networks, recover keys, and gain access to a target access point. It’s one of OffSec’s foundational (200-level) certs, far narrower than OSCP, and it’s the go-to wireless credential in the OffSec family.

Cost and what’s included

OffSec no longer sells OSWP as a one-off; PEN-210 comes with its Learn subscriptions. The course page lists “Learn Fundamentals” at $799/year and “Learn One” at $2,749/year (USD); Learn One bundles a year of one course, its labs, and two exam attempts, and PEN-210 is included with any Learn subscription. The course is 200-level with roughly 480 hours of content across 16 modules. There’s no standalone exam price on the page, so check the vendor page for current subscription terms.

Time: the exam and the report

The exam is proctored by an OffSec employee over a private VPN. The course page calls it a “4-hour” proctored exam; the exam guide specifies 3 hours 45 minutes of hands-on time. You’re given three network scenarios (only one active at a time) and must obtain the wireless key in each, connect to the target access point, and capture a proof file. After time is up you have 24 hours to upload a PDF report documenting the keys, the exact commands used, and how you connected. OffSec doesn’t publish a numeric cut score — passing means completing the required scenarios and submitting valid documentation.

How hard it is, honestly

By OffSec standards this is one of the gentler exams. Independent reviewers routinely finish the practical in a couple of hours. The common complaints aren’t difficulty but relevance: much of the course centers on WEP, which is largely obsolete, and some reviewers note the course lacks hands-on labs. If you’re comfortable on the Linux command line and understand TCP/IP and basic wireless concepts, the technical bar is modest — the real challenge is assembling a compatible wireless setup and following methodology.

Is it worth it — and for whom

OSWP makes the most sense as a low-cost add-on if you already hold a Learn subscription for OSCP or another OffSec cert, or if wireless assessment is part of your actual job. As a standalone purchase it’s harder to justify, and it carries little weight in general pentest hiring. Its upsides: there are no formal prerequisites (Linux CLI, TCP/IP, and basic wireless knowledge are recommended), it doesn’t expire, and it’s a focused way to build real Wi-Fi attack skills.

How to prepare

Read through PEN-210’s 16 modules and practice each technique — you’ll want your own compatible wireless adapter and, ideally, a couple of cheap routers to build a home lab, since the course is light on built-in labs. Focus on WPA/WPA2 handshake capture and cracking, plus the WEP techniques the exam still expects. Rehearse writing a clean, reproducible report, because you must document exact commands. Confirm your hardware works before booking a proctored slot.

SourcesOffSec — PEN-210 / OSWP courseOSWP Exam Guide