StationX
Start free

Home › Exams › OSCP

OSCP hands-on labs — OffSec Certified Professional

OSCP is the exam for OffSec Certified Professional. 101 hands-on labs are mapped to it by the lab vendor or a StationX roadmap — about 92 hours of hands-on practice in total. Each runs in your browser, with nothing to install. 42 come with StationX Membership ($299/year) and 59 need StationX Infrastructure Labs ($149/year).

101 labsabout 92 hoursStationX Membership · $299 / year · 42 labsStationX Infrastructure Labs · $149 / year · 59 labs

Access

StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

StationX Infrastructure Labs — 3 attempts per lab

🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab

Already have access? Sign in.

OSCP at a glance

Exam code
OSCP
Certification
OffSec Certified Professional
Vendor
OffSec
Labs
59 in StationX Infrastructure Labs · 42 in StationX Membership
How the labs are mapped
101 from the StationX roadmap
Practice time
About 92 hours, every lab states a duration
Lab levels
Guided 35 · Advanced 17 · Expert 5 · Getting Started 2 · not stated 42

The 101 OSCP labs

  1. Assign Environment and Shell Variables in Linux30 minGuided
  2. Automate Administration Tasks by Using Linux Shell Scripts30 minGuided
  3. Backup and Restore Files with CPIO in Linux30 minGuided
  4. Backup and Restore Files with Tar in Linux30 minGuided
  5. Basics of Metasploit2 h
  6. Can You Configure a Yum Repository in Linux?45 minAdvanced
  7. Can You Configure Advanced Permissions in Linux?1 hExpert
  8. Can You Configure Kickstart Installations in Linux?45 minAdvanced
  9. Can You Create a Scheduled Linux Backup Script?45 minAdvanced
  10. Can You Create Files from Parts of Other Files?45 minAdvanced
  11. Can You Exploit Windows with Metasploit and Code Analysis?45 minAdvanced
  12. Can You Exploit Windows?45 minAdvanced
  13. Can You Explore Vulnerabilities in Systems, Network Traffic, and Passwords?45 minAdvanced
  14. Can You Extract, Label, and Organize Data?1 hExpert
  15. Can You Find Flaws with OSINT and Vulnerability Scanning?45 minAdvanced
  16. Can You Manage Directories and Files in Linux?45 minAdvanced
  17. Can You Manipulate Data and Create a Shell Script in Linux ?1 hExpert
  18. Can You Navigate and Search in a Manpage?45 minAdvanced
  19. Can You Perform a Network Vulnerability Assessment by Using Nmap?45 minAdvanced
  20. Can You Perform Command-Line Tasks by Using Shell Operators and a Shell Script?1 hAdvanced
  21. Can You Perform Information Gathering, Credentialed Vulnerability Access, and Attack a Boundary Server?1 hExpert
  22. Can You Perform Lateral Movement and Post-exploit Activities?45 minAdvanced
  23. Can You Perform Open-source Intelligence (OSINT)-Gathering Operations?1 hExpert
  24. Can You Perform OSINT Techniques to Unveil Hidden Network Details and Service Information?45 minAdvanced
  25. Can You use Find and Locate to Search for Files in Linux?45 minAdvanced
  26. Can You Use Linux Command-Line Tools to Simplify Administration Tasks?1 hAdvanced
  27. Can You Use the Grep and Sort Commands Together?45 minAdvanced
  28. Client-Side Exploitation with Social Engineering1 h
  29. Configure Links in Linux30 minGuided
  30. Configure Standard Permissions in Linux30 minGuided
  31. Configure the Display of a File30 minGuided
  32. Control Data Streams in Linux30 minGuided
  33. Create and Manage Linux Users and Groups30 minGuided
  34. Cybersecurity Testing with Core Impact1 h
  35. Discover and Exploit Targets by Using Metasploit30 minGuided
  36. Display Manpage Information by Using Sections30 minGuided
  37. Edit Data by Using Linux Command-Line Tools30 minGuided
  38. Edit Text Files in Linux30 minGuided
  39. Evaluate the Risk of Password Cracking to Your IT Environment45 minGuided
  40. Evasive Maneuvers and Post Exploitation1 h
  41. Exploit Common Windows Flaws30 minGuided
  42. Exploit Flawed Code30 minGuided
  43. Explore Network Traffic by Using Wireshark30 minGuided
  44. Gain Remote Access to a Windows System30 minGuided
  45. Getting Started with Linux Command Line Fundamentals1 hGetting Started
  46. Getting Started with Linux System Administration Tasks1 hGetting Started
  47. Intro To Linux - Backing Up, Compression, and Scheduling1 h
  48. Intro to Linux - Routing and SSH Tunnels2 h
  49. Linux Exploitation1 h
  50. Manage Services in Linux30 minGuided
  51. Manage Storage in Linux30 minGuided
  52. Network Miner1 h
  53. Open Source Password Cracking1 h
  54. OWASP Top Ten 2025 - A01 Broken Access Controls1 h
  55. OWASP Top Ten 2025 - A02 Security Misconfiguration1 h
  56. OWASP Top Ten 2025 - A03 Software Supply Chain Failures1 h
  57. OWASP Top Ten 2025 - A04 Cryptographic Failures1 h
  58. OWASP Top Ten 2025 - A05 Injection1 h
  59. OWASP Top Ten 2025 - A06 Insecure Design1 h
  60. OWASP Top Ten 2025 - A07 Authentication Failures1 h
  61. OWASP Top Ten 2025 - A08 Software or Data Integrity Failures1 h
  62. OWASP Top Ten 2025 - A09 Security Logging & Alerting Failures1 h
  63. OWASP Top Ten 2025 - A10 Mishandling of Exceptional Conditions1 h
  64. OWASP Top Ten 2025 - Capstone3 h
  65. OWASP Top Ten 2025 - Capstone (pt.1)1 h 30 min
  66. OWASP Top Ten 2025 - Capstone (pt.2)1 h 30 min
  67. Pentesting & Network Exploitation - Linux Target Analysis Labs2 h
  68. Pentesting & Network Exploitation: DMZ Exploitation1 h
  69. Pentesting & Network Exploitation: LAN Exploitation2 h
  70. Pentesting & Network Exploitation: Windows Target Analysis Labs1 h
  71. Perform Conditional Decision Making in a Linux Shell Script30 minGuided
  72. Perform Lateral Movement30 minGuided
  73. Perform Linux Command-Line Operations by Using Boolean and Arithmetic Operators30 minGuided
  74. Perform Linux Command-Line Operations by Using File Test and Relational Operators30 minGuided
  75. Perform Open Source Intelligence30 minGuided
  76. Perform Open System Intelligence (OSINT) Gathering30 minGuided
  77. Perform Post-Exploit Activities30 minGuided
  78. Perform Vulnerability Scanning by using Greenbone Security Assistant (GSA)45 minGuided
  79. Post Exploitation and Pivoting2 h
  80. Schedule and Perform Network Vulnerability Scans30 minGuided
  81. Search for Files by Using Wildcards30 minGuided
  82. Search Linux Manpages by Using the Command Line30 minGuided
  83. Simplify Linux Administration Tasks by Using Xargs30 minGuided
  84. Sort Files30 minGuided
  85. Take Advantage of Anti-Forensic Techniques30 minGuided
  86. Use Network Tools to Perform Discovery Scanning and Network Reconnaissance45 minGuided
  87. Web 201 - Lab 1: Recon Tools1 h
  88. Web 201 - Lab 2.1: Detecting and Exploiting Hard to Find SQL injections1 h
  89. Web 201 - Lab 2.2: Advanced Sqlmap2 h
  90. Web 201 - Lab 2.3: Manual Blind SQL Injection2 h
  91. Web 201 - Lab 2.4: NoSQL Injection1 h
  92. Web 201 - Lab 3.1: Cross Site Scripting Filter Evasion1 h
  93. Web 201 - Lab 3.2: Exploiting Misconfigured CORS1 h
  94. Web 201 - Lab 4: Advanced OS Command Injection1 h
  95. Web 201 - Lab 5: Advanced Local File Inclusion1 h
  96. Web 201 - Lab 6: Advanced CSRF1 h
  97. Web 201 - Lab 7.1: XXE to Obtain Arbitrary Files1 h
  98. Web 201 - Lab 7.2: Out of Band XXE Attacks1 h
  99. Web 201 - Lab 8: Server Side Request Forgery1 h
  100. Web 201 - Lab 9: Insecure Deserialization in Python and Java1 h
  101. Windows Exploitation2 h

Roadmaps for OSCP