Trainings Online
WEB-300 (OSWE)
Security
About this training
WEB-300 is OffSec's advanced web application security course, teaching white-box penetration testing methods for experienced testers. Across 17 modules and roughly 105 hours of content, it covers complex vulnerability classes including SSRF, XSS, blind SQL injection, and authentication bypass, with an emphasis on identifying and exploiting subtle logic flaws rather than surface-level issues.
The course leads to the OSWE (OffSec Web Expert) certification, whose exam is a 48-hour proctored practical assessment. It assumes existing penetration testing experience and comfort reading and writing code, and successful candidates can pursue further OffSec credentials such as the combined OSCE3.
Technology tags
Security
Dates, prices and formats can change after publication. Always verify details directly with the organizer or provider before registering. Read the full disclaimer.