Structured learning tracks
Membership with role- and cert-based learning tracks: roadmaps, cheat sheets, assessments, exclusive writeups and member pricing on notes.
Join the learning tracksOSWE
OffSec Web Expert (WEB-300)
- Target job title
- Senior Application Security Engineer / Web Pentester
- Level
- Advanced. Built for practitioners with real experience; often hard experience gates.
- Prerequisites
- Ability to read PHP, Java, .NET, JavaScript and Python code; OSWA-level web skills.
- Official page
- OffSec
Recent updates
48-hour exam on white-box source review, chaining auth bypasses into remote code execution.
Reviewed 2026-10-02. Confirm exam details on the official page before booking.
Where it sits in Offensive Security
- Entry CRTA CEH OSWP eJPT TryHackMe PT1 HackTheBox CJCA
- Intermediate OSCP HackTheBox CPTS CRTP OSWA CompTIA PenTest+ eCPPT TCM PNPT HackTheBox CWES CRTO BSCP GPEN CARTP
- Advanced CRTE OSEP OSED OSAI HackTheBox CAPE TryHackMe PT2 OSWE
- Expert HackTheBox COAE CRTL OSEE HackTheBox CWEE
Preparing for OSWE?
Coaching & cert roadmaps
One-to-one guidance and a roadmap built around your background, target role and timeline, so you stop guessing which cert comes next.
See coaching programsPrep resources & cheat sheets
Cheat sheets, command references and exam-day extras for when you already know the material and need it fast and in one place.
Browse prep resources