Certified Offensive
Security Professional (COSP)

Basics of cybersecurity and its terminologies, covering core concepts, the CIA triad, common threats, and the mindset needed before diving into technical topics.

Fundamentals of networking — OSI/TCP-IP models, IP addressing, routing, switching, protocols, and packet analysis needed to understand how data moves and how it can be attacked.

Core cloud concepts across AWS, Azure, and GCP — services, deployment models, IAM, and shared-responsibility architecture that underpins modern infrastructure.

Hands-on Linux administration, command-line proficiency, and scripting with Bash/Python to automate tasks and operate confidently in security tooling environments.

Enumeration and exploitation of Active Directory environments — Kerberos attacks, privilege escalation, lateral movement, and domain persistence techniques.

Offensive security fundamentals including reconnaissance, scanning, exploitation, and post-exploitation techniques using industry-standard tools like Nmap, Metasploit, and Burp Suite.

Identifying and exploiting web vulnerabilities such as SQL injection, XSS, and authentication flaws, aligned with OWASP Top 10 methodology and manual testing techniques.

Testing REST and other APIs for broken authentication, authorization flaws, and data exposure, using tools like Postman and Burp Suite to secure modern application backends.

Assessing cloud environments for misconfigurations, privilege escalation paths, and exposed services across AWS, Azure, and GCP using industry-standard cloud security tooling.

Static and dynamic analysis of Android and iOS applications to uncover insecure storage, weak authentication, and API vulnerabilities in mobile apps.

Certified Red Team Analyst-aligned training covering adversary simulation, C2 frameworks, and advanced attack-chain techniques used in real-world red team engagements.

Blue-team fundamentals covering SOC operations, SIEM monitoring, IDS/IPS, EDR/XDR, and incident response to detect and respond to real-world cyber threats.

Applying AI-driven tools and techniques to accelerate reconnaissance, vulnerability analysis, and reporting, alongside an understanding of security risks unique to AI systems.

Governance, Risk, and Compliance fundamentals — security frameworks, risk assessment, audit processes, and regulatory standards that shape enterprise security programs.

Professional communication and technical report-writing skills needed to present findings clearly to both technical teams and business stakeholders.