HackTrack with Mentors – OffSec Support Portal

What is HackTrack with Mentors?

HackTrack is a 10-week, mentor-led learning program designed to help PEN-200 learners prepare for the OSCP certification through guided practice, proven methodology, and a supportive learning community.

Each Saturday starting from August 15, 2026, OffSec Student Mentors will team up with you to hack a carefully selected OSCP-style machine to build the right methodology, improve the decision-making process and focus on troubleshooting techniques used to approach real exam scenarios.

ChangeLog table

Course/Module/ Learning Path

Time frame

Description of changes

PEN-200

July 19, 2025 - January 31, 2026

A 6-month cohort-based program going over PEN-200 modules from a Student Mentor team perspective. This supplementary resource helped with understanding skills and cleared doubts/questions about PEN-200 modules.

Videos have been uploaded to the “PEN-200 Learning Hub” course.

Generic Library

February 7, 2026

A session for career support covering what happens after learners receive an OffSec certification and how they can hunt for jobs like a hacker.

PEN-200 (New)

August 15, 2026 - October 17, 2026

A 10-week cohort focusing on building methodologies as the Student Mentor team works together to hack OffSec Labs.

Recordings of the sessions will be uploaded to the “PEN-200 Learning Hub” course.

How it works:

Register to Join – To participate, you must first register using our Google Form.
Weekly live mentor-led sessions – Each Saturday at 16:00 GMT, a live session will be conducted on Zoom from August 15, 2026, through October 17, 2026.
Real-time Q&A – Bring your questions and challenges during each session and get immediate support.
Recordings – Recordings will be uploaded to the OffSec Learning Platform under the “PEN-200 Learning Hub” course a few days after each session. In the meantime, be sure to attend live so you don’t miss out!

Curriculum at a Glance:

Week	Machine	Walkthrough Highlights	Methodology Focus
1	Compromised	Information gathering SMB enumeration Credential extraction Troubleshooting methodology	Develop a disciplined enumeration process and learn why methodology consistently outperforms relying on public exploits.
2	Robust	Web application enumeration Bypassing 403 restrictions Union-based SQL injection Post-exploitation credential discovery	Learn how to approach an unfamiliar web target, identify meaningful attack paths, and confidently progress from enumeration to exploitation.
3	Workaholic	CMS enumeration Password reuse Shared object hijacking Linux privilege escalation	Learn how experienced penetration testers connect seemingly unrelated findings into a complete compromise chain instead of treating each vulnerability independently.
4	Shifu	Error-based SQL injection Union-based SQL injection Web shell deployment Windows privilege escalation	Reinforce the complete OSCP methodology—from initial enumeration through privilege escalation—using the techniques practiced throughout the program.
5	Moonwalk	File upload vulnerabilities Public exploit validation Modifying exploits Internal service exploitation	Learn how to validate, troubleshoot, and adapt public exploits when they don't work exactly as expected.
6	Markers	PDF generation attacks Directory traversal JavaScript execution Internal service exploitation	Expand your web application testing methodology by exploring attack vectors commonly overlooked during assessments.
7	Gallery	SNMP enumeration Virtual host discovery Subdomain fuzzing SQL injection File upload attacks	Build stronger reconnaissance habits by learning where experienced penetration testers look for hidden attack surfaces.
8	AD18	AS-REP Roasting PowerShell history Privilege escalation Backup Operator abuse	Learn a structured approach to Active Directory environments while developing confidence in enterprise attack chains.
9	AD06	Kerberoasting UAC bypass Password reuse Public exploit validation	Understand how successful operators continue progressing after initial compromise by leveraging authentication attacks and privilege escalation opportunities.
10	AD19	Credential looting ACL abuse Assigned rights Pivoting	Develop post-exploitation habits that go beyond credential dumping by identifying opportunities hidden throughout the environment.

Who can register to join?

All PEN‑200 learners with active subscriptions are welcome to register.

Is attendance mandatory?

No. However, you’re encouraged to join consistently for the best experience, but it’s flexible. You can still benefit from watching the recordings.

Is this a replacement for the PEN‑200 course content?

Not at all. HackTrack with Mentors enhances your PEN‑200 experience by providing structure, live support, and community engagement. HackTrack with Mentors is not mandatory for passing the OSCP exam and it should be considered as a supplementary resource.

Do I receive a certificate for completing the program?

After attending each session, you will receive a certificate of completion letter which you can request by sending an email to orders@offsec.com.

Who should I contact if I can’t join on time or run into Zoom issues?

Message OffSec Student Mentors on Discord or email help@offsec.com for assistance.

Will I be doing hands-on labs during the session?

The goal of the session is to hack and build methodology together. Hence, you are encouraged to follow along.

Will this program be available for other courses in the future?

For now, HackTrack with Mentors is focused on supporting PEN‑200 learners. We’re actively exploring opportunities to expand this program to other OffSec courses in the future. Once we’re ready to launch additional tracks, we’ll be sure to announce it to the community.

Where will the recordings be uploaded after each session?

The recordings of each session will be uploaded to the “PEN-200 Learning Hub” on OffSec Learning Platform.

Related articles