OffSec Wireless Professional (OSWP) Practice Test

The OSWP is a performance-based, offensive security certification focused exclusively on attacking and exploiting wireless networks. While the CWSP (Certified Wireless Security Professional) is a broader, vendor-neutral certification covering design, policy, and defense, the OSWP is purely about offensive techniques. The OSWP exam requires you to demonstrate live exploitation of WEP, WPA/WPA2, and enterprise networks, whereas the CWSP is a multiple-choice exam focused on theory and best practices. The OSWP is ideal for penetration testers and red teamers, while the CWSP is better suited for network architects and administrators.

While deep programming skills are not strictly required, a working knowledge of Bash scripting and basic Python is highly beneficial. The OSWP exam and this practice test often require you to modify scripts, parse output, or automate repetitive tasks (e.g., deauthentication bursts, handshake capture loops). You do not need to write complex exploits from scratch, but you should be comfortable reading and tweaking existing scripts to fit your specific attack scenario. Proficiency with the command line and text processing tools (grep, awk, sed) is essential.

For the attacks in this practice test and the real OSWP exam, you need a wireless adapter that supports monitor mode and packet injection. The gold standard is the Alfa AWUS036ACH (or similar chipset like RTL8812AU). Avoid built-in laptop adapters as they often lack proper driver support for injection. For WPA2-Enterprise attacks (like setting up a rogue AP with hostapd-wpe), you will also need a second network interface (wired or wireless) to provide internet connectivity to your attack machine. A Kali Linux virtual machine with a USB-passthrough for your wireless adapter is the standard setup.

This practice test includes detailed scenario-based questions that require you to understand the flow of a WPA2-Enterprise attack using tools like hostapd-wpe. You will be tested on your knowledge of how to configure a rogue access point to capture MSCHAPv2 challenge/response pairs, how to crack those hashes (e.g., using asleap or John the Ripper), and how to bypass certificate validation checks. The questions will assess your ability to identify the correct attack parameters, interpret the output from the rogue AP, and troubleshoot common issues like certificate generation and EAP method selection.

Yes, absolutely. While WEP is deprecated and rarely found in modern enterprise environments, it remains a core component of the OSWP exam and this practice test. The reason is pedagogical: WEP attacks (like ARP replay, chopchop, and fragmentation) teach fundamental concepts about wireless frame injection, IV reuse, and cryptographic weaknesses that are transferable to more modern attacks. Understanding WEP's flaws provides a critical foundation for understanding why WPA/WPA2 were designed the way they were. Furthermore, legacy devices and IoT systems may still use WEP, making it a relevant skill for comprehensive assessments.