Path to oscp reddit. 133 votes, 29 comments.

Path to oscp reddit. I have also seen the OSCP course materials my friend has and I am pretty intimidated by the labs there and the forums. Is this timeframe reasonable? OCSP learning path? What should I do to train for the OSCP certification? I’ve started HTB pentesting path on htb academy. Contribute to 0x4D31/awesome-oscp development by creating an account on GitHub. Offsec just increased the prices and the OSCP is not a cheap cert. Comparing it to OSCP is tight, HTB is phenomenal material but hiring folk are usually laser focussed on those four letters more than anything. I took 8 hours to find the first objective for it. I have sec+ and ejpt certification. I am currently going thru the free web app penetration course offered by Portswigger. Short to my background, I have a solid network background (CCNP R&S) have good firewalling skills, Fortinet NSE 7 + NSE 4. I approached each exam differently. I write "unfortunately" because the cert seems to get more and more expensive every year. - basic understanding 14 votes, 21 comments. Honestly getting 30-50 boxes on HTB or 50-70 boxes on VulnHub would be more than enough practice to prepare for the OSCP. I personally did it from a webdeveloper background and I found the lack of systems knowledge (especially Windows) the hardest part. OSCP like boxes and practice it and do proving grounds else: Goto tryhackme and by a subscription and do basic pentesting path then offensive security path After gaining the basic knowledge and increasing your knowledge and skill go to HTB. You will need more than THM to get your OSCP in my opinion. I have no experience in python. I used this subreddit a lot and I'd like to share part of my story with some advice for those who are in a similar spot than I was. Take OSCP. Is this timeframe reasonable? Hi guys, Probably this question came already a million times. I like step by step learning approach rather than going directly from ejpt to oscp. I have been really enjoying it. You will gain solid foundations with CPTS. CPTS was much harder. Considering the above can anyone advise me how to achieve oscp. I’ll try to expand later. Here is my path so far, jumped straight into an IT tech job after sixth form (UK) and been here 3 years now, I have an interest in cyber security so in the recent lockdowns I studied for and obtained my Sec+, 3 months ago with no previous knowledge or experience in pen testing or anything How can someone who knows nothing about Linux, Python, and bash commands start learning for OSCP (Offensive Security Certified Professional)? I'm looking for a step-by-step plan that's easy to follow, with the goal of completing it in about 9 months. My background: I'm 2… My OSCP prep advice is pretty much always the same, and yet it depends on what every student brings to the table. I am I might post something like "How to pass the OSCP 101" unlike a personal oscp writeup this one would be solely focused on the students who's tackling currently in hope of assisting the people. I might also be forgetting the stuff which i did a few days ago. This is a place to connect those seeking to learn with those who have walked the path before. I can dedicate around 50 hours per month to study. OSCP is still the gold standard ‘you have the job’ kinda deal but HTB’s absolutely a steping stone towards OSCP for sure. Has anybody taken this course, spent the $6500, and found it extremely useful in preparation for the exam? In September I started my OSCP journey. Additionally, the oscp is a different exam now than it used to be. At 26 September I subscribed to PGP. Thoughts on a path I should take ? Thanks in advance ! Share Sort by: Best Open comment sort options Best Top New Controversial We would like to show you a description here but the site won’t allow us. An update for: Failed so hard in OSCP After my failure, I took some days off. CPTS is a different animal than OSCP. My goal is to go for oscp and i have just started the junior penetration path on tryhackme. Then, I subscribed to TryHackMe and completed the Complete beginner and Offensive Pentesting path. a single path from start to root). Best route to begin? Hey everyone, just wanted some input on the best route to take to begin this path? Ive wanted to do this for so long, but dont know how to start. If you do , your time to complete PWK lab will be very tight. It was a challenging yet exhilarating experience, and I wanted to share my journey and the preparation that led to this achievement. Out of curiosity what should be my path in terms of gaining education and experience, to eventually being able to conduct physical pentests, and get hired to do so? I'm looking at the CRTP after obtaining the OSCP. Counter question: any tips for getting started on CISSP? Would you recommend a specific course? The OSCP at this point is just a necessary evil for your CV. I am thinking about subscribing to Cybrary Insider Pro (pen-testing testing career path). You're essentially getting all the prep you need to complete the boxes that many consider essential for passing A place for people to swap war stories, engage in discussion, build a community, prepare for the course and exam, share tips, ask for help. We would like to show you a description here but the site won’t allow us. Im currently working in defensive ops and have a bunch of experience in beginner htb labs, but i feel i didnt really gain anything from walk throughs and what not. Planning to take it in February. If you don't have wife , children and a full time job , 90 days may work . Also, should I be completing other learning paths as well, and if so in what order ? Jan 12, 2019 · How I went from a naive college kid, who did not know there was more than one distribution of Linux, to an OSCP in less than a year - and debunking the stigma of OSCP. If you want , you can enroll on PNTP courses and even take the exam . Thanks you everybody for the replies, now i got that feedback that i needed to choose the CPTS path first and eventually get the OSCP or more red team-oriented certs. Training path noob to oscp using eJPT > eCPPTv5 > oscp I'm contemplating taking both eJPT and eCPPTv5 in the next few months as precursor to doing oscp as I've read that oscp can be quite difficult especially the exam. The Penetration Tester path also has HTB boxes associated with each module, many of which are on TJ Null's list for OSCP prep. Here are some tips that most people don't seem to post on their blogposts/videos about gaining We would like to show you a description here but the site won’t allow us. The modules I have Hi there! I am currently working through the Penetration Tester role path to prepare for CPTS. Pentester path, and I'm currently engaged with HTB Academy. My doubt is that i am doing the exercises which tryhackme presenting to me without taking any notes. Like if I complete all of the basic and intermediate THM learning paths AND then complete the jr pentester path in Hack the Box, will that be enough prerequisites to take OSCP course and have a chance at passing the certification? Here are the lists of path and rooms that's helping my OSCP journey: Learning Path = Offensive Pentesting (did the first ver and now going through the revised version) Enroll on HTB Academy, finish CPTS track . g. After oscp - advice, tips Dear offsec community, What are the certs you’ve done or want to do after getting your oscp? I know it depends what you want to do on a daily basis but I’m just curious from your experiences and why you’ve chosen xyz certification/learning path Unfortunately, the OSCP seems to be the "gold standard" for breaking into ethical hacking. May 14, 2025 · Ultimate OSCP prep guide for 2025. Funnily enough, I recognize your username from another OSCP material after completing "Complete Beginner" pathways on THM ? Hi, Is the complete beginner path enough to go ahead with purchasing the OSCP single attempt package ? I believe it has 800+ pages pdf and activities. They are great stepping stones. I passed the exam with a score of 90/110. I made some revisions to assist in clarification and updated the guide with some additional tips and new content. Swap Hacking: The Art of Exploitation and replace it with Penetration Testing: A Hands On Guide To Hacking and you'll be good. They have a pentesting path and exam (CPTS) with content much more thorough than Pen200. So while I look for another help desk, IT position, I am wondering what are some good ways to study effectively for the oscp on a budget? (I have access to THM and starting with pentest+ path) We would like to show you a description here but the site won’t allow us. I kept the advice from Poppenboom in my previous post and I wanted to achieve Hey guys, do you think that going for this cert is too hard for someone who has no experience in cybersecurity in general? My only related experience is the CCNA certification, but that's about it, I want to get a job on cybersecurity but im also not sure if this is the right path to start, or even if this cert is valued for companies in general, so if you could share your experience that The issue arises due to the lack of validation on the path to remove paths which have directories of just '. b. ways to mitigate include performing validation of the path, and running in a 'chroot' which can then restrict the application to only access data from within the chariot, (this will still leave secrets for that application potentially I have security+ , cysa+ and ejpt with no cyber experience. tryhackme pentest+ path decent prep for OSCP? Hi, I noticed that tryhackme has a pentest+ path, and if you complete the path you get 10% off the exam, I really wanted to take the OSCP but it may not be possible because of finances. com Jan 2, 2023 · I spent a lot of time on the OSCP subreddit and reading the write-ups from people who had recently passed, on Reddit, Medium, and the like. Then , do OSCP . What learning path should I take to achieve it (Target 1 year). See full list on benheater. Ask. I've taken both courses and I can say that if you have completed the CPTS course, the OSCP exam shouldn't be very difficult even with the new AD sets. That should be more than enough . 133 votes, 29 comments. If they did put videos like OSCP and OSEP it would be more enjoyable to do the CPTS. Hi Guys So I think I have decided that OSCP would be a good option for me but looking for some guidance. A place for people to swap war stories, engage in discussion, build a community, prepare for the course and exam, share tips, ask for help. The content is a lot better in my opinion that SANS GPEN and Offsec PEN-200. The AD rooms and Offensive security path on tryhackme are also good . I absolutely love HTB Academy for its detailed material. I will be retaking the OSCP exam in June. Jun 28, 2024 · I’m thrilled to share that I recently passed the OSCP exam in just 5 hours with 90 points. Currently i am doing network security portion. As I don't know much, some people recommended me going to the route of getting the Network+ and the Security+ from CompTIA to have a more solid base on cybersecurity and networking and after that I should go for Pentest+ and then after Pentest+ I should go for OSCP and that that should be the path. After trying to get deep into OSCP material (hack the box, pentester academy, the web hacker handbook) I still find myself struggling to grasp and remember material I would need for the exam. The only thing it lacks is BOF, but Academy has a module for that. Ask your questions about cybersecurity careers here, and mentors can choose to answer as they have time. Another I see recommended is Powershell for Pentesters on PentesterAcademyc. I want to get the OSCP myself too but I'm not sure where to begin. Make notes about AD initial compromise vectors and on how to move laterally from MS01 to MS02. So far, I've completed the PEH, WIN, Linux privilege escalation, and Windows privilege escalation courses from TCM Security, TryHackMe's Jr. I invested around 350h overall. A bit ashamed to ask but I'm unemployed (quit my last job to get some certs) and have a hard time breaking into cyber. You cannot exploit AD without that foothold. I think that being an IT admin makes OSCP somewhat easier because you already have a lot of the foundational knowledge. txt for the domain controller? Do I need to root both client machines as well? We would like to show you a description here but the site won’t allow us. Do OSCP A,B,C. I have heard good word for OffSec's other courses like OSWE, OSEP etc and i am aiming to take the OSWE this year, but as far as the OSCP is concerned, there is really not much into it rather than the title and the addition to your CV. Background before OSCP: - Security Pre Sales Systems Engineer for a big security vendor, with some background in Routing / Switching (CCNP) - No offsec experience at all. I've narrowed down my path to achieve this goal and wanted to get your opinions on them before making a decision. Hi everyone, I'd like some advice regarding the OSCP certification. Hello everyone, many of you may remember my OSCP Guide for 2020. Objective : Passionate about Pentester career but I am currently studying for the OSCP, and am super excited AND nervous for the exam, haha. A curated list of awesome OSCP resources. After completing it, I would like to appear for the OSCP… r/oscp: A place for people to swap war stories, engage in discussion, build a community, prepare for the course and exam, share tips, ask for help. Mentor. Hi guys, I'm sharing with you my path to the OSCP certification, I hope that this is useful for you. I don’t know if the world needs another but I figured if they helped me I may as well pay it forward. I was really nervous about signing up for the OSCP but after awhile I just needed to take the plunge and go for it. HTB boxes sometimes are having stuff that you will never face on oscp exam. I took some time to write up my thoughts and some tips in a blog post here It really was a great experience and I learned a lot. But do note, the OSCP does have its drawbacks, and doesn't cover topics like legal, assessment scope, reporting, and some other niche things that you would be expected to perform on a pentest (e. trueA place for people to swap war stories, engage in discussion, build a community, prepare for the course and exam, share tips, ask for help. You may still run into something you haven't seen before, but 60 days should be fine. I think OSCP gives me a solid foundation. documenting all findings vs. One that is recommended on the OSCP side all the time is Tib3rius's Windows Privilege Escalation for OSCP on Udemy. From the "looking to get certified," to conversations/questions from current students, to certified and working professionals - this subreddit is dedicated to CompTIA certifications. Is any of that needed for the exam or can the publicly available tools replace the need for it ? I failed the OSCP exam once and have been taking the CPTS path for the past month to supplement my learning. Is OSCP We would like to show you a description here but the site won’t allow us. In addition to that, AD connected machines were added and will account for 40 points! Thats a lot!!. '. OCSP learning path? What should I do to train for the OSCP certification? I’ve started HTB pentesting path on htb academy. Is this a good idea? Will I gain anything or will it be relegated to mere brand recognition? Also, will the 3 month subscription suffice then? A place for people to swap war stories, engage in discussion, build a community, prepare for the course and exam, share tips, ask for help. The worst thing that can happen is a fail, which you'll learn from and can take the experience to smash the next attempt. If you want just the oscp, buy the ad module and maybe a few others on the cpts path. I've also tackled some easy to medium boxes on HTB. Jan 28, 2025 · OSCP Certification Path The OSCP (Offensive Security Certified Professional) certification represents one of the most respected credentials in penetration testing and ethical hacking. Grow. Htb is a completely separate business than offsecs oscp. I might post something like "How to pass the OSCP 101" unlike a personal oscp writeup this one would be solely focused on the students who's tackling currently in hope of assisting the people. You not only learn some stuff but will prepare for OSCP , for example . Does anyone have an idea of how good my chances would be finding a job right now for what i want? Sep 18, 2024 · Below is the compilation of resources I used and timeline of the study period. Now I want to get more into offensive security, played a little bit with Kali and metasploit, but I want to get serious knowledge about offensive cybersecurity. It took me approximately 4. How good is the Pen-200 course in preparing you for the OSCP? Is the Pen-200 course enough to pass the exam or is it recommended that you also do material outside of the Pen-200 course? For example HTB Academy's Penetration Tester path, TCM Academy's Practical Ethical Hacker. My redflags : No programing experience or knowledge. I have a basic understanding of networking, programming and linux administration. Get expert tips, study plans & key resources to help you confidently pass the Offensive Security exam. In the oscp pdf offsec made custom scripts to use against the target for active directory. What additional resources to the Pen-200 course would you recommend? My path to success on the OSCP In December I passed the Pen200 exam with a 110/100 score. I am about half-way finished with server-sided topics. I wouldn't say that it is a good way to prepare for OSCP because it is wayyyy too deep, but if you do end up going for OSCP after CPTS then yeah I can imagine it will probably be a The OffSec environment is the best place to study for the OSCP. Historically, a lot of people struggle with gaining initial foothold of machines. From what I read before deciding on the certification path, the OSCP is considered much easier compared to the CPTS. After that, I watched the two famous courses from 0xTib3rius for Linux and Windows privilege escalation. Honesty, I felt like OSCP taught me how to root a few easy boxes while CPTS taught me how to actually complete an external/internal pentest engagement, reporting included. I was just wondering, how useful this course was for the OSCP because I didn't see that many posts mentioning it. You can supplement other material but doing the labs and exercises is the best way to prepare. OSCP can only test you on easy exploit paths. It has no obligation to stay in line with the oscp. The boxes were always tough, and when you hit a point where you get stuck, take great notes so you don't get stuck next time and eventually you'll get there. Is it recommended to go for the 100% completion for the OSCP? or specific modules? I originally started the course because I was on the . Daily 10 hour shift (in India 🇮🇳) Give me Action plan : What I need to achieve OSCP ? Any H/W software? Any subscription? Only have Sat-Sunday to study. Is this okay? If no , how i For the AD set, the exam guide for OSCP states this: "Points are awarded only for the full exploit chain of the domain" What exactly is needed to get 40 points? Is it enough to get proof. Sounds like you're on the right path! Keep up with THM and the eJPT. My goal is to get my OSCP certification in about a year's time. Like CSCareerQuestions, only cooler. For me, if I were making an OSCP cocktail: 1 part Windows admin - know how to turn services on and off, add users, change passwords, browse through cmd and windows explorer, RDP, etc. Will this be enough for the OSCP or is there some offical training material? Also should I go for OSCP or do the HTB pentesting cert? I suggest putting OSCP on hold and do HTB Academy pentesting path instead . THM and TCM also cover BOF really well. Based on that, I'm going to skip the OSCP and will target the OSEP right away. 5 month to prepare for the examination. You should maybe try Hack the Box Academy as they now have a certified penetration tester path that should cover most of it. Practice enumeration, initial compromise and vanilla privesc methods. Best pathway to start into Pen-testing without any IT Background but good technical knowledge? Any help much appreciated 213 votes, 19 comments. Roll through the Web path, roll through that offensive security/ Jr pentest path, and try some of the AD rooms, maybe do the buffer overflow room as well because the way taught in that room knocked an insane amount of time off of finding bad chars than the super manual way PWK teaches. It will take you about 4 months maybe more . Think about it like this when you take the OSCP which environment are you going to use? It’s better to get as familiar with it as possible than use another platform. A reddit dedicated to the profession of Computer System Administration. I was thinking after I should attempt OSCP. I am Microsoft AD expert, thinking Pentester OSCP Certification. . PNPT -> CRTO -> OSCP alos if you have to choose between CRTP, CPTS and CRTO, which one would you go for? Other than the CRTP/CRTE courses, assuming I go that path, are there any courses/videos/labs I should do first?a. I started doing THM while juggling internships and school and have finished JR Penetration Tester and in the midst of finishing Offensive Pentesting. The thing which get people bored with CPTS is it’s too much reading like extremely too much reading and the thing that you’re obligated to complete the exercise just to be able to complete the module and get the path conpleted is quite exaggerated. I'm a CS undergraduate due to graduate in Dec 2023, and I'm trying to take up OSCP to better my chances in finding a job in pentesting. Apr 15, 2025 · I recently completed the OSCP and would like to start looking for opportunities in pen-testing or some sort of security engineering purple team gig. shortest path from owned queries are missing, but can be created by yourself The JSON schema change so you can no longer use Bloodhound-Python (there is a fork, however, it's missing things). s40 xrdmjh lros spo7 v7h7 pfv4 b8tm vk jj6v 2choe

Any unauthorized reproduction of articles, photographs, charts, etc. published on MANTANWEB is prohibited. Copyright belongs to MANTAN or its information providers.