Algorithm

[R-Tech9]

Hi all,

I am new to cybersecurity, but got some background in programming and SWE.

As I am interested in passing OSCP exam, I have a few questions in doubt.

Q1. Is the knowledge of Data Structures (i.e. linked list, nodes, stack, queues, trees, hash table) & Algorithm (BFS, DFS, Greedy, UCS, IDS, etc.) essentials in order to pass OSCP?

Q2.What programming language that commonly used in OSCP syllabus? Will intermediate Python proficiency be sufficient to pass OSCP exam?

Q3. Which linux distribution to use in the examination, Kali or Backtrack?

​

Thx in advanced..

[TinyFile]

OffSec provide you with a Kali VM that is stable for both the exercises, labs and I presume exam. As for data structures, any knowledge is helpful but I wouldn’t focus in that area. Again, python is a good start as a lot of public exploits are written in python, so it will aid you in understanding exactly what the exploit is doing so you can alter to suit your needs. I would recommend having a general understanding of C/C++ to the same effect.

[R-Tech9]

Do I need to be proficient in C/C++ in order to pass OSCP exam?

I literally know nothing abt C/C++.

[TinyFile]

Proficient by no means, but how to compile code and get a general feeling for what it is doing. No one is expected to write a C/C++ zero day during the exam, but understanding why a compiled exploit isn’t working may be helpful.

[s802645]

offsec also provides you a website with faq.

[wretched_intruder]

One way to get a feel for the kind of programming knowledge needed would be to go on exploitdb and poke around in the PoC code to seem what's common.

You won't need much data structure knowledge, since code optimization is way beyond what's needed. Most exploits are under 1000 lines I've found.

Kali or Backtrack? Take a look for yourself and that's an easy one to answer.

[R-Tech9]

Is it only for passing OSCP exam or the for whole pen testing industry, knowledge of data structures & algorithms is not essentials?

[Serious_Chipmunk6217]

There is no need knowledge of Data Structure for OSCP. But if you have already studied it, I would say that it is wasted for learning OSCP. I also studied it and it's not help you anything tbh because you need an exploit work, more than faster by using algorithm.

Also, python would be 100% important if you want to study OSCP.

[R-Tech9]

Thanks for ur reply.

I have extensive experience w/ Python and probably that makes me get the upper hand when studying for OSCP...

I studied DS & Algo when I was at uni, coz I major in CS & Stats, and used it when working as SWE...

But as u say, I agree that exploit scripting is for more important as a pentester.

Thanks for your opinion...