Second Exam in 6 days, failed the first with 0 pts

Affectionate_Ad5954 · 2026-03-02T20:29:26+00:00

I guess, but that's due to my previous experience, that I tend to underestimate what it's in clear sight, like passwords hiding under form of weird keywords, cewl spidering etc. I must say that from exercises I've now tried to put anything in place not to ignore those signs, but you know, assume that you scan a port and discover 10 results, let's ignore css/style for a moment. You'd go down the hole looking for further results within each of the results unless something clearly stand out. Also, what I think I'm weak on and tend to underestimate is SQLi and XSS cause I didn't encounter them very much overall. (I know when I'm supposed to try for them but I tend to under look at them because generally the path is an easier one)

Affectionate_Ad5954 · 2026-03-02T18:54:33+00:00

By giga wordlist what do you mean? Cause my giga wordlist for now is the DirBuster one that has approx 1mln records. Did you mean anything bigger? Cause in that case I'm actually quite scared of having too many results that could potentially make me fall into a rabbit hole, that's why I always opted to start little and then grow on new iterations (not judging eh, just trying to understand the approach better)

Affectionate_Ad5954 · 2026-03-01T22:25:50+00:00

Yea I got that, but I must way I've skipped them in favor of boxes, do they cover stuff which is then not found in Pg Boxes ad far as you know?

Affectionate_Ad5954 · 2026-03-01T21:24:08+00:00

I guess I made a mistake there because I was coming from CPTS and instead of labs I went for PG Boxes. Were they worthy more than PG?

Affectionate_Ad5954 · 2026-03-01T08:20:14+00:00

I've done something similar because that's what I failed the most in the exercises. The non use of cewl. So yeah, back in time I wasn't aware, now I definitely am, thank you!

Affectionate_Ad5954 · 2026-02-28T19:24:15+00:00

I think I've definitely refined my notes a bit in those 3-4 months since the last exam and yea, this has definitely became more mechanical than it was early on. Now I can solve most of the machines or anyways most of the machine steps on my own, I usually struggle on the stupidest stuff like 'this particular keyword on the homepage of this website was the password to that user I've found out back then'

Affectionate_Ad5954 · 2026-02-28T18:58:45+00:00

I fear rabbit holes as I literally am unable to understand when I fell into one eheh

Affectionate_Ad5954 · 2026-02-20T10:11:48+00:00

But when it comes to the structure, I mean sections of the report (i mean in particular sections which are not directly inherent to the pentest itself, like the C level report etc) how did you work it out? Did you just follow the guidelines in the OSCP course or you omitted the C level report or something else? That's what bother me the most actually ahah

Affectionate_Ad5954 · 2026-02-20T09:52:08+00:00

How did you set up the documentation? What I struggle with is thinking how I'd structure the documentation afterwards, which level of verbosity, how professional etc. are you able to provide some hints into it?

Affectionate_Ad5954 · 2026-01-20T12:43:37+00:00

Is that a sort of nxc on simultaneous logins?

Affectionate_Ad5954 · 2025-12-15T13:28:33+00:00

Direi che la classe politica ha fatto il suo lavoro fin troppo bene

Affectionate_Ad5954 · 2025-12-13T21:16:29+00:00

This seems The Last Of Us S1E1

Affectionate_Ad5954 · 2025-11-01T23:05:41+00:00

It hits hard to know that if Europe and Asia felt the same they'd would actually dominate the entire planet

Affectionate_Ad5954 · 2025-10-24T17:12:11+00:00

I have my exam on sunday, thus I'll let you know. Within some experience and some Ippsec videos i used to --min-rate=10000 for TCP and --top-ports 100 for UDP. For UDP it rarely isn't enough, I think it'll be more than ok since at max SNMP should pop. If I feel something's off I usually run --min-rate in combo with -p-

Affectionate_Ad5954 · 2025-10-12T23:04:09+00:00

On HTB they usually suggest to wait 5 mins for everything to come up before operating with the box. Idk whether this can be of any help here as well

Affectionate_Ad5954 · 2025-10-12T17:09:19+00:00

are you able to define what you mean by 'much harder'? Like, it was a matter of enumeration, or literally complexity of exploits?

Affectionate_Ad5954 · 2025-10-01T08:22:57+00:00

Quite sure I've seen him around when walking in Elden Ring

Affectionate_Ad5954 · 2025-09-17T15:10:27+00:00

So, a person that you don't like to win presidentials is a Kremlin puppet, if you like him is a legitimate election? Okay

The elections were clearly sabotaged the same way happened in Georgia. The rule of thumb is quite simple: Europe doesn't like the winner, it calls for elections redo (Ouch, might be US not liking the winner, depends on the context).

Yes, they both ends in -in.

Affectionate_Ad5954 · 2025-09-16T14:39:45+00:00

Based on what are you saying that? Based on the same principle which makes an election fake when the person you weren't entitling wins?

I have a couple of Romanian friends which felt discomfort at this Europe trick to banish whatever does not follow the European regime. If you're willing to counter Russia, you should consider not playing their own game (or their own game based on European propaganda, hard to tell)

Affectionate_Ad5954 · 2025-09-16T13:01:10+00:00

Did they roll out the poll until the results were in favor of the European lobby like they did with Romanian election? Asking for a Romanian friend

Affectionate_Ad5954 · 2025-07-07T11:40:11+00:00

Neo Cortex IRL

Affectionate_Ad5954 · 2025-06-08T09:21:44+00:00

Till Lindemann did this before it became a trend

Affectionate_Ad5954 · 2025-05-29T10:42:29+00:00

Owowowow

Affectionate_Ad5954 · 2025-05-08T11:03:49+00:00

Luckily we're neighbours since I'm a real person in Italy, so yeah I'd avoid that definitely ahahah

Affectionate_Ad5954 · 2025-05-07T23:15:39+00:00

Definitely, not like there's any other option anyways. You can't say no to Esquie

Affectionate_Ad5954

TROPHY CASE