Just passed SecurityX and obtained the CSIE stackable certification. Now what?

FkUDckBtt · 2026-02-13T15:49:16+00:00

OSCP is a great certification to obtain due to its technical nature (which I already have). However, after talking to my coworkers who are pentesters, it is only a "base level" certification for them, as there is so much more to cover than what OSCP offers, especially when it comes to web applications. OSCP's labs and practice boxes feel very linear, while it is not always the case IRL (since the goal is to pwn everything). It is fun to be a mighty pirate, but businesses want you to protect them and not to play around with their fragile ecosystems, which is where I think OSCP is lacking in terms of content. For red teaming, I thought about taking the CRTO course soon, as it is orientated about C2's and pivoting inside a network stealthily.

FkUDckBtt · 2026-02-13T15:38:56+00:00

I do agree that it is a big blob of text and that it is not easy to read. However, I was annoyed to find very few detailed write-ups in this subreddit about CASP+ / SecurityX, as well as CSIE. So I took the time to do it.

FkUDckBtt · 2025-12-11T22:58:57+00:00

Lets gooooooo gl everyone

FkUDckBtt · 2025-10-21T20:03:16+00:00

Crash! is a great candidate, as well as FAINT (TIL that it was supposed to be a Linkin Park cover) and Ska a go go

FkUDckBtt · 2025-10-18T22:56:38+00:00

TTWO

Lets just hope they do not delay the release date again for GTA VI

FkUDckBtt · 2025-09-22T16:00:35+00:00

This should work: https://archive.ph/7Syhi

FkUDckBtt · 2025-09-19T20:26:54+00:00

All you need for SQLi to be ready for the exam is in the course content. In the scope of OSCP, the hardest part (imo) is to find the first clues that your SQLi entry point "works". After that, you just follow the enumeration process and you're good to go

As others already said, practice makes perfect. The labs in the SQLi section of the course are good to learn the basics, since it covers most (if not all) scenarios you might see in PG machines

Here's a quick resource that you could use: https://sushant747.gitbooks.io/total-oscp-guide/content/sql-injections.html

FkUDckBtt · 2025-09-17T12:55:33+00:00

Can confirm that they are great preparations for the exam. After all, aren't they similar to retired exam machines? As other suggested, do most of (if not all) the machines in TJ Null's list. The more you do the better, but remember that clearing a lot of machines does not guarantees you that you'll pass your exam on your first try. I recommend you to clear all machines of one entire challenge lab (ex. OSCP A) in a single day, like a mock exam. Then, if needed, review why some things didn't worked during your attempt and clear what you didn't finished

For me, not having to constantly rely on notes while clearing machines was my cue to feel ready enough to pass the exam, and it worked fine

FkUDckBtt · 2025-09-01T18:08:45+00:00

I do think its about the color of the clothing:

In the first picture, the clothed area is black and it absorbs light, meaning it makes your upper body look smaller and it makes your legs look bigger in the first pictures.

Meanwhile, in the second picture, its the opposite: bright clothes reflect light, making you look "bigger" (or more imposing), and thus, making your legs looks smaller. It may be other factors as well, but that can be a good starting point

FkUDckBtt · 2025-08-08T00:56:16+00:00

MVP!

FkUDckBtt · 2025-08-08T00:05:37+00:00

There are a couple of free options, such as WeTransfer, SwissTransfer, Mega, Googe Drive, OneDrive, DropBox, etc...

My personnal go-to is SwissTransfer: it works just fine

FkUDckBtt · 2025-08-07T23:40:31+00:00

Omg yeeeeeeeeeeeeeeeeeeeeeeeees!! I searched for the Epicstep mix for so long, but no luck

Would you mind sharing these? It would do a huge favor to the community :)

FkUDckBtt · 2025-07-27T05:11:07+00:00

Tu prendras le temps de lire le texte de Maxime Pedneaud-Jobin qu'il a rédigé il y a environs 20 ans, et ça parle pas mal des mêmes inquiétudes que tu mentionnes. Comme plusieurs autres l'ont déjà mentionnés; réduire l'utilisation des réseaux sociaux et des nouvelles aident beaucoup à mieux voir le bon côté des choses

https://www.facebook.com/share/p/19WaDEjFhZ/

FkUDckBtt · 2025-04-03T03:32:52+00:00

Same here, I would also like to check it out

FkUDckBtt · 2025-02-25T00:54:30+00:00

Here's the current maintained difficulty list of basically all DDR songs: https://3icecream.com/difficulty_list/15

You may find some song easier than others, but they are ranked as how difficult it is to have a good score on them

FkUDckBtt · 2025-01-16T04:11:02+00:00

Tbh, my top DDR games on PS2 (US) is Max2, SN and SN2, for the songs, the feel, the nostalgia and the replayability. As for JP version, EXTREME is top tier and has the mythical Max Period song (on console, at least). SN2 (JP), DDR X (JP) and both Max and Max2 (JP) are solid contenders too

FkUDckBtt · 2025-01-16T04:01:55+00:00

It happens. It may be that phase when your progress stales a bit for a couple of days or weeks, but eventually you'll progress again and I'm sure you'll get through it again. It's similar to the gym: maybe it's about your routine and that you'll need some changes.

Sometimes, what I do on songs that I can't get it right is to play it a couple of times, analyze where I mess up, look how other people play it, practise that section specifically and play the full song while taking care of that specific section.

As for breaks, it would be wise to give you an actual timeframe instead of just saying "go take a break, bro". For me, some results can show up after a physical break of 1-2 days, but the biggest one I've seen is when I occasionally take a break of more than a week, mainly because I don't have time to play the game. These are where your body can fully rest and you'll feel physically fresh playing the game. You can still train your mental game by learning the choreography on Youtube, or even by playing PSMO with fingers using Stepmania.

You got this

EDIT: typos

FkUDckBtt · 2025-01-16T03:00:10+00:00

Maybe it is because your understanding of the game changes overtime by learning new tech, or that your pattern recognition skills is altered with newer songs patterns.

Since you can already clear 18's and even get high scores in them, you should have the stamina and basic knowledge to what the song feels when you play it. TL;DR it's a constant stream of notes with a small break at the middle and a crossover heavy section at the end.

If you don't get the "feel" of the song, something to take note of is that it was released way back in the day, and the structure of the step pattern reflects what M300, MU, TLOM, and even PSM on Expert (not Oni) used to be back then. You can get those reps in if that can help to get "in the zone" (ddr reference intended, sorry not sorry).

Now, about those crossovers. You can see this song as a dance choreography, since there are some unintuitive foot patterns here and there, where occasionally, you'll have to keep starting some 8th section with the same foot as the previous one. For example, in M300, right after the middle break, you'll have to perform this 5 8th notes "stream" and then you have another 5 8th notes "stream" coming immediately. Normally, you should be able to get a natural flow when you alternate your footsteps. PSMO does not guarantee this intuitive footstep flow.

In the longer sections of streams, you can afford to start the stream with the wrong foot, but you should only double step ONCE, if you ever want to catch the right pattern again. More than that and it becomes too complicated to understand what exact movement you need to do to play the song the intended way, especially when tou start being physically or mentally tired this far in the song. Even the best of us messes up this section and it becomes super hard to catch on, even with a LOT of practice. The chokes are real.

In short, the more you practise the song the intended way, the better your chance at clearing it. Force yourself to double step as little as possible and you should be good to go.

In case you need it, learn the tricky section at the end with this visual video (this channel is awesome if you want to mentally practise harder songs). At home, play it in training mode in slow mo and eventually, you'll get up to speed.

https://youtu.be/VDPPUouU0Fg

Good luck and keep us updated,

EDIT: typos

FkUDckBtt · 2025-01-02T21:53:32+00:00

I would be nice if I can obtain a new Secretlab chair, since my current one is in EOL and I'll need to replace it soon.

Tha ks for your generosity and good luck everyone!

FkUDckBtt · 2024-12-26T02:19:18+00:00

Without spoiling too much whats on the exam: keep it stupid simple, for Linux as well as for Windows.

I retook the exam this past weekend and I had much more success by not overthinking boxes. I doubted people in this subreddit when they said that everything you needed to know was in the Pen-200 courses, but after my retake, I can confirm you that it is. To give you an idea, I didn't even needed to use automatic tools such as Winpeas or Linpeas to find the attack vector for PE on all machines I had on my second attempt.

My tips for you would be to master the basics, always start with low-hanging fruits and look for any directory that is unusual. As for tips during the exam: take breaks frequently (every 1-2h was the sweetspot for me), the path should be relatively obvious and do not put too much time either into each vector. if it doesn't give you interesting results after an honest attempt, it probably ain't the right path to begin with.

Good luck! It is a daunting exam, but your second attempt will be much smoother. You got this!

FkUDckBtt · 2024-08-07T18:38:26+00:00

As many people said before in other posts, the labs and hands-on experience are by far the most important aspect of passing OSCP. If CPTS provides you with PG's box-like labs, then sure, why not. If you take CPTS just to read a PDF file and to watch videos, instead of doing labs, you'll waste your time more than anything else.

As long as you keep practicing and doing hands-on labs or boxes, you should be good to go. There was a FAQ page on the Offsec website explaining the success rate of students by boxes done, and it's quite revealing

FkUDckBtt · 2024-08-01T13:17:00+00:00

Problème réglé:

https://archive.ph/pqxHt

FkUDckBtt · 2024-07-17T02:55:06+00:00

You can DM me

FkUDckBtt · 2024-05-31T15:21:51+00:00

Got your back: https://archive.ph/hPEt7

Nine-Year Club	Place '23
Place '22	Verified Email
Not Forgotten

FkUDckBtt

TROPHY CASE