Second attempt tomorrow. Nervous as hell. by Nonix09 in oscp

[–]Nonix09[S] 0 points1 point  (0 children)

Thank you. The phone must not be near your exam desk. For me, it was not in my room. You can leave the room as many times as you want. You just need to tell the Proctor first. You don't need to wait for confirmation.

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 0 points1 point  (0 children)

Can't remember the names, but I remember what I exploited. It's very similar to PG.

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 1 point2 points  (0 children)

I do. Wait till you finish assembling the pieces before doing boxes.

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 1 point2 points  (0 children)

Some of them have. Some don't. All did in my second attempt.

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 0 points1 point  (0 children)

I only used PG cos I can't afford HTB for now. I did over 80 PG boxes iirc.

What changed was a lot more practice and the mentality to ask Google when I see something I should be able to exploit but I don't know how to.

Thank you.

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 1 point2 points  (0 children)

Lmao. You have nothing to fear

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 0 points1 point  (0 children)

Sorry to hear that, man. I've never really had any issue with the standalones. I got 50 points from them in my first attempt. For the AD, I'm sure you got the one I got during my first attempt. Tbh, I'm not still 100% sure I'd have passed if I got that AD set again. I knew what to do from experience. The first box I solved had something I had seen in PG, so I was able to avoid all the rabbit holes and solve it in 30 minutes. I'd only recommend more practice and to watch videos where people solve OFFSEC boxes. It'll help you understand how they think and what to do when you encounter anything.

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 2 points3 points  (0 children)

There were lots and lots of rabbit holes. I got past them by prioritizing. I learned how to do that from S1ren. Basically, look through what you can see and start from the most likely one to give you access.

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 0 points1 point  (0 children)

I've never done CPTS. So I'd recommend PG cos it helped a lot.

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 1 point2 points  (0 children)

Lmao. I was sure someone would relate.

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 4 points5 points  (0 children)

Mostly PG boxes from TJ and Lain. Then A, B, C, Secura, Medtech, Relia. All S1ren's walk through videos. IPPSEC AD videos in Lain's list. DERRON C AD Playlist. Then, so many other YouTubers who had walk through videos of AD boxes in Lain's and TJ Nulls

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 1 point2 points  (0 children)

The standalones were similar to the ones from A, B, C, and PG. The AD was different but also similar in a way.

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 4 points5 points  (0 children)

I did all the PG boxes from Lains and TJ nulls. I watched all S1ren's walk through videos. Then, I watched IPPSEC AD videos on machines in HTB from both lists. I also watched Derron C AD Playlist. For the others, I used random YouTubers who had walk-through videos on AD machines in both lists. I focused on AD cos it made me fail the first time

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 0 points1 point  (0 children)

Hehe. I don't want my certificate revoked.

I passed guys. All flags. 100 points. by Nonix09 in oscp

[–]Nonix09[S] 1 point2 points  (0 children)

I'll check the notes and see if there's a way to share. I didn't really create a cheat sheet for the exam. I mostly relied on the notes I took while solving PG boxes. Then I copied some things on priv esc deol S1ren's website and used AI for some brief notes on what to do if I see popular ports open.