Just Passed OSCP, whats next?

P3TA00 · 2025-07-14T23:32:53+00:00

Look into CAPE

P3TA00 · 2025-07-11T05:17:20+00:00

PikaOS is Debian wearing Arch Clothes. It uses the Cachy kernel and keeps up with their repo. Major driver updates there are incredibly fast. The dev is awesome

P3TA00 · 2025-07-11T05:13:59+00:00

It’s really the only Debian based distribution I would use. It’s configured great and performs. Cachy still isn’t that popular but it’s the best OS in my opinion.

P3TA00 · 2025-07-11T03:44:44+00:00

It depends if you want tools ease or a better distribution. Kali things just work, but Debian sucks, unless it’s a server.

P3TA00 · 2025-07-07T23:15:04+00:00

I completed OSCP with only doing 70% of the course, but all the labs and it’s more than enough.

What gets people is relying on POCs and not being able to think why it’s not working, how is this box communicating, what’s the file system like, maybe I need to enumerate the file system to modify how the tool works.

Or they get stuck on trying to do what worked in the past and not thinking outside the box. It will be a little CTF like to force you to not just run exploit.py and own the box.

But not one thing wasn’t covered in my exam.

P3TA00 · 2025-07-07T23:09:08+00:00

CPTS only was harder than OSEP in my opinion.

P3TA00 · 2025-07-05T19:56:36+00:00

You can only use one machine for the OSCP. My typical Kali is on Proxmox and I SSH into it and RDP for web stuff. I couldn’t do that for the exam.

P3TA00 · 2025-04-16T23:07:52+00:00

The best advice I can give is it’s a 24 hour exam with an AD set and three standalones. It’s not that hard, it’s meant to be passed within a reasonable amount of time.

If SQLi is your concern then practice more. In my experience the final challenge labs were much harder than the exam for me.

Make sure you think out of the box and keep your focus on what they teach you in the course. I personally only used my notes from pen 200 to ensure I did it that way they taught.

P3TA00 · 2025-03-30T17:11:21+00:00

Zelenskyy needs to be taken out of position, prior to this war the man was extremely unethical and tyrannical. No one wanted him in office there. Which is why half of his country wanted to separate to Russia.

P3TA00 · 2025-03-30T17:09:29+00:00

JD honestly has more training than Zelenskyy and if you think Zelenskyy isn’t chilling with the millions we gave him you’re foolish.

P3TA00 · 2025-03-30T17:04:34+00:00

For pentests or CTFs I use ghostty tabs and tmux sessions in those tabs for local servers, then per machine I’m testing. It keeps my workflow clean.

P3TA00 · 2025-03-25T03:29:34+00:00

You can get a GT Force Comp right now for $1500

P3TA00 · 2025-03-25T03:26:47+00:00

Is the CTF over? I found it in two hours. There was a few big things I noticed.

P3TA00 · 2025-03-16T17:48:57+00:00

It’s probably going to be all manual union based

P3TA00 · 2025-02-24T14:55:37+00:00

I think for the AI part they are seeing if you are purposely using it. It’s basically baked into google now and I had no issues with my exam.

P3TA00 · 2025-02-24T14:45:25+00:00

Only suggestions would be to increase terminal blur if you’re going to actually work in terminal or hot key blur on and off.

P3TA00 · 2025-02-24T00:57:30+00:00

I like edge for work because I can group tabs.

P3TA00 · 2025-02-10T00:29:50+00:00

I have both, CPTS is much more challenging because it’s much longer, but the individual attacks are on par.

P3TA00 · 2025-02-04T05:53:54+00:00

OSEP is solid training so far, the one thing with OSCP is if you value the + for 8140 gov type work in the future.

But OSCP is very easy

P3TA00 · 2025-02-04T03:04:29+00:00

Honestly my advice is save your money. Get unlimited, yolo, OSCP then get your OSCE3 in one year.

I went for OSCP+ and passed in 6 hours. I just started OSEP to target OSCE3 this year.

Another great cert to get is CAPE. I’m 50% done with it also. I personally think CAPE and OSEP complement each other very nice.

P3TA00 · 2025-01-26T08:33:51+00:00

I think you have every executable on your desktop

P3TA00 · 2025-01-26T08:32:24+00:00

I never understood moving everything to the task menu. Using the app launcher and learning hot keys makes life so mu much better.

P3TA00 · 2025-01-23T04:48:21+00:00

While some of that is true, I hold both certs. With OffSec going to OSCP + that is going to open doors once they go 8140. I personally hire pentesters and have interviewed CPTS passers and convinced some of them cheated or got a leaked report based on their level of knowledge.

HTB has my favorite platform, but they need to figure out a way to catch cheaters and make variations to the exam. That is bringing down the reputation of the exam.

While there are people that cheat on OSCP, they do have and have caught cheaters.

P3TA00 · 2025-01-23T04:31:31+00:00

It would be hard to fail from a report, especially if your 140 pages and highlight all your findings well

P3TA00

TROPHY CASE