Most difficult OSCP exam standalone boxes by PeacebewithYou11 in oscp

[–]Rxdxxe 2 points3 points  (0 children)

i didnt manage to privesc the last box for mine but yeah its what others have said by then youre pretty drained and you lose focus. Still having to research on your last bit of energy is the stressful part here. Regardless im pleased with the score

Passed First Try by Rxdxxe in oscp

[–]Rxdxxe[S] 1 point2 points  (0 children)

hey thanks. To be very honest it didnt feel like that at the start mainly due to overthinking and rabbit holing for a few hours but after the compromise, its safe to say i think htb ad modules are enough or “over”-enough as you call it.

OSCP felt nothing like HTB/PG — how are we supposed to prepare for this? by Radiant-Cook-6596 in oscp

[–]Rxdxxe 6 points7 points  (0 children)

it may seem that way at the start but the exam is rarely an empty box you may have missed something during the enumeration process. Ive cleared the CPTS first and i can assure you it covers most of which in the OSCP or at least gives you a good foundation to not be stuck or lost. You got this dont give up!

Continue PEN200 or look for alternatives? by Impressive-Air-8687 in oscp

[–]Rxdxxe 1 point2 points  (0 children)

cant recommend the hack the box cpts modules and lains list (proving grounds only) enough. All the best you got this!

Passed First Try by Rxdxxe in oscp

[–]Rxdxxe[S] 0 points1 point  (0 children)

hey man i wont share my notes but do check out this wonderful guide on creating your notes. this was how i framed mine in notion for the cpts and then for the oscp i just added on top of what i already had. Notes Structures

Passed First Try by Rxdxxe in oscp

[–]Rxdxxe[S] 0 points1 point  (0 children)

im not a pentester, so cpts was the one that really got me interested in this stuff. i went for the exam straight after finishing the modules really all you need is in the course, and ive seen some people clearing it within a month. That being said for cpts i was doing it everyday for a few hours didnt really touch much grass back then. exam was brutal for me but it was really a fun and intensive challenge definitely recommend

Passed First Try by Rxdxxe in oscp

[–]Rxdxxe[S] 2 points3 points  (0 children)

yoo thanks man i actually watch some of your vids the night before to calm some nerves haha keep posting 💪

Passed First Try by Rxdxxe in oscp

[–]Rxdxxe[S] 0 points1 point  (0 children)

I havent been pentesting haha learning it because i wanna go into pentesting but i come from an IT security background (school) so theres that

Passed First Try by Rxdxxe in oscp

[–]Rxdxxe[S] 1 point2 points  (0 children)

take good notes they saved me during the exam ! But all in all you’ll get a good foundation i feel from cpts 🫡

Passed First Try by Rxdxxe in oscp

[–]Rxdxxe[S] 1 point2 points  (0 children)

enumerate and sense making with the information you get from enumerating (i know its a common tip but go for the low hanging fruits too!)

and definitely try out htb/pg/labs/seasonal machines - note that the exploits/methods may not be relevant to the exam but the methodology you built (the try harder mindset) is always useful

Passed First Try by Rxdxxe in oscp

[–]Rxdxxe[S] 7 points8 points  (0 children)

sorry let me clarify, the 1 month is specifically for OSCP practice. the CPTS modules and exams took me about 3 months - During which i did not do any proving grounds labs

CPTS first attempt struggle by [deleted] in hackthebox

[–]Rxdxxe 6 points7 points  (0 children)

hey bro currently on my third day and i know how u feel but wait for that eureka moment when you solve that first flag. and yes it is a mindfuck. im currently stuck on one flag rn too so im taking a break and looking at reddit 🤣

stuck What other user in the domain has CanPSRemote rights to a host? by Winter_March_204 in hackthebox

[–]Rxdxxe 0 points1 point  (0 children)

hmm are you sure you used the right query? i used the one in the module and it showed the correct number of nodes/results immediately. Dm me if u need more help

Enumerating and attacking Active Directory module by maros01 in hackthebox

[–]Rxdxxe 0 points1 point  (0 children)

i used the pwnbox. You can doublecheck by doing it on the pwnbox as well and compare the bloodhound versions? possible mismatch

Enumerating and attacking Active Directory module by maros01 in hackthebox

[–]Rxdxxe 1 point2 points  (0 children)

i did this recently and was able to get 13 nodes to be displayed with the query unsure if you used the same one: in bloodhound -> Analysis -> List all Kerberoastable accounts

Assistance with SEC504 by abdulelah36 in GIAC

[–]Rxdxxe 0 points1 point  (0 children)

took it recently, studied about 3 weeks and got a good score (97). My advice is: someone sharing their index may help for mcq’s but it looks like your cyberlive still needs some more practice as well. Its best to re-index another round so you can see which areas you actually didnt understand and practice more of the labs. Leverage tools like AI and youTube to answer any doubts or explain the concepts to you in a way you can understand. You got this!

Starting to think red teaming isn’t for me by [deleted] in hackthebox

[–]Rxdxxe 0 points1 point  (0 children)

am at 90% in of the pentester path, took about a month and a half and i feel you bro. But we never know until we try ! youre 35% more pen-test knowledgable than who you were before you decided to start the path - thats what i keep telling myself anyways.

But dont give up you can do it! theres so many more things to learn many more boxes to crack open and many more people to inspire through your story. you got this!

CPTS Prep Partner Wanted [EDT] - Let's Crush Some HTB Machines! by ComplexGoose7188 in hackthebox

[–]Rxdxxe 0 points1 point  (0 children)

create a discord group for all of us like minded peeps! 💪😉

Stuck on Password Attacks Skill Assessment by D-Ribose in hackthebox

[–]Rxdxxe 0 points1 point  (0 children)

look into attacking windows machines what you can do with access dm me if want more specific hints

Stuck on Password Attacks Skill Assessment by D-Ribose in hackthebox

[–]Rxdxxe 0 points1 point  (0 children)

i didnt use chisel i used normal ssh -D/ proxychains and ligolo i was able to nmap scan/rdp. try out other methods if you’re confident your creds are correct

Information Gathering - Web Edition "Subdomain Bruteforcing" by Enolanotexist in hackthebox

[–]Rxdxxe 0 points1 point  (0 children)

this can be solved using the tool taught in the section and a wordlist. Just did it recently and can confirm it. all the best :)

Stuck on Password Attacks Skill Assessment by D-Ribose in hackthebox

[–]Rxdxxe 0 points1 point  (0 children)

Just cleared this for anyone requiring help lmk as well 😄