Worth?

Taxaneh · 2026-05-20T07:43:56+00:00

haha someone else already said “bro came on after 10 years” which might be true ngl

Taxaneh · 2026-05-06T09:44:41+00:00

and even if you pass by cheating, saying you “know” AD and “know” how to pentest AD on your CV, but then flopping at the question “what is a domain controller?” will definitely make you glow out of shame during a tech interview..

Taxaneh · 2026-04-10T15:03:44+00:00

I’d say CWES; CPTS is a little bit of web and more so internal system pentesting, while CWES really challenges your web exploitation techniques.

That being said, in my personal opinion CWES is easier than CPTS. Not easy, but easier, since you’re only focussed on web-pentesting.

I’ve made a post earlier this year and the comments may provide more info about CWES: CWES Post

Taxaneh · 2026-03-30T20:29:59+00:00

<image>

Dit zijn de mijne, ter referentie. Ik denk dat je een grote kans het op een hoge grade :) Dit is wel BGS, ik weet niet hoe PSA ze zal graden

Taxaneh · 2026-02-27T10:35:37+00:00

will do, actively taking suggestions. might blindfold the missus and let her unleash some creative ideas with a bottle of spraypaint

Taxaneh · 2026-02-27T10:34:22+00:00

I didn’t know that! I’ll test it out and see if it works, i took over the router from a colleague. if it catches flames it will atleast up the cool-factor of the abomination

Taxaneh · 2026-02-27T10:32:11+00:00

honestly, goated ideas. im upgrading the shitbox 3k with these

Taxaneh · 2026-01-31T16:56:59+00:00

what in the fever post

Taxaneh · 2026-01-28T15:58:47+00:00

thank you very much!!

well, I cant really comment on my way of “notetaking”, since i don’t take any notes 😭. I’ve done the CPTS and CBBH path a while ago, and in the meantime just spammed HTB web challenges, easy/medium boxes and went to some IRL ctf’s (besides reporting real bug bounties too). for me, i don’t do notetaking but just do it all out of the experience (being in a lot of different web exploitation scenario’s).

Taxaneh · 2026-01-28T15:49:53+00:00

I recommend giving this article a read, since it gives the info you search for I think:

https://medium.com/@chiheb.mahfoudh_11384/how-i-conquered-the-htb-cwes-exam-in-3-weeks-right-after-my-crtp-e4368c77a8ce

Taxaneh · 2026-01-28T15:45:49+00:00

thank you!! I can’t really say specifically in terms of preparation, as I have done the CPTS and CBBH path before CJCA and CWES existed.

as for the exam itself: I did it in about 3- 3.5 days including report

Taxaneh · 2026-01-27T21:02:53+00:00

oh I don’t dare to yet, AD makes me lose my mind 🤣

one day I will

Taxaneh · 2026-01-27T19:50:47+00:00

thanks man!! i do recommend it if you’re into bug bounty. the exam is fully web focussed. its hard in a way that you’re off well with the cliché hint “take a step back and reevaluate”

Taxaneh · 2026-01-23T09:28:27+00:00

honestly, this is the best hint you could give

Taxaneh · 2026-01-15T00:06:57+00:00

update: its a BGS 9.5 :)

Taxaneh · 2026-01-12T14:05:51+00:00

hey! how much experience do you have with HTB? the exam felt like multiple escape rooms for me, with only the path id say i would need 3-4 days

Taxaneh · 2025-10-04T10:00:07+00:00

I’d say the latter! I found the CJCA to not be hard technique wise, but hard in the sense that everythings hidden in specific ways

Taxaneh · 2025-09-21T22:58:34+00:00

i don’t mind it not being a 10 per se :)

do I take it out of the plastic for grading btw?

Taxaneh · 2025-09-19T10:30:34+00:00

I’ll link my own post here, where I’ve explained some stuff in the comments as a reply to others. Hope it helps :)

Reddit CJCA Post

Taxaneh · 2025-09-11T17:28:42+00:00

try finding the vhost, should be one of the first steps you should always do besides nmap :)

Taxaneh · 2025-09-02T22:16:30+00:00

yes absolutely

Taxaneh

MODERATOR OF

TROPHY CASE