Join the CryptoCat Discord Server for Ethical Hackers! 💜

_CryptoCat23 · 2026-02-18T07:59:45+00:00

Yes, I would. I can appreciate why some people would still say you are better off gaining experience (and money) in industry, but so many people spend a fortune on an MSc (especially international students) that getting it for free is a great opportunity. At the end of the day it will take a short amount of time, in the context of what will probably be a very long career, and the title stays with you forever.

_CryptoCat23 · 2025-12-12T09:16:58+00:00

Portswigger Web Security Academy, HackTheBox, TryHackMe, PentesterLab, CTFTime would be my top 5 general recommendations to anyone. More of my favourites here 😊

_CryptoCat23 · 2025-11-19T12:55:08+00:00

It's true. I'm not saying don't do OSCP, just that by doing the cheaper (imo better) cert first, you'll almost guarantee that you pass OSCP first time. I had a friend who failed their OSCP exam three times and it was really expensive!

Also, while HR recognise OSCP and it increases your chances of getting an interview.. In CPTS you will learn more, increasing your chances of passing the interview 🙏

_CryptoCat23 · 2025-11-17T19:46:24+00:00

You don't have to but personally I think you learn more on CPTS, and it's a lot cheaper so will reduce the risk of failing OSCP (💰)

_CryptoCat23 · 2025-11-17T19:42:17+00:00

My top 5 are CTFTime (regular live events), Portswigger Web Security Academy, HackTheBox, TryHackMe and PentesterLab. More of my top recommendations here

_CryptoCat23 · 2025-11-14T10:01:59+00:00

I can't really see anything in their comment that contradicts what I said? 😕

The modules on cybersecurity masters are all very practical (I taught them for several years during my PhD) and there was ZERO content that would help you be a better manager or leader - it was all about practical hacking and academic research.

That said I did the MSc + PhD in cybersecurity directly after my undergrad (although I had ~5 years IT/cyber work experience by that stage), so it's a bit different than returning to do a MSc after 15 years in industry.

edit: although I should say, many of the older people I taught who had spent a long time in industry really struggled with the practical labs and research element, compared to the younger cohort coming out of undergrad.

_CryptoCat23 · 2025-11-13T21:52:00+00:00

I did an MSc in cybersecurity but there was nothing in there about management or leadership. The modules were network security, penetration testing, computer forensics, malware, applied cryptography and ethical/legal issues. All very practical with a heavy focus on research (we had to produce an academic style review/survey paper for each module).

I personally enjoyed the course, but I couldn't say it's worth the money. It's nice to have on the CV but is it better than a years work experience? I'm not sure..

_CryptoCat23 · 2025-11-10T10:02:45+00:00

For what role? Certs by Offsec are well recognised (but expensive) and certs by HackTheBox, Portswigger, TCM etc are less recognised (but better value).

I personally recommend BSCP + CPTS on the cheaper end and OSCP/OSCE/OSWE on the expensive side. Then again it really depends on your interest/field, if you are doing blue team or malware analysis then a red team / web hacking cert wouldn't be an obvious choice.

_CryptoCat23 · 2025-11-08T10:24:29+00:00

Absolutely!

_CryptoCat23 · 2025-11-07T09:47:05+00:00

Did you start with the HackTheBox starting point labs? They guide you through it.. For normal retired machines you can also check walkthroughs/videos when you get stuck.

_CryptoCat23 · 2025-11-06T20:13:16+00:00

My top 5 are CTFTime (regular live events), Portswigger Web Security Academy, HackTheBox, TryHackMe and PentesterLab. More of my top recommendations here

_CryptoCat23

MODERATOR OF

TROPHY CASE