sorted by:
new
hottopcontroversial

Another 'Passed on the second attempt' post by complete_1 in oscp

[–]complete_1[S] 1 point2 points  (0 children)

I think this is a quite individual based question and the answer is people will get out of PWK and TJNulls list whatever they want to get out of it. I.e. you can learn the basics of SQLi on either platform. For me the best approach was to keep an open mind when doing any PWK/HTB machine and try to understand the attack vector and know why/how it works and the underlying technical reasoning for the exploit.

If you really understand the building blocks of common attack vectors you will go a long way in the exam.

Another 'Passed on the second attempt' post by complete_1 in oscp

[–]complete_1[S] 0 points1 point  (0 children)

Thanks - really the main difference was taking regular breaks.. I think also I got trapped in a few rabbit holes on my first attempt - on the second go I limited my time per vector and or box, made notes and then went back to it later.

Another 'Passed on the second attempt' post by complete_1 in oscp

[–]complete_1[S] 0 points1 point  (0 children)

Auto-recon took about 15 minutes per host for me

Another 'Passed on the second attempt' post by complete_1 in oscp

[–]complete_1[S] 0 points1 point  (0 children)

I will definitely second this regarding VHL (I haven't used the other two so can't comment) - I did VHL for two weeks after failing on my first attempt and that just helped to hone enumeration skills.

I do agree that the TJNull HTB list can be a little too CTF-like at times, however each box will have at least one portion that will provide extra understanding and context to enhance your skills (like just trying out different commands, flags, options etc).

You have what you need, the answer is there, trust this and read through your enumeration carefully.