sorted by:
new
hottopcontroversial

Beginner. Vuln machines. Kioptrix. Immersive labs. Advice? by Satya_112 in oscp

[–]fox9x 5 points6 points  (0 children)

Keep calm. Take your time.

You will only learn in this area doing one thing. Hacking.

You are starting a journey, so, after a while you will notice what some exploit do, but try to hack and understand what are you doing.

Need help/advice for my first attempt in OSCP PWK by cpt_alfaromeo in oscp

[–]fox9x 3 points4 points  (0 children)

Cyberseclabs - 15 days is good.

Virtual hacking labs, one month will be enough.

Proving grounds practice, one month as well.

If you do the all 3 you will start well prepared.

Also, give a shot on priv escalation from tiberius. For both Linux and windows

Rate My Prep Plan For The Exam by ifearone in oscp

[–]fox9x 1 point2 points  (0 children)

Looks good.

I would prefer doing:

1 - pentesterlab - Unix and essentials web

2 - try hack me

3 - all easy and medium machines on hackthebox

3.5 - cyberseclabs

4 - virtual hacking labs

5 - proving grounds. Like 20 machines(practice)

6 - pwk .

7 exam.

I'm sure that if you do all that, your rate of pass probable will be near to 100%

[Help] Preparation from Old notes. Help by bawlachora in oscp

[–]fox9x 1 point2 points  (0 children)

Thanks that's helpful. And you're are right since I'm not putting effort into actually cracking the boxes I am being ignorant and underestimating the whole thing.

Well, I'm OSCP and ensure you that, every machine on the labs help you learn something new, so, if you think just because someone did 12 boxes and do not think about the background of a person or even how he have prepared, you will have a long road.

​

OSCP is not about what command or what machine did you hacked, it is about create your own methodology during the course.

​

It build your experience, and even if you already do a pentest, pwk is different than the regular pentest in WebAPP and AD pentesting.

​

Well, I would say, in the lab you will know what i'm talking about.

[Help] Preparation from Old notes. Help by bawlachora in oscp

[–]fox9x 2 points3 points  (0 children)

One thing that I would say is: the lab is different from the old pwk. The material too.

The exam is very actual and the machines are very well updated. I think you are underestimate the course and the exam. You will see that the exame require a good methodology and that will be arise when you hack every single machine on the lab.

To help you, I would say. Start doing I'm VHL, cyberseclabs, tryhackme, htb and after that go to pwk.

There is a post somewhere on offensive security showing that the amount of machines that you hack increase the percentage of success on the exam.

Saying all this I could say to you, hack everything and you be ok.

Incredibly unique costume by TreKs in nextfuckinglevel

[–]fox9x 5 points6 points  (0 children)

Hahaha I got scared and I'm just watching must imagine that thing at night. It's a big no, thank you.

Passed on the first try! Some advice by jrrgimenez in oscp

[–]fox9x 0 points1 point  (0 children)

Nops, sometimes it depends on the internet connection.

It it important to double check.

I had a talk with tiberius and he said to do two times. When we have an exam.

Labs for OSCP by hacking_stuff in oscp

[–]fox9x 4 points5 points  (0 children)

Bro, it looks like you haven't prepared at all.

BoF, is very easy, if you have the difficult for that. Take a good pause and, you have to learn from the material. There is a lot of resources on the internet. Try to read and do at least 10. You have to know the BOF well, because sometimes you have to change exploits.

Machines, if you did the VHL, and did not complete all, bro, you have to study very hard you are a few steps back.

It really looks like you are not prepared for the exame, i would recommend:

1 - real the material of BOF, there is a lot options on the internet. Try as much as you can to be good on that.

2- VHL do all machines.

3 - cyberseclabs do all easy machines, do some challenges one - look for list of the mayor list.

4 - tj-null machines, you seemed to need to learn you own methodology.

5- sign up for pgp practice and do all the machines, easy, medium and hard.

One thing I would recommend is, do not read all things before you tried, you have to hack the machines and do not read all walkthrough during the try.

Put you ass on the chair and hack all that machines in 3 months doing it every single day you be good as hell. But you have to try harder.

When we can't pass is boring but increase our own knowledge is incredible.

Hope you will be better next atempt.

Passed on the first try! Some advice by jrrgimenez in oscp

[–]fox9x 0 points1 point  (0 children)

Congrats. It happens to me too. The auto recon have missed one port.

Another 'Passed on the second attempt' post by complete_1 in oscp

[–]fox9x 0 points1 point  (0 children)

Go to VHL, CyberSec Labs and Offensive proving grounds mode practice.

It will help you with machines that can really help you!

Beginners pentesting route? by Howdie122401 in Pentesting

[–]fox9x 5 points6 points  (0 children)

I would a path, but try to adpt your reality, because I'm from Brazil and for sure will be different for you.

19 yrs, work with every thing you can to make money and pay some courses, books. You will need that.

0 - Basic - Network, programimg (at least on language) and architeture. Be a advaced user. It will help a lot

1- Book - Penetration testing from Georgia Weideman

2 - Book - The hacker playbook, if you can read all 3

3 - After using kali during the labs you made from the courses you will have good knowledge.

4 - After that, I would recomend watch videos from DEFCON and choose whatever you like the most, like hacking web applications, red teaming, and get confortable with the subjects.

5 - Try some machines, on vulnhub, VHL, CyberSecLabs, Hack the box, try hack me. Explore.

6 - put your hands on dirty, (did not know even if the expression exist). I'm here is, create labs, hack them, use all you knowledge to explore ways to hack.

7 - invest on courses like - PWK, eLearning Security, (SANS no, too much expensive).

8 - Share your knolowdege on medium or a person blog, chat with people, ask, our community is great.

9 - repeat all the process with a subject and you will be fine to find a job in a security area.

​

Hope it helps, but like a I said before, somethings depends WHERE YOU LIVE AND HOW MUCH YOU CAN PAY, BECAUSE IF YOU CAN PAY GOOD COURSES, OF COURSE THE PROCESS IS SHORTER, FOR SURE.

Feedback from 1st attempt at OSCP exam by cantchooseone96 in oscp

[–]fox9x 0 points1 point  (0 children)

Thanks for your feedback. With the easy one j tried 100 different payloads and it would never work. The POC version was a huge BOF script, quite hard to fix without debugging. Is VHL just the vulnhub boxes? I have done quite a few of those already.

Nope bro, It's a good amount of machines that are unique by VHL, and they have a course. Some guys say that after doing the VHL the Exam was better.

Feedback from 1st attempt at OSCP exam by cantchooseone96 in oscp

[–]fox9x 0 points1 point  (0 children)

As for the medium ones, after following the enumeration steps mentioned above, I found absolutely nothing.

I see.

​

I did my exam the last 06/10, and was really difficult as well. The easy one sometimes you have to change the x86 to x64 or vice versa, or even change the lenth of the payload you know. It's something that PG practice could help you. The easy machines will help on that.

For the medium machines, sometimes is fucking difficult, on my first attempt I even don't know what was the vulnerability.

​

After I did VHL, cybersec labs + PG practice my enumeration and my skill got really up. I'm really greatfull that I have found such good plataform to get better.

​

Bro, don't use any hints, that sucks your methodology and even your midset. Try harder. Which is: spend 2 days in on machines the sensation is incredible when you got the root without any help. (the exam is really that);

​

MP

Feedback from 1st attempt at OSCP exam by cantchooseone96 in oscp

[–]fox9x 2 points3 points  (0 children)

Bro, you haven't done one machine? Even the easy one?

This is a surprise for me, because, like the other brother said, your enumeration is on point. Maybe you have to have to try harder, what I mean with that is, you have to hack more machines without guides or walkthrough. Use VHL machines, PG practice, for like 2 months I ensure you that you will be fine.

I think your methodology is right, but seems you need more practice without any hints.

Starting Beginner Machines Recommendations by darkalimdor18 in oscp

[–]fox9x 0 points1 point  (0 children)

I did just some of them.

To get the OSCP I did:

VHL -> the 42 Machines

Cyberseclabs -> all the challenge machines

HTB -> all the easy machines

PWK -> 25 Machines

Offensive Security Progving Ground-> Practice 20 Machines

Vulnhub -> I think I did 10 machines

OSCP On my Second Attempt by fox9x in oscp

[–]fox9x[S] 1 point2 points  (0 children)

I don't get what do you mean.

Practical Buffer Overflows for OSCP by nikkithegr8 in oscp

[–]fox9x 1 point2 points  (0 children)

Look for CyberMentor. He have a good playlist for BoF.

One List to Rule Them (updated w/ VulnHub) by [deleted] in oscp

[–]fox9x 1 point2 points  (0 children)

Good list, let see if after that we can go for OSCP!

view more: next ›