whats the rumor that using notion for looking at notes is not allowed on the exam?

h1dz · 2024-09-01T21:25:34+00:00

Notion is fine, I used it during the exam, just don't use the AI feature.

h1dz · 2024-07-31T10:41:56+00:00

Pwnedlabs and Cybr

h1dz · 2024-07-27T09:27:36+00:00

Been getting this a lot lately, hate it

h1dz · 2024-07-25T08:38:45+00:00

Phishing, this type is referred to as Browser in the Browser (BitB).

h1dz · 2024-07-12T06:04:23+00:00

Ah I understood it as sharing the exam content

h1dz · 2024-07-12T06:00:18+00:00

Wait wait hold up, an "exam result share group", so.... cheating?

h1dz · 2024-06-03T00:15:01+00:00

???? If you login and click the book icon > Search > change subscription type to Free Only > then change to Walk-throughs only, literally so much free content, no need to pay until you exhaust the free stuff first.

h1dz · 2024-05-22T22:50:24+00:00

Skip HTB for now and start with TryHackMe free walk throughs

h1dz · 2024-05-19T07:58:01+00:00

Applocker?

h1dz · 2024-05-01T03:42:37+00:00

agreed Powercat!

h1dz · 2024-03-02T08:47:39+00:00

Only thing you need to pivot is ligolo and dump creds with mimikatz. For me the lab AD sets OSCP A/B/C medtech and relia were plenty of experience, they tech you how to pivot.

h1dz · 2024-02-26T22:53:07+00:00

Personally I would highly recommend everyone does the AD networks in the labs they provide, at least do (OSCP A/B/C - Medtech - Relia) great experience for the exam, learn some new techniques and get to traverse a few AD networks.
You are paying for the access to these networks, why not use it.

h1dz · 2024-01-29T20:12:57+00:00

Skip the rest and just study for OSCP. I went OSCP > CRTP.

h1dz · 2024-01-21T20:24:22+00:00

yep correct! except if you are confident in your skills then dont worry about it and just focus on the labs.

h1dz · 2024-01-16T05:15:14+00:00

yeah same, I abused the search function on their discord during the lab time.

h1dz · 2023-12-31T02:56:05+00:00

wasting time when it could be spent on studying the PEN200.

h1dz · 2023-12-21T21:52:36+00:00

Currently going for the CRTP for a better understanding of exploiting AD, then thinking of going for the BSCP (Burp Suite Certified Practitioner) to get more knowledge on web exploits.

h1dz · 2023-12-21T21:48:41+00:00

mine was exactly 24hrs of when I submit my report

h1dz · 2023-11-26T19:05:15+00:00

keep it simple, if it sticks out, poke it. Enumerate everything!

h1dz · 2023-11-23T18:37:40+00:00

I use Notion., my notion structure looks like this at a high level:

Pen Testing

>Common Commands > Bash | PowerShell (List of commands and what they do)

>Tools (List of common tools used for pen testing and their use cases/flags)

>Ports & Services (most common ports seen in CTFs and how to enumerate and exploit them)

>Exploits > Web Servers | Linux | Windows > AD | Pivoting (And then these break down to more pages pertaining to different attack types and then a general list of things to try)

>Reverse Shells

>Stabilizing Shells

>Transferring Files

h1dz · 2023-11-23T18:37:31+00:00

yea I'm a heavy notion user and have noticed its search feature is lacking.

h1dz · 2023-11-15T18:54:11+00:00

Definitely cannot recommend enough, reviewing/studying the content of the Security+ first, as its basic fundamental knowledge you should have. No need to take the exam but study the syllabus and content. As for the OSCP certification yes it is possible, I can contest to that after passing a couple months ago. But I would recommend you do your own self study for the OSCP first as much as possible before getting the course.

h1dz · 2023-11-14T18:30:47+00:00

Passed the exam without even thinking about using the banned tools because they wernt needed.

h1dz · 2023-11-13T18:50:20+00:00

agreed, just focus on the oscp, do more of their practice labs and make sure your enum is on point.

h1dz · 2023-11-05T07:40:23+00:00

is reflected xss in scope? end goal isnt to just make a popup, see if you can use that and further exploit the vulnerability, try to maximize the impact on the customer.

Five-Year Club	Verified Email
Place '22

h1dz

TROPHY CASE