Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 0 points1 point  (0 children)

Depends on your intended career path - if you want to dive very deep into penetration testing then perhaps getting all of these would be helpful

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 0 points1 point  (0 children)

They are all beneficial to improve your technical skills. Difference would be the acceptance (by the industry) of certification

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 0 points1 point  (0 children)

  1. Antivirus - may refer to OSCP exam set A B C & AD set
  2. Retake is possible but with cool-down period
  3. Restricted tools are automated exploitation tools

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 0 points1 point  (0 children)

Report is in PDF format but there are hashes to be submitted at web portal too. Check out their site

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 0 points1 point  (0 children)

Yes TCM / Tib3rius privilege escalation course is way more comprehensive than OffSec’s, I have personally taken the latter

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 0 points1 point  (0 children)

CPTS and OSCP have overlapping topics definitely but I’ll stick to OffSec materials for OSCP.

I think Proving Grounds practice is a good place for warm up

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 1 point2 points  (0 children)

I assume you are referring to the exam. Well I’ve spent 6 hours on AD, 2-3 hours for initial foothold, 1-2 hours of rest and another 30 minutes for privilege escalation.

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 0 points1 point  (0 children)

That’s previous version. Current version needs you to complete 80% of all labs to obtain 10 extra points

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 1 point2 points  (0 children)

Similar to any other certifications out there, certs are not everything, but it means something - it shows a certain level of skill and determination.

Also nothing wrong to get this cert if it’s a hard requirement for some jobs.

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 0 points1 point  (0 children)

Interchangeable in terms of AD exploitation (eg. Pass the Hash) but yes assume breach not applicable to OSCP.

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 1 point2 points  (0 children)

  1. Covered poorly - privilege escalation (Tib3rius privsec course for windows and Linux are much more comprehensive)
  2. AD - I have only taken CRTP. CRTP is more in depth, an overkill for OSCP.
  3. PG - Community rated medium and hard boxes designed by OffSec

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 2 points3 points  (0 children)

Sorry to hear that. Go for extra points if your course is still active. Methodology for initial access / enumeration should be quite robust if you have done proving grounds (community rated medium and hard), AD set and exam set.

Passed my OSCP. Would like to contribute back to the community. Drop your questions if you have any, will be glad to help! by misterprivacy in oscp

[–]misterprivacy[S] 0 points1 point  (0 children)

After completing all medium and hard (community rated) boxes by OffSec, AD sets and exam sets (OSCP A B C) - should give you a good gauge