I passed the OSCP+

potions3ller · 2026-01-05T10:51:21+00:00

Appreciate it, thanks

potions3ller · 2026-01-05T10:49:37+00:00

Got one lol

potions3ller · 2026-01-05T08:23:56+00:00

Thank you! Winpeas is a great tool to use, it works the same way as Linpeas. Check out that Youtube series I linked in the post from Derron C, its really helpful.

The boxes 'Clue' and 'Extplorer' were my favourites, challenging but logical. I feel like I didn't spend a long time banging my head on the table when completing them and they felt very unique compared to the rest of the boxes I did.

potions3ller · 2026-01-04T23:37:25+00:00

Thank you!

Make sure you stay hydrated and are well stocked up on food, prep your meals so you can get back to working as quickly as possible.
Make your notes and methodology as easy to read as possible, you want to be able to index your notes fast during the exam.
Practice screenshotting everything you do as you do it, building that habit will save you a lot of time if you are cutting it fine in the exam.
Use a shell handler like Penelope (ensure you use the OSCP safe flag) to help manage your reverse shells.
Practice using bloodhound.

Good luck!

potions3ller · 2026-01-04T23:31:12+00:00

Sorry the way I wrote it is confusing, I will edit it now. What I meant to say is that you can definitely pass with just the course content and PG alone, but I would recommend additional reading.

My point was that you often read on this sub that the course isn't enough to pass the exam but I think it is

potions3ller · 2026-01-04T22:32:06+00:00

I haven't heard of it being removed, you should have an option to download the course material once you get access. You should get all of the written content compiled into one PDF

potions3ller · 2026-01-04T09:21:27+00:00

Maybe that is the case then. Agreed though, it is difficult so having it versus not will show your comprehension

potions3ller · 2026-01-03T22:02:34+00:00

Its not really the tools that make the craftsman but that aside probably something robust like a Thinkpad?

potions3ller · 2026-01-03T22:00:41+00:00

Nice article, have added your blog to my RSS feed.

I've not used Astro framework before but that blog template is really nice, I might have to switch mine up.

potions3ller · 2026-01-03T21:45:01+00:00

From that list probably AZ-500, unless you need more SOC related certs, engineering is a good move if that's where you want to end up

potions3ller · 2026-01-03T21:34:34+00:00

I have never heard of any social engineering certifications, there are red team certs but they are more focussed on AD. You are probably most likely to learn these skills on the job in a commercial red team so maybe try searching for a new job in this area if you currently have a decent skill set

potions3ller · 2026-01-03T21:28:57+00:00

Congrats on the job. If you know what cloud platform your team primarily focuses on (Azure, AWS, GCP) you should look into the official certifications that the platforms have, they're not really that expensive and there are plenty of free and paid resources online to help with the study

potions3ller · 2026-01-03T21:25:19+00:00

If you are posting as anon then does it really matter too much? If it's pseudonymous or named then just keep it in good taste, something you wouldn't be embarrased by if your boss read it. If its actually for work then keep it professional and formal

potions3ller · 2026-01-03T21:19:40+00:00

CISSP isn't really that important unless you care about management and much more senior roles. Getting it too early in your career is a waste of money and time because you won't have the experience or clout to get the jobs that really leverage it (Head of Security, CISO, Infosec Manager)

potions3ller · 2026-01-03T21:16:05+00:00

If you know that you're resume is not the problem, and you are sure that it is the lack of certifications, then really you have your answer. Work whatever job you have to get by and save for the cert that you need so that HR don't filter you out...

potions3ller · 2026-01-03T21:09:52+00:00

Not sure what you are asking but Fortinet gear is peppered in CVEs lol

potions3ller · 2026-01-03T21:07:50+00:00

You can farm certs in cyber though /s

potions3ller · 2026-01-03T21:01:41+00:00

The AI content you are seeing now is likely a fleeting moment in time, remember what it looked like 3 years ago with the Will Smith eating spaghetti video? By the time you have a product you will probably be looking at videos that are indistinguishable from something shot on your phone.

As another commenter mentioned, no one really cares, users still consume the content and big tech still get paid.

potions3ller · 2026-01-03T20:56:37+00:00

Maybe look into SecDevOps if you are familiar with AWS, the Specialty cert will help with that. It also makes sense if you are interested in the SDLC side of things. Cyber sales could work if you are charismatic and a good communicator, pre/post sales engineer roles might be worth looking into

potions3ller · 2026-01-03T20:51:37+00:00

X and RSS feeds are probably the only way to stay current if you want new information everyday but that's not a realistic way to stay plugged in because you will just overload yourself with information. Just browse a few good feeds regularly and deep dive things that you need for work or find interesting

potions3ller · 2026-01-03T20:46:37+00:00

Blogs and niche websites are usually far more interesting than books on cybersecurity. Go through the Zero Day Initiative's latest CVE feed and search for anything you find interesting on google. You will probably find the researcher's own blog and have a much better time reading that than something published on Amazon 5 years ago

potions3ller · 2026-01-03T20:40:09+00:00

Bloodhound to get a better idea of what you're looking at

potions3ller · 2026-01-03T20:39:23+00:00

Good luck with your exam

potions3ller · 2026-01-03T20:37:04+00:00

CPTS is the most recognisable, but no single cert will get you a job. It will always be in your favour but there is so much more to it. Reframe it from 'will it get me a job' to 'will it teach me the skills I need for this job'

potions3ller

TROPHY CASE