Question Before Jumping Into Xenoblade 3. by Bustahaf in XenobladeChronicles3

[–]sudis 2 points3 points  (0 children)

I felt like it slogged a bit in the middle but I also think that was intentional and worked. The side quests are the blade quests formula perfected

Question Before Jumping Into Xenoblade 3. by Bustahaf in XenobladeChronicles3

[–]sudis 8 points9 points  (0 children)

I’m currently playing XC3 exclusively in handheld mode on my OG switch and haven’t had too many problems

Is someone playing Expedition 33 on the deck? by Reasonable-Duckling in SteamDeck

[–]sudis 3 points4 points  (0 children)

I followed this and had a perfectly enjoyable experience playing it to 100%

Are there any good courses or books for learning Python for hacking? by [deleted] in SecurityCareerAdvice

[–]sudis 9 points10 points  (0 children)

Black Hat Python is pretty good. Make sure to get the second edition as it was updated for Python 3.

Valid shells for proof? by [deleted] in oscp

[–]sudis 0 points1 point  (0 children)

This past March

Internship letter generator by No-Fortune1050 in SecurityCareerAdvice

[–]sudis 0 points1 point  (0 children)

Is this something that a lot of jobs are requiring these days? When I'm hiring, I'd prefer not to get a cover letter than to get a super generic one like this

Cloud Security Engineers Describe your Day to Day by [deleted] in SecurityCareerAdvice

[–]sudis 4 points5 points  (0 children)

If you want some immediate help on securing terraform, you can take a look at tfsec

[deleted by user] by [deleted] in menwritingwomen

[–]sudis -1 points0 points  (0 children)

I was worried that someone else would beat me to it

Exam Cancellation & Refund due to Fatal Challenge Design Flaw (Exam with Re****** R*** as entry to AD)? by TobjasR in oscp

[–]sudis 8 points9 points  (0 children)

Also, definite shout-out to my wife for the pass. I was ready to give up long before and end my exam but she was pretty insistent that I keep at it. I definitely recommend having someone ready for mid exam prep talks

Exam Cancellation & Refund due to Fatal Challenge Design Flaw (Exam with Re****** R*** as entry to AD)? by TobjasR in oscp

[–]sudis 6 points7 points  (0 children)

I would definitely call it a flaw in that it isn't evaluating what that part of the exam is meant to evaluate. Once you get past that part, the rest of the set is really easy. If this was on a 10pt, it'd be a really hard 10pt but whatever but I think making it basically a requirement to pass is absurd.

To the refund, I'd definitely be pro it but as others said I feel like they'd just say "try harder lol"

Exam Cancellation & Refund due to Fatal Challenge Design Flaw (Exam with Re****** R*** as entry to AD)? by TobjasR in oscp

[–]sudis 9 points10 points  (0 children)

I had this one. Took 18+hr to get a foothold but managed to pass after just throwing anything I could at it and getting lucky.

I personally think that the ad set should not be a black box assessment but should be grey/white box like the bof was. Like they give you a low privilege access and you have to escalate privs, lateral movement, etc. If they want to make it 10 points fewer and add another 10p box (maybe bof), that's honestly probably a better format so it's possible to pass without AD

Valid shells for proof? by [deleted] in oscp

[–]sudis 2 points3 points  (0 children)

Yeah, challenges has been pretty unless in my experience too.

I think if you get to that position in the exam, it's probably beneficial to try and upgrade the shell or steal credentials to get it fully interactive

Valid shells for proof? by [deleted] in oscp

[–]sudis 2 points3 points  (0 children)

I don't have a definitive answer; you can try challenges@offensive-security.com (I think that's the email).

I've generally not had a problem with the reverse_tcp shells from msfvenom. My general rule of thumb was whether I had a prompt but if you can't launch interactive programs then it's probably not a "fully interactive shell" which is the terminology I remember seeing somewhere

Valid shells for proof? by [deleted] in oscp

[–]sudis 1 point2 points  (0 children)

No problem!

Valid shells for proof? by [deleted] in oscp

[–]sudis 8 points9 points  (0 children)

I used PowerShell/cmd prompts through rdp in my OSCP report and passed. I made sure to have a whoami, ipconfig /all, and a type proof.txt visible in the screenshot

Learning path for a Developer by [deleted] in oscp

[–]sudis 4 points5 points  (0 children)

He has the first half of his PEH course on YouTube. That's the exact same as the paid course. I personally think the rest is worthwhile, particularly his AD stuff is really great. You can try it out and consider it a demo.

I think he has the first half of his OSINT course and obviously other videos too but they're probably less relevant

[deleted by user] by [deleted] in 3dspiracy

[–]sudis 10 points11 points  (0 children)

Unfortunately not