Thursday, May 3, 2018

My OSCP Journey

Well i have finally arrived, i just recently passed my OSCP (Offensive Security Certified Professional) Exam. I've have other certifications which im proud of as well but this one is very special to me because of everything that i went through to get work towards getting this certification. I know everyone else on the net has talked about their journey with the OSCP so here is mine.  This course not only taught me a lot  about the basics of penetration testing and it also taught me to be a pentester meaning that it put me in that mind state of a pentester. Now for anyone who is looking to take on this challenge and go through the course i would recommend the following:

1. Time - you will be spending a lot time at your  keyboard so make sure  you have an understanding
 wife/husband/boyfriend/girlfriend/kids because preparing for this exam going through the labs will take a lot of time.

2. Learn Enumeration Enumeration is key to successfully compromising the systems in the labs and on the exam it will serve you greatly.

3. Really learn and understand Privilege Escalation in both the windows and linux environment without this knowledge it will be very difficult to pass the exam.

4. Take the Time and Learn Buffer Overflow this will payoff i promise you. this was a good site that helped me overcome my fear of Learning Buffer Overflows.

https://www.vortex.id.au/2017/05/pwkoscp-stack-buffer-overflow-practice/


The next step for me will be the OSCE certification (this course deals more with exploit development).  Here are some useful links that i found helpful during my OSCP Journey, hopefully this post will help someone else who is interested in the the OSCP.

Cracking Kerberos Service Tickets (TGS) Using Kerberoasting

As of late I've been spending a lot of time researching and learning different techniques when it comes to attacking Active Directory En...