Advice needed. Best to choose that will help with OSCP.

ChaseBenfield

I'll make this brief. I have CEH, Security+, and I am waiting on my CHFI voucher so that is soon to come.

Educational Institution VP extended an offer of free training/cert to apologize for schools mistake.

I am interested in InfoSEC courses. Due to previous experience on my end and their catalog I am limited to:

• EC-Council ESCA
• Certified Computer Forensics Examiner (CCFE)
• Certified Data Recovery Professional (CDRP)
• Certified Reverse Engineering Analyst (CREA)
• Certified SCADA Security Architect (CSSA)
• Certified Web App Penetration Tester (CWAPT)
• Certified Penetration Tester (CPT)
• Certified Expert Penetration Tester (CEPT)

I want a challenge and a value added addition to my resume.

#1 Bonus: The certification that will help with OSCP exam.

Any advice GREATLY appreciated. Please let me know more about these certs; reputation, value, challenge, and content.

renacido

What do you want to do in Infosec?

Want to be a pentester? Pick one of those with "penetration tester" in the title.

Want to be a security analyst? Pick ECSA.

Want to be a digital forensic analyst? CCFE, CDRP, or CREA.

Seeing a pattern here?

OSCP is kinda the go-to cert to become a pentester, but it's going to make anyone in infosec better at their job. I'm prepping for the OSCP myself and I'm a security engineer. I just know it will make me better at designing security countermeasures and I think it will be a fun challenge.

So my advice is, figure out where you want your career to go and pick the course best suited for helping you get there.

This is what I'm doing to prep for my go at OSCP:

- Reviewing/labbing all the CEH stuff, going deeper into it than most anyone does to pass the exam (which is too easy IMO)
- Learning/practicing things I don't do everyday in my job: python, bash, etc.

Understand going in that the OSCP material is thin in some areas and OffSec is notorious for making you go do your own research to learn a lot of what is necessary to pwn the systems you need. Don't expect them to teach you everything you need to know. OSCP (PWK) is not so much a "course" but a "challenge". Good luck to both of us.