Which exam before oscp to help getting into flow

mirror51mirror51 Member Posts: 84 ■■■□□□□□□□
Is there any exam which is  similar to oscp but very easier so that i can first give that exam to get an idea about pentensting and all stages.
I am very new to pentesting and first want to get understanding by preparing for  easy exam. Exam hs to have labs  etc not just theory and report writing as well to pass

Any idea ?

Comments

  • tedjamestedjames Scruffy-looking nerfherdr Member Posts: 1,179 ■■■■■■■■□□
    eLearnSecurity Junior Penetration Tester. If you're new to penetration testing, I'd recommend not going straight into OSCP.
  • Info_Sec_WannabeInfo_Sec_Wannabe Senior Member Member Posts: 405 ■■■■□□□□□□
    It is not an exam, but I suggest you look at TryHackMe or HTB so you can get some hands-on experience first and better appreciate the theory that comes with those exams.
    Three year plan: (2018) CISSP [X] and eJPT [ ]; (2019) eCPPT [ ]; (2020) OSCP [ ]
  • JDMurrayJDMurray MSIT InfoSec, CISSP, SSCP, GSEC, EnCE, C|EH, CySA+, PenTest+, CASP+, Security+ Surf City, USAAdmin Posts: 12,034 Admin
    In addition to practicing on HackTheBox, ,TryHackMe, and VulnHub, look into bug bounty programs, such as HackerOne, to find real-world targets for practice. Find blog reviews of pentesting exams and Google pentesting framework and start reading.
  • shochanshochan Member Posts: 955 ■■■■■■■□□□

    mirror51 said:
    Is there any exam which is  similar to oscp but very easier so that i can first give that exam to get an idea about pentensting and all stages.
    I am very new to pentesting and first want to get understanding by preparing for  easy exam. Exam hs to have labs  etc not just theory and report writing as well to pass

    Any idea ?
    I'm in the same the boat...though, I've passed the CySA+ it doesn't give you enough red team practical experience.  I've dug into the free rooms of THM and have enjoyed it so far, been stumped a few times...That's when you do reconn/footprinting to help figure out your answers.  I plan on paying the monthly $10 after I finish up the free stuff.  I also have the goal to sit for the OSCP this time next year, after I get more comfortable with these lab exercises.
    2021 Goal ~ OSCP

    Urban Achiever~ A+, Network+, i-Net+, MCP 70-210, CNA v5, Server+, Security+, Cloud+, CySA+
    A.A.S - CIS
  • chrisonechrisone Senior Member Member Posts: 2,182 ■■■■■■■■■□
    JDMurray said:
    In addition to practicing on HackTheBox, ,TryHackMe, and VulnHub, look into bug bounty programs, such as HackerOne, to find real-world targets for practice. Find blog reviews of pentesting exams and Google pentesting framework and start reading.
    In addition to this list, I would add Virtual Hacking Labs. $250 for 3 months lab access to 40 OSCP/PWK like hosts and course pdf. Only caveat is there is no buffer overflow practice.

    However you can easily practice BOF using other resources mentioned above. 

    By the time you have completed these you will be more than ready for PWK course and lab. 

    Good luck! 
    Certs: CISSP, OSCP, CRTP, eCTHPv2, eCPPT, eCIR, LFCS, CEH, AZ-900, VHL:Advanced+, Retired Cisco CCNP/SP/DP
    2021 Goals
    Courses: eLearnSecurity - PTXv2 (complete), SANS 699: Purple Team Tactics (Feb 2021), PentesterLabs Pro (ongoing)
    Certs: eLearn: eCPTXv2
  • mirror51mirror51 Member Posts: 84 ■■■□□□□□□□
    chrisone said:
    In addition to this list, I would add Virtual Hacking Labs. $250 for 3 months lab access to 40 OSCP/PWK like hosts and course pdf. Only caveat is there is no buffer overflow practice.


    provided i haven't done any pentest and if i read its pdf,  will i be able to do all  those 40 labs successfuly ? or i need some pre knowledge as well. I have 10 years  software/cloud/networking/linux/python experience but i am very new to security
  • chrisonechrisone Senior Member Member Posts: 2,182 ■■■■■■■■■□
    The course is for entry level to advanced.

    The course does a good job of introducing the topics and getting you up to speed. There is a discord channel I can get you invite to. The channel has a sub channels for each lab host where you can ask for tips/help. You can read previous students questions and answers as well. 

    Since TryHackMe is kind of free and they have awesome tutorials for beginners, I would try them first for 2 months then move on to VHL. 
    Certs: CISSP, OSCP, CRTP, eCTHPv2, eCPPT, eCIR, LFCS, CEH, AZ-900, VHL:Advanced+, Retired Cisco CCNP/SP/DP
    2021 Goals
    Courses: eLearnSecurity - PTXv2 (complete), SANS 699: Purple Team Tactics (Feb 2021), PentesterLabs Pro (ongoing)
    Certs: eLearn: eCPTXv2
Sign In or Register to comment.