OSCP price?

yzT

I'm trying to find out the price of the OSCP exam, but I can't find it at offensive-security's site, only the price for the Pentesting with Kali Linux course and the price for retake the OSCP. I would like to know what is the price for the first attempt.

veritas_libertas

It's right here: Penetration Testing with Kali Linux

Master Of Puppets

The certification attempt is included when you take the course. If you want to take it a second time, you have to pay another 60$.

yzT

ohh I thought I had to pay for the course and for the exam

NovaHax

Master Of Puppets wrote: »

The certification attempt is included when you take the course. If you want to take it a second time, you have to pay another 60$.

Can't beat those prices

JoJoCal19

NovaHax wrote: »

Can't beat those prices

I too think the prices are great for what you get. OSCP is in my far far future plans. Too much on my plate at the moment.

Cold Titanium

I'm only two days into it, but I'm loving it so far.

Tom Servo

Just finished the videos. The coverage and materials are excellent. I would say similar to SANS GCIH which i took years ago, but better since it is not crammed into 4-5 days. Plus access to the lab environment to actually apply the techniques hands on (not something SANS provides).

NovaHax

Cold Titanium wrote: »

I'm only two days into it, but I'm loving it so far.

I'm rooting for you man...

Get it? Rooting for you. See what I did there? So clever...

Buh dum bum...cha

Master Of Puppets

Cold Titanium wrote: »

I'm only two days into it, but I'm loving it so far.

Good luck and have a blast! Make sure to give us your thoughts of the PWK when you are a few weeks in. The fact that you are doing PWK makes it even more interesting.

Best of luck to Tom too. I'm sure you guys are going to have a great time throughout this. I really envy you!

@NovaHax - lol..

YFZblu

I'm currently reading a C programming book that takes up a lot of my time - But after that I will be tackling OSCP...looking forward to it.

yzT

Is C that critical for the OSCP? Pure C or C++ is ok as well?

Tom Servo

Any programming knowledge/experience will be helpful. C, C++, Perl, Python, Ruby, etc. There is not a strict requirement to use any specific language, and exploits are written/can be written in a variety of languages.

Cold Titanium

"Good luck and have a blast! Make sure to give us your thoughts of the PWK when you are a few weeks in. The fact that you are doing PWK makes it even more interesting. "

I intend on doing a complete writeup/review of it

"Get it? Rooting for you. See what I did there? So clever..."

Harhar :P

Thanks guys, so far I've just started on Buffer Overflows. Can't wait to finish the material and start my assault on the labs.

YFZblu

yzT wrote: »

Is C that critical for the OSCP? Pure C or C++ is ok as well?

What I'm doing with C is unrelated to the OSCP certification. That being said, without looking at the syllabus now, I believe shell scripting and Python are used in the course - Maybe Cold Titanium can confirm.

yzT

YFZblu wrote: »

What I'm doing with C is unrelated to the OSCP certification. That being said, without looking at the syllabus now, I believe shell scripting and Python are used in the course - Maybe Cold Titanium can confirm.

I asked because it wasn't the first time I read that you need to know C in order to have success in the OSCP.

NovaHax

Languages that I used in the course included:

Bash, Python, Perl, Ruby, PHP, C

Never used C++ or C#. That's not too say that there aren't any exploits out there that are written in C++ or C#. But if there is any, they are rare...because these languages are not nearly as low level as C.

NovaHax

That being said...most of the script and code modifications you are going to do will be very basic adjustments that don't require you to have a thorough knowledge of any of these languages. You just need to be able to get a general idea of what they are doing.

Most of the changes you will make will include changing hard-coded IP addresses, hard-coded credentials, hard-coded network ports or shell-code substitution. That's about the extent of it. And all of this is going to be pretty much the same in any of those languages. As long as you can spot where to make those changes, you're good.

YFZblu

Good information, thanks

yzT

NovaHax wrote: »

That being said...most of the script and code modifications you are going to do will be very basic adjustments that don't require you to have a thorough knowledge of any of these languages. You just need to be able to get a general idea of what they are doing.

Most of the changes you will make will include changing hard-coded IP addresses, hard-coded credentials, hard-coded network ports or shell-code substitution. That's about the extent of it. And all of this is going to be pretty much the same in any of those languages. As long as you can spot where to make those changes, you're good.

I understand that they provide the exploits, right? Because usually exploits out there have parameters to configure that information.

Master Of Puppets

From what I know, they don't give you the exploits. It's up to you to find the one that you need for your specific case - be it on exploitdb or somewhere else google leads you. So you do need to know what you're looking for.

NovaHax

MoP is correct. Half of the course if figuring out the best strategy for attack, based on the environment.

docrice

Offensive Security's training strategy is to get students to really think about what they're doing and put things together, not just regurgitating concepts back from a book or two. Real life is often like that where you have to improvise or devise something new just to get seemingly-incompatible elements to work together.

That's hacking. And hacking requires in-depth understanding and some level of imagining beyond the obvious. This is what makes their training so great.

Master Of Puppets

docrice wrote: »

Offensive Security's training strategy is to get students to really think about what they're doing and put things together, not just regurgitating concepts back from a book or two. Real life is often like that where you have to improvise or devise something new just to get seemingly-incompatible elements to work together.

That's hacking. And hacking requires in-depth understanding and some level of imagining beyond the obvious. This is what makes their training so great.

Couldn't agree more! Otherwise, what's the point? This is why offsec courses are so awesome. If they spoon feed you and give you stuff, there would be no point. Trying harder is one of the best parts.

Cold Titanium

Well so far I've finished the course materials and gotten into about 8 boxes including ghost and bob. Woo boy, ghost was fun, and Bob can go die in a fire.:)

I'd say it has already been worth it

NovaHax

Glad you are having fun man. The first few boxes are the hardest. Just keep on pressing, and keep us posted .

yzT

I think I'm going to postpone the OSCP for a while. Working at mornings, Master's at afternoons/evening.. no time for OSCP! xD

Master Of Puppets

Great to hear you are having fun! Make us proud!

Cold Titanium

Thanks guys! I'm having a friggin blast!!!!! This is the most fun I've had in years on computers! Tough, but oh so worth it. If you wanna keep up with where I'm at I usually post some corny remark on my twitter as I get boxes

@MAXCONFUSION

max_walker

Hi, friend, i want to do OSCP. can any please tell me in India which institute is providing best training for OSCP?

deyavi

OSCP is an online course only offered by Offensive Security (www.offensive-security.com)