Started OSCP 4/9/2016

After reading a lot of OSCP threads these past few months, I've decided to start my own. These threads have really helped me a lot so I hope maybe one day this one will help others too. So I got my email on Saturday evening, downloaded everything I had to and went to bed to start fresh on Sunday morning. I spent most of the day just enumerating, and it was a bit long so I thought I'd give a shot at Alice. Turns out, it was really an easy one so it wasn't that a big challenge for me. That was it for me for the day, so day 1, 1 host down. I After work on Monday I decided to take a shot at Oracle since I was already a bit familiar with the services running on it. I got root on it after about half an hour. I then started enumerating Mike, and fortunately or unfortunately, I got admin credentials by just running a scan. I found another way to get in, but just can't seem to get it to work, even though I'm pretty sure the way I'm trying is the right way. So I guess we can say I got root access to it since I was able to get the proof.txt file but I'll go back at it a second time eventually to have a second way in. After this I decided to take on Bob. I was able to get a low privileged shell with Metasploit yesterday evening but I want to try to avoid using it. I can confirm that I just got a shell to it without Metasploit so it's pretty nice although it seems to be a bit clunky. Now, I'm trying to escalate privileges on it.

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

JoJoCal19

Congrats on the pass!!!!

I see you cleared it in two months. How many hours/days did you dedicate to it?

JasminLandry

JoJoCal19 wrote: »

Congrats on the pass!!!!

I see you cleared it in two months. How many hours/days did you dedicate to it?

I spent a good 4-5 hours a day on average. At first since I took the 90 day package I wanted to do 3 hours a day and 6-8 hours on the weekend but the labs are so addictive so I started spending more time on them. I would also like to mention to others here that I didn't root the two of the big guns in Sufferance and Humble and still managed to pass the exam. Although I would still like to get them before my lab time expires in about 25 days.

One thing I'd also like to say is I didn't use Offsec's VM at all during the course and exam, I used my own 64-bit Kali. So it is possible to do everything without the VM they suggest to use. And I'll say it for other people who are wondering like I did before starting this course, programming knowledge is not required but it is strongly suggested. I would say you need to be able to "read" certain languages to know what it's doing. Some exploits are somewhat confusing to understand so the more you know the better off you'll be.

All in all, I'm pretty happy with the course as I learned quite a few but I have to admit I am a bit disappointed as there's some stuff I wanted to learn that isn't much covered in this course or not at all. I have read a few books before starting this so it was almost as if I was just applying the techniques I learned in those books. But don't get me wrong, I still loved this course and learned a lot and I suggest it to anyone who wishes to take it.

After my lab time expires or when I'm done with all VMs in the labs, I'll look into either doing the OSWP or do a Python or ASM course on Security Tube as I need to up my game in that domain as I want to slowly start preparing for the OSCE.