jamesleecoleman wrote: » The eJPT is a great starting course. It's hands on but you answer questions. People have went from eJPT to eCPPT and then OSCP, eCPPT then OSCP or just OSCP. The OSCP is what people are asking compared to the eJPT and eCPPT.
boot wrote: » What kind of tasks do you do in your current job? What do you manage just fine, and when do you need guidance from your mentor? Since you actually have some experience in the field, I'd look over the syllabus of all your candidates and think about (discuss with your mentor as well!) what the proper startinig point is. If you're doing well in your current role, I don't see why you would need the eJPT. The eCPPT could be a good exercise, and make you more independent in your current job. The exam emulates a real-world engagement with quality reporting. The OSCP is better recognized and is considered a greater challenge, although I'm witholding my judgement until I have attempted it. The eLS exams don't expire if you buy the highest price plan, depending on how much time you have that may be a factor (the lab hours you buy do expire though, they are good for two years). Either way, follow ElearnSecurity on Twitter, and sign up for their newsletter. They usually have a promotion during late July/August IIRC. Also, they regularly give out invitations to the eJPT course (material only, no labs or exam) on Twitter and Reddit, which will give you an impression of their course structure and platform. The OSCP is more recognized, and at the moment has higher value on a resume. If it's your own money, think about what's important to you. The eCPPT will give you more or less complete material with a flexible schedule and a real-world exam scenario to talk about, the OSCP will give you resume value and recognition. On the technical skills they teach they are fairly equal, from my research, with OSCP additionally showing an ability to do your own research.
vynx wrote: » you mean between OSCP and eCCPT the difficulty level to pass the exam almost the same ?
boot wrote: » Overall, yes, that seems to be the consensus among those with first-hand experience. They are difficult in different ways, but the technical skills they demand seem to be roughly the same. Both courses require you to understand how things work. The studies aren't about learning and memorizing, they're all about practicing and understanding. Both exams are two-parted, first part is penetration testing and second part is report writing. The OSCP is 2x24 hours, the eCPPT is 2x7 days, so obviously you have more time to think during the eCPPT.
boot wrote: » eCPPT is 14 days, OSCP is 2 days. While the eCPPT probably has more targets/work to be done, it's not 7 times the workload of the OSCP. More time per target, if you're stuck you can research, sit back, and think. Both require reports. OSCP provides example reports, eCPPT provides a general reporting guide. eLS seems to weigh the report higher than OSCP. If you're a bad writer, passing the eCPPT report evaluation will likely be more challenging. According to eLS, most students who fail do so because their report is bad, not because they failed to compromise the targets. Is that real enough?
airzero wrote: » The labs are where the biggest difference and way of approach vary. OSCP opens you up to a lab of about 50 or so host that you have free reign to hack away at. There are some subtle hints in the forums and from the admins, but in large part you will have to figure out how to compromise these hosts on your own, which is where you really learn from your own experience. That's the real value in pursuing OSCP. eCPPT has the Hera labs which are much more focused. If your lab is about SMB enumeration, your going to be practicing SMB enumeration and if you can't quite figure out the objective there's a guide to help walk you through it. Much more "Hand Holding" approach in these labs. You still learn a lot but not much outside of the course, while OSCP requires a TON of self research and study outside the material to progress in the labs. Both labs teach you a lot, but in my honest opinion the OSCP labs are much better for learning and for actual experience. I've done labs for both and have attempted both exams so ask whatever you would like and I'll answer as best I can without violating the NDAs.
airzero wrote: » eCPPT labs do have a guide for if you get stuck and can't figure it out. OSCP has no guides to solutions, but there are some hints you can find in the student forums if you get stuck.
vynx wrote: » with 50 lab, it is realistic to make it done in 30 days ? i just thinking if we work from mon to fri, and we only have time after office hour to learn it. can i know based on your experience, how long it will take to finish 50 lab ?
deyavi wrote: » It depends how much time you can spend on it. I did it in 30 days with full time job (actually I did get 60 days lab time, but got all the lab machines within the first 30 days, and then scheduled the exam as soon as they had dates available)
vynx wrote: » you mean for the exam date is depends on the lab avaibility?
