The OSCP Exam is Changing!

แชร์
ฝัง
  • เผยแพร่เมื่อ 2 พ.ย. 2024

ความคิดเห็น • 9

  • @iSgapetti
    @iSgapetti 2 หลายเดือนก่อน +1

    Hopefully the + version doesn’t become too mainstream (for HR specifically). Having to sit through this 48 hr exam every 3 years will not be feasible for a lot of people just to have the + version.

    • @hexdump1337
      @hexdump1337  2 หลายเดือนก่อน

      Yeah noway, it is way too big of an investment.
      I think it only makes sense in specific scenarios where the company needs you to have this cert for compliance and they are willing to pay you to renew the cert everytime.
      And I have no clue how common these cases are.

  • @jardani-jovonovich
    @jardani-jovonovich 2 หลายเดือนก่อน +2

    What is the difference between the local.txt and proof.txt? Is local.txt gain the limited shell without root acces? and proof.txt is able to escalate the privilege to got the root access, Is it correct sir?

    • @hexdump1337
      @hexdump1337  2 หลายเดือนก่อน

      Yes, these are files present within the filesystem of the machine. The first one, local.txt, is a file that you can access with low-privileged users (say, alice), while the second one, root.txt, is only accessed with a user with administrative privileges. In linux this is the root account, in windows is the administrator, and in AD windows is the domain admin account.

  • @lebs
    @lebs 2 หลายเดือนก่อน +1

    Hi! If one has gained 10 bonus points already, do you recommend to schedule the exam before or after 1. Nov?

    • @hexdump1337
      @hexdump1337  2 หลายเดือนก่อน +1

      This is a tough call to make honestly.
      The question is: will they also make AD a bit harder, or will they keep the same difficulty for AD levels? Because if they keep the same difficulty, then it should be simpler with the new format, since they are effectively removing one step and giving u gradual points for compromise. Consider this: how confident do you feel in AD? because even if you don't feel like 100% confident, if you know a bit of it, you will most likely be able to obtain the first machine, and eventually the second, and that will be like bonus points plus another 10 points.
      At the same time, if you really feel like you can tackle OSCP now, you should not scare yourself and just go for it. Playing too many "mind games" when it comes to the exam can be dangeorus. Just prepare, study well, do a lot of practice, and you will be able to face anything that is thrown at you (also follow my guides if you want eheh)

  • @Zachsnotboard
    @Zachsnotboard 2 หลายเดือนก่อน +1

    I’m surprised they didn’t add cloud stuff like azure and m365 defender

    • @hexdump1337
      @hexdump1337  2 หลายเดือนก่อน

      Yeah feel like oscp is kinda falling behind with respect to the content iself. I mean the stuff they cover is ok, like foundational knowledge in many different contexts (web, linux, windows, AD), however I feel like as of rn it is simply not enough what they cover to actually be professional in the field.

    • @maxfrischdev
      @maxfrischdev หลายเดือนก่อน

      At least OSCP is still WORLD'S (!!) apart from/ better than CeH...
      In the context of both having the name recognition.
      Regarding OSCP "getting old". It's at least still very much useful.
      Tho grossly overpriced 🙈