Have some tryhackme boxes?

[Christophe]

Thank you Alvin! Love the avatar, by the way.

We’ve had a few community members ask us that question recently, so I think there’s something very interesting there 😄

What kinds of boxes/practice would you like to see from us? Any in particular?

[Alvin]

Thanks! For me, a developer wants to switch the job role. An OSCP would be a real boost here. After that, I’ll focus on practice for the interview like penetration tester.

There are oscp boxes outside. Albeit, I didn’t feel I’m practising for the oscp. All those things just randomly doing some boxes with regular procedure. I hope there is a roadmap with guide materials. TryHackMe has a similar one, but I think it could be better. One way or the other.

[Alvin]

I struggled three days about how to do blind sqli for oscp since sqlmap is banned, so does other automatically tools. I forced myself to do time-based injections manually on some boxes. It took forever. Then I realized it shouldn’t be. Some scripts should be okay. The guide that I want is avoiding these unnecessary rabbit holes to learn more efficiency.

[Christophe]

I hear ya, so even though there already are labs available, it’s not ideal because they’re not necessarily organized in a roadmap and instead it feels like they’re all over the place? I can definitely relate with that!

Are you actively studying for the OSCP then or just kind of playing around with different labs and thinking about it?

[Alvin]

Hey hey, I’m pretty active in studying oscp. Almost finished that tryhackme path. Start watching some materials and doing vulnhub oscp liked boxes next. Still, not sure lots of things. Should I spend more time on A or B? What counts ready for a specific area? Does reversing in it at all? When can I book the pwk then exam?

I think those won’t be a problem for a college student since they have plenty of free terms. But for people who have a full-time job, they need a roadmap rather than spend three years on that.

[Christophe]

Those exams and the official training are NOT cheap, so I definitely understand wanting to be as prepared as possible. I’d love to hear more about your studying progress, so please keep us posted.

You’ve probably already seen this, but I’ve heard this can be a helpful cheat sheet reference for the exam: https://backdoorshell.gitbooks.io/oscp-useful-links/content/