[Alvin]

I struggled three days about how to do blind sqli for oscp since sqlmap is banned, so does other automatically tools. I forced myself to do time-based injections manually on some boxes. It took forever. Then I realized it shouldn’t be. Some scripts should be okay. The guide that I want is avoiding these unnecessary rabbit holes to learn more efficiency.

[Alvin]

Hey hey, I’m pretty active in studying oscp. Almost finished that tryhackme path. Start watching some materials and doing vulnhub oscp liked boxes next. Still, not sure lots of things. Should I spend more time on A or B? What counts ready for a specific area? Does reversing in it at all? When can I book the pwk then exam?

I think those won’t be a problem for a college student since they have plenty of free terms. But for people who have a full-time job, they need a roadmap rather than spend three years on that.

[Alvin]

Thanks! For me, a developer wants to switch the job role. An OSCP would be a real boost here. After that, I’ll focus on practice for the interview like penetration tester.

There are oscp boxes outside. Albeit, I didn’t feel I’m practising for the oscp. All those things just randomly doing some boxes with regular procedure. I hope there is a roadmap with guide materials. TryHackMe has a similar one, but I think it could be better. One way or the other.