OSCP - What to Expect on Exam Day

[@ITSecurityLabs]

I had to restart the proctoring software 3 times in firefox. It’s annoying when you are busy and the proctor says you have to refresh the page.

[@andyli]

That sucks, almost went with Firefox because no plugin was needed.

[@sharminator]

Learning a lot from your experience

[@andyli]

Great 😄

[@Max-mz3is]

Thanks. a million! I'm having exam on next week, this definitely gonna help me! :)

[@andyli]

no worries, good luck on your exam!

[@tangjunnz]

very informative, thanks.

[@andyli]

👍

[@ajpatidar.]

Hi Andy, what OS should we use while taking OSCP? If base OS is kali than how one can work on buffer overflow in exam

[@andyli]

I used windows base and Kali VM

[@Cossaw]

Thanks. Is there any active directory or network pivoting? I'm planning on doing a bunch of hackthebox and maybe some proving grounds if needed. Practice manual sqli and buffer overflow, and then book immediately after that

[@andyli]

Not at the moment, but in January they just announced AD and pivoting will be added to the exam

[@Cossaw]

@@andyli oh damn, okay! Guess I need to practice some more pivoting then ;)

[@mahimanvyas1956]

What was kali image you were using during the test. I mean was it the default image or you had made some customization. Also, are injection, LFI,RFI web attacks enough to clear boxes. Thanks & Regards.

[@andyli]

I just used the standard VM image from the kali website. You will need to enumerate and attack other ports as well.

[@JohnJohn-sf1df]

Andy, have you looked into the CPENT certification?

[@andyli]

I know about CPENT, it is not as well known as the OSCP

[@SuperCoderX]

Hi Andy, do you have full access to the Internet and your own notes/cheatsheats that you may have prepared beforehand? It's difficult to remember all the commands to run.

[@andyli]

Yep you have full internet access and all your cheatsheets

[@seanlau8069]

Hi Andy, for the troubleshooting script do you run it on the host machine or guest machine? Thank you for sharing your experience.

[@andyli]

run it on your kali machine

[@seanlau8069]

@@andyli Thanks, good luck on your second attempt!

[@LolLol-dj1tf]

If we shut down the computer, and take a "break". Then can we use our phones?

[@andyli]

Sure, I mean there is no way they would know.

[@devn00b]

Hey, how much time a day and how many days a week did you spend studying?

[@andyli]

I spent around 2-3 hours on the labs everyday

[@abyss7724]

Hey Andy. When doing the exam, can the exam be done on my pc or 'gaming workstation' or does this have to be done on a laptop?

[@andyli]

No it doesn't need to be a laptop

[@lukad6375]

Hello Andy, can OSCP alone (without any experience in IT) land me a job as a pentester?

[@andyli]

It will be a bit harder, you will need to sell yourself in the interview

[@mrfreeze8642]

firefox was busted for me on exam day, restarted with chrome and it worked well :)

[@andyli]

Glad I went with Chrome!

[@prestigexx_lol2145]

Thank you so much for the helpful information. What if you get back few months ago and maybe years, what are the best path and what is the topics to spend your time on to succeed the OCSP easily. Do you have to be smart ? I appreciate your time and effort for these videos and hopefully you pass the next attempts easily

[@andyli]

It would be different if you had previous pentesting knowledge or not. I started from zero knowledge, and I would not really change anything. People with previous knowledge can cut down the study time by a lot, do PG then PWK and you should be good to go.

[@mukto2004]

please share you notes :))

[@andyli]

Will do a video on notes once I pass the exam, just so I can be sure they are valid and good

[@MultiMooly]

Thanks Andy for you experience, highly appreciated. I am still wondering should I buy 30/60/90 or one year OSCP package or should I practice first on other platforms like HTB and buy the shortest package and the next question if let's say I register for one month package do I need to take the exam after a mouth or I have time anytime to take the exam. Thanks Andy

[@andyli]

One year OSCP package is definitely not needed if you do practice on other platforms. If you don't plan on doing the PWK exercises, get a 30 or 60 day lab time. There is no time limit to book your exam once the PWK lab time finishes. Check the offsec website because I am not 100% sure, but I think you can book it up to 1 year after your lab time ends

[@MultiMooly]

Thanks a lot Andy

[@JohnCKirk]

@@andyli The OSCP exam that comes bundled with the course has to be scheduled within 120 days of the lab end date. If you pay for a separate exam attempt later, it has to be scheduled within 120 days of the purchase date.

[@andyli]

@@JohnCKirk good info, thanks

[@janik_we1743]

You will pass it next time andy :)

[@andyli]

Thanks!

[@vasachisenjubean5944]

i call him senpai

[@andyli]

:D