Welp, my test date came, I logged in, got set up, saw what it was about, and was like – I need to really try harder here. I knew I wasn’t going to pass, and I didn’t even try. I was so not ready. With two kids, work, and little bits of studying, I wasn’t retaining the information and wasn’t going to pass. I did find out how the BoF is going to go down and the points on the test…. so that is good. But now, I need to reframe and think about how to do this.
I am on parental leave for 2 1/2 months. Which means I do not have work to worry about. I will need to take care of Andrew, but when he is sleeping, I can study. But I think approaching the OSCP is going to take a fundamental shift. I can’t just go through the labs and expect to break boxes, I need to go through the labs, explore the labs, and then break boxes. And take notes. Nuggets along the way, and also have a methodology down. It’s the only way. So I bought some notecards and thought I would break up the areas into six sections:
- Information Gathering
- Vulnerability Identification
- Research and Development
- Post Exploitation
Information gathering will be netdiscover, nmap. Vulnerability Identification will be searching from the vulnerabilities. Research and Development will be setting up the vulnerability. Exploitation will be running the exploit, and post-exploitation will be priv escalation, etc.
Now, this might change as I pick up nuggets, but I think this is a good place to start. I have looked at a few, and I waffle with 2 & 3, whether they should be switched. Meh, I just need to start getting back into the journey.
I did a few Kioptrix boxes from Vulnhub, just to get a little footing, but I think starting tomorrow, I am going to re-signup for the labs and just do the studying all over again. I have to go deeper – study constantly. Try harder.
I started reading a book called “Deep Work” and it talks about how impactful work, the work you lock yourself into a room with, can bring change. For the next 90 days I am going to try harder. I really, REALLY want this cert. For me. I am not going to stop till I get it.