I think I should post the difference between the various CERTs mentioned here (CEH, OSCP,GPEN) as i have archived them.
CEH - I would rate this as 5 on a scale of 10. The reasons being its very heavy on tools. It tests the individual on the theoretical knowledge of tools and its options. If you memorize the function of the various tools and the options available you are golden. But achieving CEH does not proof that the holder has practical knowledge. I would place CEH at entry level of the Pen testing / Ethical Hacking cert.
OSCP - This is great course though the lecture portion of it is only 7 hrs but the labs are just amazing. Its a tough course and assumes prior knowledge of a lots of important concepts to get the maximum out of this course. Its more on practical side and if you are going for cert challenge you better be good at networking concepts and windows/linux command line. Still this course does not deal with business aspects of the Pen Test. But its a great valve for the money.
GPEN - Amazing course, very well structured, covers the business aspects and methodologies of Pen test which I believe no other course/cert talks about. In my opinion this is very important because you could be very good technically but if you cant deal with the business side, you will not be able to provide the true value of the services you have provided. It is very balanced on tools, concepts and labs. Does not Deal with with lots of tools but the tools discussed there are in depth providing deep insights and tips and tricks from trenches on using them. The philosophy of this course is different, in that it focuses on developing the skills on tools and tricks which are natively available on the OSs, with a rationale that when you are performing a Pen Test you most likely have the liberty to install tools on the Target.
Just my 2 cents.
Thanks
VJ
So doing the labs and extra mile is not enough for the exam?