The Ethical Hacker Network - Failed my first attempt at the OSCP exam

r0ckm4n

Jr. Member

Offline

Posts: 67

Failed my first attempt at the OSCP exam

« on: February 17, 2013, 06:27:32 PM »

I completed and failed my first attempt at the OSCP exam. I started PWB in April of last year. I started out with 90 days of lab time and have extended my lab time 7 times. My goal is to retest at the end of my lab time, which is the March 1.

I at least have a better idea on my weaknesses and how to prepare better. One thing I had a problem with was creating a good password dictionary for Hydra brute force password attacks. Anyone with any tips in that area, it would be much appreciated. I have been putting in a lot of hours studying the past 6 weeks. I average between 35 to 45 hours a week. I need to focus more on quality study time.


	Logged

CISSP, IAM, working on OSCP

superkojiman

Jr. Member

Offline

Posts: 59

Re: Failed my first attempt at the OSCP exam

« Reply #1 on: February 17, 2013, 11:51:06 PM »

When I was doing the lab, I had pretty good luck with the RockYou wordlist found here: http://www.skullsecurity.org/wiki/index.php/Passwords

However, it is a huge list and it's unlikely you'll be able to use it all in the limited time you have for the exam. Better to start off with a smaller list - like the one you created as you were going through the machines in the lab.


	Logged

OSCP, GSEC

MaXe

Hero Member

Offline

Posts: 669

I've just upgraded myself to a cyborg muahahaa!!1

Re: Failed my first attempt at the OSCP exam

« Reply #2 on: February 18, 2013, 05:12:27 AM »

A lot of OSCPs and especially OSCEs fall the first time. Recognize your weakness as you did, and make sure you won't fail the second time


	Logged

I'm an InterN0T'er

r0ckm4n

Jr. Member

Offline

Posts: 67

Re: Failed my first attempt at the OSCP exam

« Reply #3 on: February 18, 2013, 10:36:03 AM »

Quote from: superkojiman on February 17, 2013, 11:51:06 PM

Thanks for your repsonse, superkojiman. I will give that a try in the lab and work on a smaller list.


	Logged

CISSP, IAM, working on OSCP

r0ckm4n

Jr. Member

Offline

Posts: 67

Re: Failed my first attempt at the OSCP exam

« Reply #4 on: February 18, 2013, 10:36:47 AM »

Quote from: MaXe on February 18, 2013, 05:12:27 AM

A lot of OSCPs and especially OSCEs fall the first time. Recognize your weakness as you did, and make sure you won't fail the second time

Thanks for the words of encouragement, MaXe.


	Logged

CISSP, IAM, working on OSCP

ajohnson

Recruiters
Hero Member

Offline

Posts: 1056

aka dynamik

Re: Failed my first attempt at the OSCP exam

« Reply #5 on: February 18, 2013, 12:19:56 PM »

Skull Security has a great collection. There is also http://www.isdpodcast.com/resources/62k-common-passwords/ (which I believe includes some/all of the Skull Security lists). https://dazzlepod.com/uniqpass/ is also a nice collection if you don't mind parting with a few dollars.

They're not going to make you grind passwords for hours, so if you're not having any luck, maybe try being smarter about it -- i.e. reviewing HTML source for comments (random example unrelated to OffSec training/testing), or look for another attack vector. I found the darkc0de.lst file that's included with BT to be sufficient for most services with weak passwords in the lab.


	Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.

H1t M0nk3y

Hero Member

Offline

Posts: 864

Re: Failed my first attempt at the OSCP exam

« Reply #6 on: February 18, 2013, 01:21:07 PM »

Like MaXe said, many people don't pass the first time. I passed on my third real attempt...
Like many, you have probably found that the exam simply continue your learning process. It will only feel better when you'll succeed on your next attempt! Wink

Quote

They're not going to make you grind passwords for hours, so if you're not having any luck, maybe try being smarter about it

ajohnson is right about this. They don't expect you to crack password for hours and hours because you'll run out of time!

Good luck, don't despair and keep posting your questions!


	Logged

OSCP, GPEN, GWAPT, GSEC, CEH, CISSP

r0ckm4n

Jr. Member

Offline

Posts: 67

Re: Failed my first attempt at the OSCP exam

« Reply #7 on: February 18, 2013, 03:18:10 PM »

Thanks for the advice and encouragement, ajohnson and H1t M0nk3y.


	Logged

CISSP, IAM, working on OSCP

azmatt

Jr. Member

Offline

Posts: 76

Re: Failed my first attempt at the OSCP exam

« Reply #8 on: February 18, 2013, 06:41:28 PM »

I'll be taking on the PWB later this year or early next year and I fully intent to pay for extensions and fail a test or two Roll Eyes

It's tough to see in times like this but if you take a step back and look to your skill level when you first started the PWB I'd imagine that you're night and day better now.

If you stick with it, you will get it. Good luck!!!


	Logged

GCFA, GCIH, GSEC, GCFE, CHFI

r0ckm4n

Jr. Member

Offline

Posts: 67

Re: Failed my first attempt at the OSCP exam

« Reply #9 on: February 18, 2013, 10:01:26 PM »

Thanks for the encouragement, azmatt!

The course has well been worth it and I have learned a lot. I highly recommend the course and good luck to you when you start.


	Logged

CISSP, IAM, working on OSCP

r0ckm4n

Jr. Member

Offline

Posts: 67

Re: Failed my first attempt at the OSCP exam

« Reply #10 on: February 24, 2013, 09:14:06 AM »

I'm registered to retake the test next Sunday.


	Logged

CISSP, IAM, working on OSCP

DragonGorge

Jr. Member

Offline

Posts: 83

Re: Failed my first attempt at the OSCP exam

« Reply #11 on: February 24, 2013, 09:55:54 AM »

Good luck!

I 3rd (or 4th) what ajohnson said...a password attack shouldn't be your primary vector. Personally speaking, in the lab and on the exam, I didn't put much effort into password cracking/guessing other than the obvious ones (username, defaults, etc). I felt that there were more direct/less random ways to get into the machines.


	Logged

r0ckm4n

Jr. Member

Offline

Posts: 67

Re: Failed my first attempt at the OSCP exam

« Reply #12 on: February 24, 2013, 04:11:38 PM »

Quote from: DragonGorge on February 24, 2013, 09:55:54 AM

Thanks, DragonGorge!


	Logged

CISSP, IAM, working on OSCP

r0ckm4n

Jr. Member

Offline

Posts: 67

Re: Failed my first attempt at the OSCP exam

« Reply #13 on: March 05, 2013, 10:04:59 AM »

I failed my 2nd attempt.


	Logged

CISSP, IAM, working on OSCP

hayabusa

Hero Member

Offline

Posts: 1630

Re: Failed my first attempt at the OSCP exam

« Reply #14 on: March 05, 2013, 10:41:09 AM »

Sorry to hear it, r0ckm4n. I know it gets old when folks tell me this, but I'll pass it along anyway...

Don't get discouraged. As I'm sure you did last time, take it, learn from it, and keep growing. If it does NOTHING else, it'll teach you that, no matter how much you know, there's always things to be learned.

It's both a blessing and a curse, in the IT security realm. For those who LOVE change, there's ALWAYS change / updates / new ideas, methods and technologies. For those who don't... well... Wink

Either way, I'm confident you'll continue to grow, and you will succeed, when you're ready.


	Logged

~ hayabusa ~

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'

OSCE, OSCP , GPEN, C|EH

Pages: [1] 2 3 ... 6 Go Up

« previous next »