.

OSCP exam in 1 week - Advice?

<<

caissyd

User avatar

Hero Member
Hero Member

Posts: 894

Joined: Thu Dec 31, 2009 11:20 am

Location: Ottawa, Canada

Post Fri Aug 13, 2010 12:03 pm

OSCP exam in 1 week - Advice?

Hi everyone,

I am challenging the OSCP certification next Saturday (August 21st). I think I am ready now. I have done all exercices and practice all techniques in the lab. I did many "extra mile" exercices. I have hacked into several servers in the lab and I now have many scripts to help me automate tasks. I should be done organizing my notes this afternoon.

So, with only one week left, I was thinking of, in priority order:

1) Review the exercices I have done a while ago, to refresh my memory

2) Prepare a "game plan" and practice it on a few lab machines. What I mean by that is to, for example, pick up 5 lab machines I haven't exploited yet and act like if they were part of was the real exam. So go through reconnaissance, scanning, etc

3) Relax and rest properly Thursday and Friday.

So, any other ideas?

Thanks
OSCP, GPEN, GWAPT, GSEC, CEH, CISSP
(aka H1t.M0nk3y)
<<

Darktaurus

User avatar

Full Member
Full Member

Posts: 181

Joined: Thu Sep 03, 2009 8:48 am

Post Fri Aug 13, 2010 12:09 pm

Re: OSCP exam in 1 week - Advice?

I have not taken it so I cannot give any helpful hints.  But I still wanted to wish you good luck.  And like you said, relax.  I did find these links for inspiration and recommendations:

http://www.chris-mohan.com/2010/02/how- ... -101-exam/

http://xyberpix.blogspot.com/2007/08/os ... -most.html

http://www.elwood.net/post/39599202/off ... urity-oscp

http://blogs.securiteam.com/index.php/archives/989
OSCE, OSCP, OSWP, CISSP, GPEN

www.agoonie.com
<<

KrisTeason

User avatar

Hero Member
Hero Member

Posts: 515

Joined: Sat Sep 08, 2007 7:48 pm

Location: /dev/null

Post Fri Aug 13, 2010 12:38 pm

Re: OSCP exam in 1 week - Advice?

Are you doing the report in the class? Before I ran out of lab time, I actually zipped up the vulnerable web application they had written for students to break (on your assigned XP machine), and stuck it on a VM of mine to practice on.

About a week before the exam, I spent it going over owning some of the lab machines I had already penetrated but focusing mainly on the Multi-Step machines as oppose to the launch a remote-root exploit and gain access to the machines. I also spent it getting together the final lab report.

Don't know if this will help you prep but here's my review of it:
PWB v3.0 Review
eCPPT (Silver/Gold), eWPT, GSEC, GISP, GCIH, OSCP, OSWP
<<

caissyd

User avatar

Hero Member
Hero Member

Posts: 894

Joined: Thu Dec 31, 2009 11:20 am

Location: Ottawa, Canada

Post Fri Aug 13, 2010 1:12 pm

Re: OSCP exam in 1 week - Advice?

Thanks guys, great reading.

focusing mainly on the Multi-Step machines as oppose to the launch a remote-root exploit and gain access to the machines


@xXxKrisxXx - Could you give me a few examples (in the lab, not the exam!) of multi-step exploitation? I have done many so far in the lab, but I want to know if I have missed some... (which is propably the case!)  ???
OSCP, GPEN, GWAPT, GSEC, CEH, CISSP
(aka H1t.M0nk3y)
<<

hayabusa

User avatar

Hero Member
Hero Member

Posts: 1662

Joined: Mon Jan 29, 2007 2:59 pm

Post Fri Aug 13, 2010 1:27 pm

Re: OSCP exam in 1 week - Advice?

Two things I'd do, prior to the exam:

1.)  As you'll be tired after the exam (unless you get enough points, fairly early on, like I did, to pass), make sure your report is done, up to the point of adding the exam data into it, as you only get an additional 24 hours after the exam to submit it all.

2.) Forgot about any scripts you've currently got written...  (no kidding)  While the knowledge of HOW to script stuff comes in handy, and you might script a few things, most of the scripting I'd done during the labs ended up wasting time in the exam.  I won't explain exactly why, as to not give anything away, but for the most part, very little extra scripting was needed, when I sat the exam.  You could do a few minor things, in an automated fashion, but aside of that, you'll spend more time working on your attack vectors, etc., and less time on heavy scripting.  I saw someone else, not long ago, had said something similar...  All of the extra effort he put into automating and scripting up things, before the exam, ended up being a waste of time and he threw them out the window fairly early on, and what scripts he DID use, he wrote, quickly, during the exam.

My  2 cents, anyway...
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
<<

hayabusa

User avatar

Hero Member
Hero Member

Posts: 1662

Joined: Mon Jan 29, 2007 2:59 pm

Post Fri Aug 13, 2010 1:27 pm

Re: OSCP exam in 1 week - Advice?

Oh yeah, and as I'd said before in a few of the other OSCP-related threads...

Be prepared to take breaks, regain composure and focus, and relax!
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
<<

Dark_Knight

User avatar

Sr. Member
Sr. Member

Posts: 294

Joined: Mon Aug 11, 2008 7:03 pm

Post Fri Aug 13, 2010 1:32 pm

Re: OSCP exam in 1 week - Advice?

- Rest.Rest.Rest and more Rest prior to sitting the exam.
CEH, OSCP, GPEN, GWAPT, GCIA
http://sector876.blogspot.com
<<

caissyd

User avatar

Hero Member
Hero Member

Posts: 894

Joined: Thu Dec 31, 2009 11:20 am

Location: Ottawa, Canada

Post Fri Aug 13, 2010 2:04 pm

Re: OSCP exam in 1 week - Advice?

Thanks hayabusa

Man it is stressful to wait for this test... It's difficult to know what to do to get ready for this exam...

I guess I will continue working in the lab and hack into more machines...
OSCP, GPEN, GWAPT, GSEC, CEH, CISSP
(aka H1t.M0nk3y)
<<

Dutchie

Newbie
Newbie

Posts: 33

Joined: Sat Jan 23, 2010 1:48 pm

Post Fri Aug 13, 2010 2:06 pm

Re: OSCP exam in 1 week - Advice?

xXxKrisxXx wrote:
Don't know if this will help you prep but here's my review of it:
PWB v3.0 Review


Maybe it is a good idea to post the review also on this forum as reference for futher candidates of the PWB.

I found it a very constructive article!

Many thanks!!
RA, CISA, CISSP, C|EH, C|HFI, CWSP, LPIC-1
<<

KrisTeason

User avatar

Hero Member
Hero Member

Posts: 515

Joined: Sat Sep 08, 2007 7:48 pm

Location: /dev/null

Post Fri Aug 13, 2010 3:50 pm

Re: OSCP exam in 1 week - Advice?

@Dutchie - Thanks, took me awhile to write it up.

@xXxKrisxXx - Could you give me a few examples (in the lab, not the exam!) of multi-step exploitation? I have done many so far in the lab, but I want to know if I have missed some... (which is propably the case!)  Huh


H1t M0nk3y - Sure. These are the machines that have taken multiple steps to penetrate that you've gotten. Like for example, you had to social engineer a client to click a link to enumerate software versions on the machine then social engineer them to open a malicious pdf file. Or even like step 1 - crack an ssh account, 2 - wget a privilege escalation exploit onto the machine 3 - Compile / chmod permissions 4 - run the exploit and get root privs. This would be considered a multi-step process because it's just not like, launch the remote exploit get a shell type thing. These are useful to practice because you can't expect the exam to be a simple launch an existing remote-exploit against a machine and get root privileges on it.
eCPPT (Silver/Gold), eWPT, GSEC, GISP, GCIH, OSCP, OSWP
<<

zeroflaw

User avatar

Full Member
Full Member

Posts: 208

Joined: Fri Feb 12, 2010 10:41 am

Location: Holland, Den Helder

Post Sat Aug 14, 2010 11:42 am

Re: OSCP exam in 1 week - Advice?

My exam seems still far away with about 12 days of lab time left. I've owned several machines now, including some linux boxes that took multiple steps to get root on. I still don't feel ready for the exam at all. Though it feels like my "skills" are improving :P

I'll make sure I have all the exercises completed etc, because I've heard it can help you pass the exam.
ZF
<<

j0rDy

User avatar

Hero Member
Hero Member

Posts: 591

Joined: Tue Feb 23, 2010 4:55 am

Location: Netherlands

Post Sun Aug 15, 2010 2:12 pm

Re: OSCP exam in 1 week - Advice?

great advice guys! i will look into some of them tomorrow...i think you can all guess why you havent heard from me in a little while. im alos in the last days of my lab time and i want to use every last minute of it. i think i feel the same way as zeroflaw: i have learned a lot these past 2 months, but i am really afraid i am not ready. i got though on about 50% of the systems (some root, some just a shell), which makes it even more exiting to see whats coming at the exam. i must say i enjoyed every minute of it! heck, you would almost intentionally fail the exam just to take the whole course again for the fun of it! expect a new written part of the walkthrough soon!
CISSP, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
<<

caissyd

User avatar

Hero Member
Hero Member

Posts: 894

Joined: Thu Dec 31, 2009 11:20 am

Location: Ottawa, Canada

Post Sun Aug 15, 2010 8:50 pm

Re: OSCP exam in 1 week - Advice?

i think i feel the same way as zeroflaw: i have learned a lot these past 2 months, but i am really afraid i am not ready


I think we are all feeling the same about this test!!!  ???

@xXxKrisxXx - Thanks! Here is another example. Compromise a web server, sniff legitimate traffic and use a client-side attack (a variation of one of your examples)

I am sooo humble right now. Regarding this exam, I feel like I am throwing dices...
OSCP, GPEN, GWAPT, GSEC, CEH, CISSP
(aka H1t.M0nk3y)
<<

hayabusa

User avatar

Hero Member
Hero Member

Posts: 1662

Joined: Mon Jan 29, 2007 2:59 pm

Post Sun Aug 15, 2010 9:24 pm

Re: OSCP exam in 1 week - Advice?

OK, next hint...

Don't over-stress yourself!  Believe me when I tell you, if you've honestly put in the hours on the lab machines, and have successfully exploited numerous different Windows AND Linux machines, you ARE capable of passing the exam.  That's NOT to say it's a simple thing, but if you understand how to enumerate services, how to find exploits on the exploitdb and other sites, and have some idea how to customize existing exploits, like the course teaches you, for differing OS service packs, etc, then you should be able to pass.

Don't underestimate yourselves, and remember, while you may or may not pass, with a perfect score or otherwise, even after OSCP, the world of pentesting is a neverending learning stream. 

I'll also tell you this.  There may be more than one way to 'skin the cat' against the exam machines, just as some of the lab machines had more than one way to attack / penetrate / exploit them, and you'd often find in real-world pentests.  I can tell you, based on discussions with others who have passed, that in a few cases, we approached some of the exam machines VERY differently, yet we all still exploited / root'd them.  When you pass, you'll enjoy talking to others, and learning from their experiences / methods.  I've already learned some new things, SINCE taking the test, from the others' discussions.  Well worth the time, effort, and comradery that you'll have put in, and received, in the end.

So feel comfortable with what you've accomplished in the labs so far, and if you UNDERSTAND what you've done, and the logic and methods behind it, you're well on your way to a passing score on the exam, already.  Don't stress, relax, and just make sure that you get plenty of rest, prior to taking it.  In fact, someone else on here had mentioned that they'd only spent time on about 7 of the lab machines, before taking and passing OSCP.  Not to say it's EASY, and that means that person has some wealth of knowledge and experience to draw from, obviously, but to say that the key behind the labs is to get you thinking like a hacker / pentester, and to teach you how to engineer your own methods / solutions to situations.  Not necessarily to hand you exact duplicates of exam machines, so that if you've beaten every lab box, you'll definitely know how to accomplish root on every exam machine.  It's all about learning and preparation for things to come.

Good luck to all, and let us know, pass or fail, so that we can congratulate you, or encourage you to work harder and pass the next time!
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
<<

caissyd

User avatar

Hero Member
Hero Member

Posts: 894

Joined: Thu Dec 31, 2009 11:20 am

Location: Ottawa, Canada

Post Sun Aug 15, 2010 10:33 pm

Re: OSCP exam in 1 week - Advice?

if you understand how to enumerate services, how to find exploits on the exploitdb and other sites, and have some idea how to customize existing exploits, like the course teaches you, for differing OS service packs, etc, then you should be able to pass.


Thanks for encouraging us hayabusa!

I will definitively continue working in the lab this week. I will also make sure I revise all the course material before Saturday.

Long week ahead of me, but I like this course so much! :)
OSCP, GPEN, GWAPT, GSEC, CEH, CISSP
(aka H1t.M0nk3y)
Next

Return to OSCP - Offensive Security Certified Professional

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software