0 to 65: Failing my OSCP Exam on the First Attempt

-

I sat for my OSCP exam on Tuesday December 15, 2020. I started at 11am and ended at 10:45am Wednesday. I slept for 1 hour.

Timeline

Name Points Time
Buffer Overflow 25 1:20 minutes
Windows Easy 10 50 minutes
Windows Medium 20 30 minutes for user. 1.5 hours for priv esc.
Linux Medium 20 30 minutes for local.txt. No interactive shell.
Linux Hard 25 Admin access to program. No local or root.
Total 65 points

Outcome

I rooted 3 boxes and obtained local.txt on one. I'm very happy with the outcome. I started studying for the OSCP in late July. If I took the exam in July, I would've got 0 points. I improved by 65 points! My first goal was to not look like a fool during the exam. I was a real deal contender! Before I committed to the OSCP, I even wondered if I was smart enough to handle it. Failing the OSCP exam at 65 points is my proudest failure. Why? The OSCP is harder than anything I've done before. College, my CCNA, Black Belt or running don't come close to it. There is no peer pressure. I don't have a teacher or peers in a class with me. This journey you travel alone, at your own pace. I studied for a minimum of 300 hours, if not more. I haven't had to test my dedication this hard for this long. I've expanded my accountability and discipline.

Strengths

Attitude

I have a Naruto like "Never Give Up" attitude. I don't talk down to myself or think "I'm gonna fail the exam". My headspace is positive. I was really positive to myself and cheered at each system I took down. I thought I was going to pass the exam until 9pm hit. After I thought "Oh no, I'm in trouble". Even when it looks like I'm going to fail, I try to save the ship with all means possible.

Privilege Escalation

I'm confident when it comes to priv esc. I think its fun and enjoyable. I know I will find the answer with time.

Buffer Overflow

My most feared topic became my favorite topic. I'm going to dive into more advanced subjects with this once the OSCP is over.

Windows Boxes

I went from hating them to loving them. I rooted 100% this round.

Personal Record Pace

My current pace is solving boxes within 1 - 6 hours. Solving a box under 1 hour is an excellent pace for me. I was setting a record with the boxes I did solve on the exam. My practice pace is solving 1 or 2 boxes a day.

Progressing with the Hard Box at 3am

Even when I was totally exhausted, I managed to progress on this box at 3am. I got an adrenaline boost.

Weaknesses

Pentest Methodology

The reason why I'm so good at priv esc is because I have a rock solid methodology. With testing I have a general process, but it's not strong enough.

Enumeration

I can get better at this!

Burnout

I burned out twice during my studies. One time I can't remember. The other time was two weeks before Thanksgiving. I know I'm burned out when I'm slowed down and performing like I'm in mud. My burnouts before the OSCP could be ignored and denied. The OSCP taught me what a burnout feels like. Now I'm balancing this "burnout threat" which wasn't something I had to worry about in my past activities.

More time on the Mat

I need more practice hacking boxes. The more vulnerabilities and techniques I encounter, the better I become.

Gaining Initial Foothold

My greatest strength became my greatest weakness. I think my other abilities grew faster while this improved slower. I want to make this a fun and enjoyable experience like Priv Esc. I start off with anxiety and worry if I can get a shell.

Energy Consumption

I start off strong and end up exhausted. I think a 2nd time around I will gain 2 hours of fighting power. I won't be as stressed like the first time. My goal is to get to 70 points in 9 to 15 hours. When time drags on, the more exhausted I get.

Next Steps

I'm going to level up by 30%. Once I feel I'm at that level, I will take the exam again.

Comments

  1. UnknownDecember 19, 2020 at 10:28 PM

    good job, I have similar experience but with a long start, I start from 2018 until December 2019 took oscp exam and failed

    ReplyDelete

Post a Comment

Popular posts from this blog

HTB - Jarvis MySQL

-
Image
Brad Traversy MySQL CheatSheet PentestMonkey SQL CheatSheet MySQL Statement Architecture Jarvis Walkthrough Step 1 - Try to make your query. Visualize it. SELECT Id, Name, Rating, Picture, Cost, Description, UNKNOWN7Field FROM Room WHERE Id = 1 Queries don't need a " or ' Keep going up until it works http://10.10.10.143/room.php?cod=3 union select 1,2,3,4 http://10.10.10.143/room.php?cod=3 union select 1,2,3,4,5 http://10.10.10.143/room.php?cod=3 union select 1,2,3,4,5,6 http://10.10.10.143/room.php?cod=3 union select 1,2,3,4,5,6,7 -OR- http://10.10.10.143/room.php?cod=3 order by 1,2,3,4,5,6,7 The union select works when the left and right are equal in column size. If the left has 7 selections, the right needs 7 selections too SELECT Id, Rating, Name, Cost, Description, UNKNOWN6 FROM Room WHERE Id = 1 UNION SELECT 1,2,3,4,5,6 In order to shift to the right side, put in a faulty value for 1 like negative 1 or 9999 SELECT Id, Rating, Name, Co
Read more

Palo Alto for GNS3 CCDC Tutorial

-
Image
Opening Hello fellow CCDC Competitors! Struggling to get a Palo-Alto VM? I know how you can get one! Email me at ASzampiasSWD@gmail.com. I'll tell you the steps to get a PA-VM for GNS3. Why am I giving this info to you? Wouldn't it make sense to hog the info to myself? Wouldn't my team have an advantage? There are have and have not universities when it comes to PaloAltos. I fell into the "have not" group. Our college didn't have access to PA-VMs and still doesn't. Even if PA Cybersecurity Academy is free, there is too much red tape. I can't change the outcome. I can only come up with this one solution. Another reason is Tri-C is a tryout team. I think its pretty unfair as a potential Firewall Admin I'm the only one with access. No one can challenge me unless they spend 2K for a PA-VM. It becomes a rich-person only position. I have a leftover PA-VM from 2018 I promised not to share. I couldn't share that with my challengers. But I f
Read more

Trace Labs Global Missing Persons CTF V

-
Image
Trace Labs CTF V TraceLabs hosted the Global Missing Persons CTF V event on July 11, 2020. My team //synergy got 64th place out of 190 teams. Introduction This was my first Trace Labs CTF. I captained a team. The good thing about being a captain is you can control who is on the team. My rules were: Must have sock puppet accounts ready. Must have a VPN. Writing out this is a competitive team where we work the entire 6 hours. I was worried about a future team member spamming submissions and disqualifying the team. I thought my requirements would eliminate people who weren't serious. The team hit 4 members Friday evening pretty quickly. Notes My laptop was too slow for this event. My virtual machine froze and I had to restart. Restarting means I have to login to my accounts again. I'll use my desktop next time. The team used Slack and Trello. Our strategy was to research a person and rotate every hour. This strategy broke after 1 rotation. Some missin
Read more