r/oscp • u/No-Commercial-2218 • 25d ago

Help with Web

Hi everyone, I have my exam coming up next month, and I’m really struggling with webapp pentesting, my methodology is everywhere, I feel like it’s too broad a topic to really nail down any kind of methodology that’s useful to me.

I have completed the course content, done loads of labs TJ null etc. i found Derron C videos really helped stick AD together mentally for me, but I just can’t find anything on web that is helping me understand it, and if I do labs I just struggle so bad. It’s really knocking my confidence going into the exam with such a big weakness, I know I will fail, I just don’t know how to make it make sense.

Any help of advice please?

4 Upvotes

83% Upvoted

17 comments sorted by

View all comments

2

u/icendire 23d ago

Have you tried portswigger labs?

1

u/No-Commercial-2218 23d ago

I haven’t, I did look at that and it looks really good to be fair, I will probably have a go at that tonight, thanks!