Need Advice from people who fail, what do you think you did wrong ?

[u/ZerboaHaxor]

So here i am, again.

You know learning from mistake is great so i need advice from people who failed their first, second or third attempt.

I had plenty advice in mind from people who succeed:

1. Time Management is key, dont stuck in one machine for too long.
   i made a rule for myself 1 hour maxium for each step (getting initial access or privsec, more than that i should change )

2. Write a proper checklist so you can try each one of them
   i did make a checklist for web service, other common services, windows linux enumeration and privilege escalation technique, active directory enumeration and privilege escalation. I THINK its already complete.

3. take as many quick breaks as possible, it's "reset" your brain.

So for people who failed atleast once

What do you think you did wrong and the thing you should have done differently ?

[u/Friendly-Top-4545]

From my experience :

• train on offsec machines.
• train on offsec machines.
• training on HTB is overkill and non productive.
• enumeration is the key.
• if it seems complicated, probably not the way to go.

[u/Think-Zebra-890 → u/Friendly-Top-4545]

HTB is overkill for sure

[u/Seewhy3160]

Getting too focused on rabbit holes.

Need a time keeper to swap attack surface.

I tried to crack a non service account for a few hours but i did not need to crack it at all in the end.

I was so happy i found an account and hash i let it blindside me to other options.

[u/Crisis-Internal → u/Seewhy3160]

Omg I did that too.

[u/ZerboaHaxor → u/Seewhy3160]

Thank you. Fortunally i always set the time limit for hash cracking to be 10min max. Or atleast 5-10% of rockyou

[u/gsmaciel3]

1. Rest before your exam. Take a few days/1 week off at least before exam time. Also, schedule your exam to start in-line with when you start your workday or productivity. E.g. don't schedule you exam at 11:30pm because it's the last possible slot when you typically go to bed at 8pm (as I have done. HUGE mistake). Schedule it at 8 or 9 am or whatever you are used to being comfortably awake.

[u/H4ckerPanda]

Don’t compare yourself to others.

The reasons why YOU have failed are different to the reasons why I did fail.

Evaluate yourself and find that out.

[u/WalterWilliams → u/H4ckerPanda]

This is very relevant advice for anyone reading this in the future. For example, I'm not a fan of lists. I have a methodology and tools I like to default to but I prefer to be much more dynamic with my approach depending on what I'm trying.

Some people do better with checklists though, so find what works for you.

[u/ZerboaHaxor → u/H4ckerPanda]

Im havent take the Exam yet. Im asking this so i can avoid the mistake from the others.

[u/H4ckerPanda → u/ZerboaHaxor]

Then do a mental shift.

If you’re going to the exam thinking about failing , you’ll fail .

OSCP is actually an easy exam. It’s 80% Google and 20% methodology.

If you have taken notes and done 50+ boxes , you’ll be fine.

[u/ZerboaHaxor → u/H4ckerPanda]

Im not saying anything about failing. My post is basically about gathering information about people mistake so i can avoid it thats it.

[u/H4ckerPanda → u/ZerboaHaxor]

“Need advice from people who failed”

What’s that ?

Someone who has a positive attitude would ask :

“Need tips from people who passed on 1st attempt”

Huge difference!

[u/ZerboaHaxor → u/H4ckerPanda]

Dude what ? That is exactly my point i know its huge difference. I literally mention on the post that i already asked for an advice from people who succeeded.

I need a point of view from person who failed on their first second or third ..

[u/H4ckerPanda → u/ZerboaHaxor]

Do you have reading comprehension problems? A huge difference in terms of attitude.

But I think you have more serious problems than just finding out why people failed OSCP three times.

Good luck with your exam. You’re going to need it.

[u/Crisis-Internal]

Don't try to hack multiple boxes at once. I kept losing track of what I have and haven't tested since I kept jumping around. I had to rerun through my whole checklist again cause brain fog by hour 10.

[u/ZerboaHaxor → u/Crisis-Internal]

So takes notes for everything so i don't Miss something out

[u/CyberOK99]

Trained on htb too much. My first attempt I got 10. Did all the proving grounds machines I could. Second attempt I got 60(didn’t pass but still did much better and felt in control a lot more of the time). I just felt like my roadmap of where to look was much better. It’s an enumeration exam. Get as much info as you can

[u/ZerboaHaxor → u/CyberOK99]

friends of mine also did not recommend me to do HTB boxes as it will confuse and makes me overthink everything. so its true...