For someone wanting to start my OSCP in about two weeks this info was GOLD. I may want to go with manual pivoting to really learn it and then move over to sshuttle like you did. Love your content!
@vikarux
3 жыл бұрын
Any updates on this?
@BigManT
2 жыл бұрын
How did you do bro
@carlosdevil666
2 жыл бұрын
Did you sit your exam already or are you still studying?
@nate8824
3 жыл бұрын
I should have watched this again, getting *NO* sleep during the full 24 hour exam was really an expensive mistake that I have done, just a privesc away from passing. Going back to my privesc output the next day made me realize that the solution was really easy. If you're someone taking the exam in the future please have some time to rest/sleep.
@JSONSEC
3 жыл бұрын
Sounds exactly like my first attempt. Rest up and hit it again in a month! You got this
@nate8824
3 жыл бұрын
@@JSONSEC just a shameless plug, i passed the OSCP a month ago, did take breaks and other advices. Thanks again !
@ohokie4558
2 жыл бұрын
@@nate8824 hey woah congrats!! can u guide me with the resources to follow /roadmap ? I'm gonna start my prep in a month or so 😅
@HYPR.trophy
2 жыл бұрын
good info! I was distracted waiting for the ghost to peek out from the open door
@ivanzhao4068
2 жыл бұрын
Thanks for sharing the sshuttle, very nice tool. Also thanks a lot for sharing the paths.
@abdiwahabahmedomar2399
3 жыл бұрын
Thanks for the information from somalia
@roninsec488
3 жыл бұрын
Thank you for the awesome info Json,i really love your videos, cheers from Romania!
@JSONSEC
3 жыл бұрын
Pleasure, I'd love to go back to Romania, I've only really spent time around Cluj-Napoca. Would love to explore more! Beautiful country!
@CFH298
2 жыл бұрын
It seems to be more about building up your methodology and knowing when to use certain tools and being exposed to all situations when using the tools.
@JSONSEC
2 жыл бұрын
Great summary
@CFH298
2 жыл бұрын
@@JSONSEC just got my CISSP and I’ve been on the GRC side of Cyber for the past 2 years but looking at getting into the red size of the house. I’ll be following your OSCP recommendations as I start from square one. I’ll be leaving out eJPT, PTS, etc…thanks for the great videos!
@JSONSEC
2 жыл бұрын
Yeah eJPT isn't worth the effort. Could just jump straight to PTP
@TzZek
3 жыл бұрын
Thanks for your insight!
@nolimustermann1779
3 жыл бұрын
i want to ask a silly question. you mentioned that you worked as a developer too. can you say that working as a ethical hacker is generally "better" than working as a developer in terms of stress level, work-life-balance (do you have more peace in life) and so on, as long as you are not a very passionate programmer or very passionate ethical hacker. what does your objective observation say?
@JSONSEC
3 жыл бұрын
Wow great question! I suppose the context of the job is different. As a pentester you tend to work as a consultant so one client to the next, everything is time boxed so not much OT and good work life balance. Sometimes client after client can get a bit exhausting when theres no down time. Working as a dev you're typically internal and part of the project team. When deadlines approach you'll likely be doing OT. Plus you get a lot of people raising defects and last minute requirements. Though, Dev work definitely feels more creative. I can't objectively say which one is better, but it comes down to your working style, what you enjoy and how you are with other people.
@nolimustermann1779
3 жыл бұрын
@@JSONSEC Thank you very much for the quick answer.
@pythoncure6755
3 жыл бұрын
That's a lot useful info love to see your videos by the way I have a question:- I want to perform a mitm attack between a TCP telnet server and client and steal the unencrypted data... So I should just do ARP spoofing and run a sniffer to get the packets If it's all we need, can you do a practical please.....
@nixcutus
3 жыл бұрын
This is an amazing video bro thanks.
@Mike01010011
3 жыл бұрын
Thanks for the tips, much appreciated! Question: if your company did not require you to do the PTP, would you have recommeded the PTP as an OSCP prerequisite? Looking forward to the hacking history videos!
@JSONSEC
3 жыл бұрын
This is a tough question.... I don't exactly see PTP as a pre-req as it covers more or less, all the same material but BETTER than the OSCP. What it lacks is the open labs to practice and the tough exam. I kind of see PTP as your University Degree where you learn and the OSCP like your Job Placement, where you get experience. PTP is a great thing to do prior as it will teach you well and teach all the underlying tech not just security concepts, but it'll make your journey longer and more expensive. So I guess it comes down to what your priorities are...
@jjjjjkkkkk
3 жыл бұрын
Please do an exam prep guide!!
@JSONSEC
3 жыл бұрын
Already in the works!
@mrprogram293
3 жыл бұрын
Amazing video thanks very much
@cirodemeloleite2995
9 ай бұрын
Hello, how are you guys? So, I want to master cyber security but I have 0 experience, the only experience I have with pc is playing games, 6 weak months of mysql workbench(that made me hunger for cyber security and help others stop getting scammed, since my folks lost almost all of their 20 years of savings getting hacked last year, I had to left college and no one was able to help) and a little bit of technical assistance(Im opening my own shop soon). Which path you recommend me going?
@JSONSEC
9 ай бұрын
What my video on the Subject, How to build a cyber security Career
@SuperHtownswag
2 жыл бұрын
GREAT ADVICE
@alanpatrick7465
2 жыл бұрын
Do you recommend the wptx? I have the option to take it, but am weighing it against just doing the burp certification. There aren’t too many appsec certs out there.
@JSONSEC
2 жыл бұрын
Good question. The port swigger material is shit tonnes better than ewptx but the cert is less known. Personally I'd be a pioneer and go the burp route. The cert is currently free till the end of the year too
@ITSecurityLabs
3 жыл бұрын
By ssh shadow you mean ssh tunneling ?
@JSONSEC
3 жыл бұрын
SSHuttle =)
@ITSecurityLabs
3 жыл бұрын
@@JSONSEC thank you so much.
@hackerblack7542
3 жыл бұрын
Good information!
@diariomontadoraustralia
3 жыл бұрын
Thank you again, Json. Would mind adding the proposed path on the description? Thank you!
@JSONSEC
3 жыл бұрын
Sure!
@diariomontadoraustralia
3 жыл бұрын
@@JSONSEC Thanks legend!
@Trent_111
3 жыл бұрын
Great video
@tallst1
3 жыл бұрын
So read the PWK material but skip the exercises + report and spend as much time in the labs?
@JSONSEC
3 жыл бұрын
I don't see much value in reading the material either. I just skimmed over it enough to satisfy the exercise criteria
@tallst1
3 жыл бұрын
@@JSONSEC oh wow, would this apply to someone who has only taken the PTS and some few HTB boxes from the Tj null's list? Thanks for the reply
@JSONSEC
3 жыл бұрын
@@tallst1 I won't make any recommendations for you. Your experience and learning style may benefit from it. But if I were to do it all again I'd go straight to the labs
@globalwebdesign2024
3 жыл бұрын
Thanks for the tips, I really appreciate them. You mentioned OSPG Play Machines and I have experimented with them, but still cannot figure out what I need to do. So frustrating. When I did e.g. the CEH course/labs, there was always an objective, like u have to hack into this windows machine and get that secret file, etc, whereas here no info is given as to the main target. Even when I click on the Walkthrough and try to follow it, it didn't work. They showed me some IP addresses that made no sense and even Nmap displayed that the host is unreahable... Could you help me, pls? Thanks
@JSONSEC
3 жыл бұрын
Maybe you're skillset isn't quite ready for the PG. Check out the Offensive Path on TryHackMe, it guides you through the methodology in the beginning and gradually gets you riding on your own 🙂
@globalwebdesign2024
3 жыл бұрын
@@JSONSEC Thanks
@Ganeshreddyyy
Жыл бұрын
Tell me and what os we have learn when started hacking
@JSONSEC
Жыл бұрын
You'll need to understand how to use Linux to really start
@michael30000
3 жыл бұрын
Hey mate, great video. Would you still do your eptp before oscp if you were to do it for free ? Cheers
@JSONSEC
3 жыл бұрын
I did actually do the PTP a year prior to starting the OSCP. If I could do it for free? Hell yes!
@emilymcgettrick4435
2 жыл бұрын
Did you say 39 hrs per week or 3 - 9 hrs per week?
@JSONSEC
2 жыл бұрын
39 per week
@micosair
3 жыл бұрын
This guy has such an Australian accent that a kangaroo jumped at me from the screen, WTF.
@JSONSEC
3 жыл бұрын
Oy! 🤣
@myfaveyoutube
2 жыл бұрын
I don't hear an accent
@itsm3dud39
2 жыл бұрын
can we do exam in virtual machine?
@JSONSEC
2 жыл бұрын
Yes
@sirisonto
3 жыл бұрын
so between the 1st and the 2nd it was PG's? failed 1st too =(
@JSONSEC
3 жыл бұрын
Yeah pretty much, I think I started pg practice a week before my 1st
@sirisonto
3 жыл бұрын
@@JSONSEC you meant your 2nd? id like to know what was your prep between the 2 exams
@CampingShadowComplex
3 жыл бұрын
When I know I'm ready for the OSCP exam?
@JSONSEC
3 жыл бұрын
You never will...
@itsfran76
3 жыл бұрын
How did PTP help you with OSCP? THANKSSS
@JSONSEC
3 жыл бұрын
Taught the basic concepts, bof, pivoting, Linux ... Everything. OSCP was more like the work experience and ptp is like University
@itsfran76
3 жыл бұрын
@@JSONSEC many thanks
@buretmarcano8851
2 жыл бұрын
@@JSONSEC hello, ptp in the one from elearning security!?
@supriyoguha9314
3 жыл бұрын
Sir, please share the links of vulnerable lab machines....😄
@JSONSEC
3 жыл бұрын
portal.offensive-security.com/control-panel
@pinglocalhost
3 жыл бұрын
< < nom nom nom my brain can lift more lbs now with this info.
@JSONSEC
3 жыл бұрын
Thanks, but we use the metric system here 😂
@M4lch4t
3 жыл бұрын
No HacktheBox at all?
@JSONSEC
3 жыл бұрын
I wouldn't say none but it wouldn't be my main focus
@rolfvreijdenberger1639
3 жыл бұрын
@@JSONSEC thanks, didn't know about the proving grounds. Why not HTB as main focus? Ah, I hadn't reached 4:36 yet :)
Пікірлер: 75