@KyanHexagon@joehelle @OttySec @ine@TCMSecurity Also there are lots of friendly student admins to assist you. I got help from them before and it seems to be just what you're hoping for. I was straight up told "you should try X".
@KyanHexagon@joehelle @OttySec @ine@TCMSecurity If you took the older course (before 2020 update), I'd say it's crap. Have you taken the upgrade? I really feel the new one being 800 ish pages...theres a lot that beginners can chew through without being lost. + 1/3 of the lab machines imo very beginner friendly.
@KyanHexagon@joehelle @OttySec @ine@TCMSecurity Well the paradigm I think, is that if someone who is very beginner ish level - then the exercises will benefit them and should be done. Agreed someone should be able to pass w/o external training. I know most who took the course with me did.
@KyanHexagon@joehelle @OttySec @ine@TCMSecurity If you don't like the cert anyways, thats cool too. There are far more senior red teamers than I without any offsec certs, they just have their skills from experience. I appreciate TCM etc effort to make education cheaper. I actually took his course for $10 before OSCP.
@KyanHexagon@joehelle @OttySec @ine@TCMSecurity I think a lot of the difficulty can be sidelined though. I went for 60 days of lab, aimed for 75% completion. Was very hard going but I managed to finish all the lab. I found the exam wasn't the big scary obstacle I thought it was.
@joehelle@KyanHexagon @OttySec @ine Haven't done those...I'll add them to my list for my spare time. I have to say a lot of PWK was just researching for me, 8 months ago I couldn't crack easy boxes, now I'm able to test against EDR + red team. So I'm maybe more appreciative of the "try harder" mentality I got since
@joehelle@KyanHexagon @OttySec @ine Your buffer overflow on TryHackMe is great, I haven't done any others. It seems perfect for PWK but I think it's similar in quality. Maybe I could name 5 lab boxes that are "bad" in the labs, but mostly because they're too quick.
@KyanHexagon @OttySec I dove into the machines because I was familiar with the basic concepts taught in the exercises. A lot of the materials teach entry level concepts, if you know these concepts there's no point practicing them relentlessly.
@KyanHexagon@joehelle @OttySec @ine@TCMSecurity Because you're whining a lot about things that aren't really problematic like "difficulty". I've agreed with valid criticism but a lot of this is quite silly.
@joehelle@KyanHexagon @OttySec @ine Cool for you. There was no Win XP labs when I took it. If you want to argue whats real world vs not, go argue with the senior pentesters who created the lab machines.
@joehelle@KyanHexagon @OttySec @ine INE labs are exercises vs taken from real pentests? I hope INE one day do challenge OffSec to force them to up their game. I plan to take some of their blue certs later on, they're definitely the best in those.
@KyanHexagon@joehelle @OttySec I believe theres plenty to improve but If you study the lab techniques you're fine. There exists no other company offering the quality of labs based on real world engagements atm. No one, for roughly $1000. They could 7k if they wanted, be like SANS. (which would be crap)
@KyanHexagon @OttySec For every professional pentester complaining about the exam, there are 10 more quite happy with it, including myself :)
I mentioned additional resources because you simply learn more, not needed for exam mostly. I'd still advise the lab is very similar to the exam (2020 lab).
@joehelle @OttySec @KyanHexagon Yes they can just click a button and migrate from shared to private labs, it's that easy. All their other new courses feature private labs and I hope they update pen200 for this as well.
@KyanHexagon I'll agree with you on the exercises, I skipped them eventually and just spent my time doing labs. Didn't feel they were as much help. Surely the examiners give sets of boxes that are somewhat similar in difficult is my point, even if different topics are tested.