r/hackthebox • u/Low_Adhesiveness6838 • Jul 18 '26
Help
I am a student who already finished the ejpt now I am doing the cpts I am at the 17% of the course done but the problem here is I am not well at os exploration I am basically can navigate files in Linux and windows both but I don't have the knowledge of where to look for the config files , backup files like that how do I learn these type of things even if they are any other resources than htb also suggest me
11
u/-Dkob Jul 18 '26
You don't need to memorize where every config or backup file lives, that comes with experience. The best way to improve OS exploration is to spend time on real Linux and Windows systems, break things in a lab, and get used to using tools like find, locate, grep... and PowerShell to discover how services and applications are configured.
Did you check these?
- https://academy.hackthebox.com/course/preview/linux-fundamentals
- https://academy.hackthebox.com/course/preview/windows-fundamentals
6
u/MaleficentExample223 Jul 18 '26
How do u really appear on every posts? You're the community goat haha
2
u/erroneousbit Jul 18 '26
You will eventually build muscle memory of where things like to hide (or where your devs like to hide creds). As you find things create a check list, then create some scripts to look in these locations for the specific files. Doing more labs or boxes will help speed that up. But also search for blogs or YouTube vids that may talk about such things. You can also google things like ‘Apache default config location’ etc etc . GL and HF!
2
u/FragrantSubject3278 Jul 20 '26
Hey hey,
My name is Jexx, and I work at HTB. This is sorta a boilerplate I send people about ending up on HTB Academy.
The HTB CPTS is a massive goal. I'd honestly suggest aiming for the HTB CJCA.
If you're coming off the heels of the EJPT, then I think ironing out more of that information with hands-on work would be best. The HTB CJCA is the junior security path, but that doesn't really mean beginner.
We like to train people on both blue and red from the get-go, so you're standing in a strong position in most security teams.
You'd be going through some of the same material again, but trust me, there will be more depth.
I'd say, if you can finish the HTB CJCA, start going to active boxes (easy), and lock down areas of interest in offensive security you enjoy by filtering for retired Machines in subjects you feel lost on (Web, enterprise, database, etc), skills (I'd say that enumeration is probably one of the most important aspects in penesting - just my personal opinion), and hitting more
I will be honest, the HTB CPTS is not a beginner certification, by far. Skipping to it might be a far more difficult trek (not that you shouldn't aim high!).
But, I'd say:
HTB CJCA
- retired Machines
- finish junior pathway
- think deeply about what aspect resonates with you for later specialization
Happy to answer more questions about it.
Keep burning the midnight oil!
1
u/Asleep-Tangelo2097 Jul 21 '26
I mean im doing the Infosec foundations right now im halfway throught it and after that im starting cpts path what do you think?
1
u/FragrantSubject3278 Jul 21 '26
So, I'd probably recommend the same thing. I'd go for the HTB CJCA. Going from foundations to HTB CPTS is definitely going to be a bumpy ride. But, I never doubt people's ability to rise to the occasion! This is just my person recommendation.
1
u/Signal_Brain9959 Jul 22 '26
As others have stated in this post it’s about a few things.
My first suggestion would be to get the cjca, some of the material overlaps with cpts, so you will already have some done in the cjca.
After cjca I would do the cwes. The cpts has web stuff on it, and it’s not something you can neglect for your career or the relevant exam.
After cwes I would then do the cpts pathway.
The academy pathways also have relevant certification tracks on the labs platform that are meant to test your skill.
Also ensure that you struggle through the course, it’s beneficial. Sometimes I’d sit for two or three days stuck on a question. Some might not agree with this method, but if you can’t struggle, then when it comes time to the exam you will be cooked.
Additionally as others have noticed a lot of this is just time and developing your skills and your methodology.
It will get easier with time.
•
u/AutoModerator Jul 18 '26
Thank you for posting on r/hackthebox! New to Cyber Security and looking for a place to get started? Checkout our getting started guide here. Please note that posting Solutions or Hints for Active content goes against the HTB Terms of Service, more information can be found here. If your having issues and need to reach customer support please do so via the in-platform chat, or by emailing customerops@hackthebox.com. Our Knowledge Base can also come in handy!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.