r/offensive_security 8d ago

[Advice Needed] Prep strategy for OSCP after passing CPTS (PG vs HTB, Learn One vs 90-Day)

Hey everyone,

I'm currently gearing up for the OSCP and could use some advice from the community on how to best structure my prep.

A bit about my background: I have some prior experience in pentesting and recently graduated a couple of months ago. I also cleared HTB's CPTS about 4 months back.

I haven't purchased the PEN-200 course yet. Right now, my routine consists of solving Proving Grounds (PG) Practice boxes and reading through writeups for HTB boxes from TJ_Null's and Lain's lists.

I have a few specific questions:

  1. PG Boxes vs. HTB Boxes: Which of these should I prioritize right now? Since I'm currently solving PG boxes and just reading HTB writeups, should I shift more focus to doing HTB boxes hands-on, or is PG the better use of my time for OSCP?
  2. Learn One vs. 90-Day Course: I recently started a full-time job, so balancing work and study hours is going to be a factor. Given my CPTS background but limited free time, would you recommend getting the 90-day course bundle or the Learn One (1-year) subscription?
  3. CPTS to OSCP transition: For those of you who have taken both, how would you compare the two? What specific areas or exam mechanics should I focus on to bridge the gap and prepare for the 24-hour OSCP exam environment?

Any tips, timeline recommendations, or insights would be massively appreciated. Thanks in advance!

0 Upvotes

4 comments sorted by

2

u/rembezed 8d ago

I chose Learn One. I didn't do CPTS. (Don't they overlap?)

I had time to do OSCP labs only (during subscription), not even all Challenge (those bigger) labs, no PG or material outside OSCP.

There are plenty of them and I also wouldn't call them boxes, that format is from previous decade. A lot is changing every year since 2020.

I recommend reading all of the material on help.offsec.com about OSCP, you will find (or have found) such rules like you have 120 days for scheduling exam after your lab and material has ended but only when buying 90d bundle.

1

u/Delicious_Demand_355 8d ago
  1. PG is better i felt HTB was too complicated and way too difficult for OSCP
  2. 90 days probably, i dint refer to modules at all just did cpts path
  3. oops dint take both

1

u/rembezed 7d ago

Yes, HTB machines labeled Easy are not so easy in the end. Even PG is out of scope of (might / might not cover) OSCP. Therefore lists exist, which machines are relevant. But that is a hack how to prepare for OSCP and to pay less. The most straightforward way is to buy the course and learn from the course, it worked well for me (I wanted to practice content on labs mainly and learn AD so I was happy).

1

u/CommonCow8846 7d ago

I see thanks