Started By
Message

re: Passed CISSP test!

Posted on 8/18/16 at 5:35 pm to
Posted by G Vice
Lafayette, LA
Member since Dec 2006
13101 posts
Posted on 8/18/16 at 5:35 pm to
Inviting responses from anyone.......my son is a senior in high school (gifted), taught himself Java and C++ on the side in addition to regular schoolwork. He wants to persue OSCP immediately. This looks like something you do after your college degree and after you've gained experience.

He wants to get OSCP now because he thinks it would look good if he achieves this before graduating from high shool.

The cost is $850, plus a few hundred more in online lab time purchases.

We wonder if he is getting in over his head, or should we let him just go for it.

What do you guys think? Thanks.
Posted by gmrkr5
NC
Member since Jul 2009
14963 posts
Posted on 8/18/16 at 6:00 pm to
It depends. one of our junior engineers is 21 i believe and he just got OSCP and OSCE and he didnt have alot of real world experience.

They are very very challenging lab based tests....

It's not just completing labs. You have to document everything you do in a repeatable manner so they can verify all of your methods/techniques.

Has he ever written exploit code or even run any exploits against vulnerable platforms/applications?
This post was edited on 8/18/16 at 6:04 pm
Posted by G Vice
Lafayette, LA
Member since Dec 2006
13101 posts
Posted on 8/18/16 at 7:07 pm to
I checked into it, and this cert looks like the real deal, as you have described it.

Don't know if he's written exploit code. I'd ask him, but he is at the movies now.

Thanks for your response.
Posted by gmrkr5
NC
Member since Jul 2009
14963 posts
Posted on 8/19/16 at 7:06 am to
i dont know how much money he may be willing to contribute to his effort but he should probably start with something like SANS/GSEC if he wants to start building a foundation....

OSCP will frustrate him and most likely make him want to quit.
Posted by jdd48
Baton Rouge
Member since Jan 2012
22821 posts
Posted on 8/19/16 at 8:20 am to
It isn't for everyone. Coding, while very useful, is just a small part of OSCP required skillset. It also requires basic (and some advanced) networking, shell scripting, linux and the linux/unix command line, windows and the windows command line, basic buffer overflows, and ALOT of patience. You learn quite a bit in the course material, but you are going to suffer before you reach the mountain top. (In fact, there's lab machines called Pain and Sufference.) It took me 2 full months working about 6-8 hours a day just to complete the labs.

gmrkr5 is right about the documentation as well. You have to document EVERYTHING in both the labs and on the test to pass. My lab report was something like 300+ pages of notes and screenshots, and my test I think was around 50.

This post was edited on 8/19/16 at 8:24 am
Posted by gmrkr5
NC
Member since Jul 2009
14963 posts
Posted on 8/19/16 at 9:38 am to
quote:

It isn't for everyone. Coding, while very useful, is just a small part of OSCP required skillset. It also requires basic (and some advanced) networking, shell scripting, linux and the linux/unix command line, windows and the windows command line, basic buffer overflows, and ALOT of patience. You learn quite a bit in the course material, but you are going to suffer before you reach the mountain top. (In fact, there's lab machines called Pain and Sufference.) It took me 2 full months working about 6-8 hours a day just to complete the labs.

gmrkr5 is right about the documentation as well. You have to document EVERYTHING in both the labs and on the test to pass. My lab report was something like 300+ pages of notes and screenshots, and my test I think was around 50.


yup, all of that too... it's something i decided a couple years ago i'll never do. i am not ever going to be the type of infosec person that is going to utilize that certification. i can do all i'll ever need pentest/vuln assesment wise without suffering through that...

more power to those that do though, it's so tough
Posted by G Vice
Lafayette, LA
Member since Dec 2006
13101 posts
Posted on 8/19/16 at 12:50 pm to
I've passed your comments on to my son, and his response is that he is very familiar with Python and the metasploit framework, but hasn't written exploits himself.

He's heard of SANS/GSEC and the CEH, but says those are just multiple choice exams, and he wants to go against an actual virtual network, and he sees OSCP as a way more in depth way to learn.

Plus, he says, Kali Linux was invented by Offensive Security.

What would you say to him at this point?

Thanks
Posted by Carson123987
Middle Court at the Rec
Member since Jul 2011
67307 posts
Posted on 8/19/16 at 1:19 pm to
quote:

It isn't for everyone. Coding, while very useful, is just a small part of OSCP required skillset. It also requires basic (and some advanced) networking, shell scripting, linux and the linux/unix command line, windows and the windows command line, basic buffer overflows, and ALOT of patience. You learn quite a bit in the course material, but you are going to suffer before you reach the mountain top. (In fact, there's lab machines called Pain and Sufference.) It took me 2 full months working about 6-8 hours a day just to complete the labs.

gmrkr5 is right about the documentation as well. You have to document EVERYTHING in both the labs and on the test to pass. My lab report was something like 300+ pages of notes and screenshots, and my test I think was around 50.


frick all that. hope you got a retarded raise after doing all that shite
Posted by BabySam
FL
Member since Oct 2010
1528 posts
Posted on 8/19/16 at 3:17 pm to
Most people hiring in the IT field will look at certs and expect to see positions with experience in those areas. But this is a different area, and he could very well benefit from having the cert if he's ready. Any interview he does will most likely involve some practical scripting/coding. It seems like it would set him up for a position within one of the 3 letter agencies...best of luck to him!
Posted by G Vice
Lafayette, LA
Member since Dec 2006
13101 posts
Posted on 8/19/16 at 3:59 pm to
That has actually been part of the conversation, regarding his potential career path. You making mention of it gives us support. We will likely let him go for it, but it's the timing that concerns us: can he do it and his school work or will it be too much. This year he is in dual enrollment for computer science through ULL. Still deciding. Want his GPA a little higher, although about 3.5 now.

Congrats on your achievements as well.

We know what a big deal that is.
This post was edited on 8/19/16 at 4:02 pm
Posted by gmrkr5
NC
Member since Jul 2009
14963 posts
Posted on 8/19/16 at 4:48 pm to
quote:

I've passed your comments on to my son, and his response is that he is very familiar with Python and the metasploit framework, but hasn't written exploits himself.

He's heard of SANS/GSEC and the CEH, but says those are just multiple choice exams, and he wants to go against an actual virtual network, and he sees OSCP as a way more in depth way to learn.

Plus, he says, Kali Linux was invented by Offensive Security.

What would you say to him at this point?

Thanks


lol, sounds like he has it all figured out. i'd let him knock himself out but i'd make him pay for half of it.
Posted by jdd48
Baton Rouge
Member since Jan 2012
22821 posts
Posted on 8/19/16 at 6:54 pm to
quote:

frick all that. hope you got a retarded raise after doing all that shite


Just a playful pat on the arse and an attaboy.

No they did give me a good raise that year.
Posted by lsu480
Downtown Scottsdale
Member since Oct 2007
92893 posts
Posted on 8/20/16 at 1:35 am to
Does anyone in here know HTML or CSS? I had some landing pages made for me in bootstrap and the tard who made them can't get the images in the header to shrink and expand with the size of the page. For example on a 13 inch screen it is is perfect but on a 20 inch screen the header images are all tiny and in the middle, on a phone they are so big you can only see the edges. I know nothing about this but I know it shouldn't be hard to make images adjust to screen size. All of the other images are fine, he just cannot fix the headers.
first pageprev pagePage 2 of 2Next pagelast page
refresh

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on X, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookXInstagram