My current status:
- 5x privileged access
- 6x unprivileged access
- DEV and IT network unlocked
It is dragging on a bit. The lab is enormous. Sometimes you have a good idea and a bit of luck, so a machine is rooted quickly. On other machines, though, you end up chasing attack vectors that do not seem to work.
It feels a little like writing another academic thesis. The OSCP is certainly more interesting, no question. Still, there are parallels. Without perseverance and ambition the OSCP is not doable either. Especially when you are still fairly at the start and have more than half of it ahead of you.
I estimate that I will end up investing more time than for the CISSP, CISM, TISP and so on preparations combined. The OSCP brings 40 CPE for CISSP and CISM – a laughable number. Anyone who gets the OSCP done in 40 hours, including the exam and the documentation, has earned my admiration. I consider that next to impossible.