[mechero51]

1. Prep Phase (Before the Exam)

• Get those Bonus Points: Seriously, do not skip the PEN-200 lab exercises. Getting that 80% completion for the 10 bonus points is your safety net. It’s the difference between needing a perfect run and having room to breathe.
  
• AD is Make or Break: The Active Directory set is usually worth 40 points, and it’s an all-or-nothing deal. If you can't compromise the AD network, passing becomes a massive uphill battle. Practice pivoting, pass-the-hash, and bloodhound enumeration until it's muscle memory.
  
• Proving Grounds > Everything Else: While Hack The Box is great, OffSec’s Proving Grounds (Practice) machines are made by the same people who design the exam. The rabbit holes and exploit styles there are the closest thing you'll get to the real test.
  

---

2. Exam Day StrategyThe Blueprint

• Start with AD or the easy wins: Lock yourself in a room, kick off your initial Nmap scans on everything, and focus on the AD set first. If you get stuck for more than an hour without a foothold, pivot to a standalone machine to build momentum.
  
• The 45-Minute Rule: Rabbit holes will kill your exam. If you’ve been banging your head against a single port or exploit for 45 minutes with zero progress, stop, document what didn't work, and move on. Come back to it later with fresh eyes.
  
• Enumerate, then Enumerate Again: If you're stuck, it’s 99% because you missed a minor detail. Check hidden directories, look for weird services running internally (
  
  netstat
  ), and actually read the source code of the web pages.
  

---

3. Mindset & Logistics

Important: The OSCP is as much a mental stamina test as it is a technical one.

• Take Forced Breaks: You cannot think straight after 8 hours of staring at a terminal. Force yourself to step away every 2 hours for 15 minutes. Eat real food, drink water, and get some sleep. People actually fail because they refuse to sleep and miss obvious things due to fatigue.
  
• Screenshot EVERYTHING: The moment you get a shell or find a flag, screenshot it with
  
  whoami
  ,
  
  ipconfig / ifconfig
  , and the flag content visible. There is nothing worse than realizing you forgot a screenshot after your exam lab environment shuts down.
  
• Template your report early: Don't wait until the second 24-hour window to figure out how to write the report. Have an OffSec-compliant markdown or Word template ready to go so you just have to plug in your notes and screenshots.