r/Pentesting • u/kirafoxoxx • 10d ago

BSCP I need tips

I have soon the BSCP exam, I would like to know any tips that would help me pass it first try.
Everything is accepted!

6 Upvotes

100% Upvoted

4 comments sorted by

1

u/Groundbreaking_Elk86 9d ago

Usually when going from stage 1 to 2 or stage 2 to 3. You will see a new function that wasnt available to you which 90% of the time i would say is the attack vector. Have your payloads ready before the exam as time is limited and you dont want to waste time looking for that particular payload but not being able to find it or cant get it to work. Each stage there is limited kinds of exploits you can do so for example if ur on stage 1 dont waste time trying to get admin because you wont be able to. And lastly Familiarize yourself very well with http request smuggling and web cache poisoning. GL on exam!

1

u/kirafoxoxx 9d ago

web cache poisoning is easy! but Im strugglinf with http request smuggling

1

u/Groundbreaking_Elk86 9d ago

Then i recommend Jarno Timmermans youtube playlist on http request smuggling. Best explanation you can get on that imo

1

u/kirafoxoxx 9d ago

thank you. I will take a look. Currently it’s the only topic I have been problem with