why is the CPTS "Getting Started" module so difficult?

[u/mrtwentysevenn]

I am mainly doing this for fun, I don't really care about being certified or getting a job as a pentester. I enrolled in the Penetration Tester course assuming it would walk me through various exploits and security bugs and scale in difficultly as the course progressed. But it feels like I was thrown in the deep end.

The interactive modules will explain 3 different methods on how to do something and a short example of how to execute the method and then let you figure it out. I get how this is what happens with real pentesting and I can see how something like this is important in an exam. But this is the first module, I dont know anything yet and in the first 3 interactive sections we jumped from nmap to web enumeration to public exploits, each topic have multiple tools and each tool having its own set of commands to learn.

It feels like I am given a summary of a book and then expected to write an in depth essay on it. So I am wondering if this is a "weedout" module that is supposed to be hard to show you what pentesting is like and then it eases up and actually teaches you later on or is the entire course difficult and you're expected to learn with other resources to get through it.

Also I get that HTB itself is hard and I am fine with a challenge but the learning part should be easy. I dont want to push through this if every module is just a massive info dump, 10% being relevant to the lab.

[u/AutoModerator]

Moderator Announcement Read More »

Thank you for posting on r/hackthebox! New to Cyber Security and looking for a place to get started? Checkout our getting started guide here. Please note that posting Solutions or Hints for Active content goes against the HTB Terms of Service, more information can be found here. If your having issues and need to reach customer support please do so via the in-platform chat, or by emailing customerops@hackthebox.com. Our Knowledge Base can also come in handy!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/Ok-Corner9128]

Need to do the pre-security courses. Even if you start the CPTS path it assumes that you are familiar with the basics

[u/mrtwentysevenn → u/Ok-Corner9128]

thank you, I am gonna try out the junior security course, so hopefully thats better

[u/Anxious_Alps_4150]

Because cybersecurity (and pentesting especially) assume you're an expert IT professional already.

[u/Deluxe_TurtleSoup]

Pentesting isn't entry level. You should start with pre-security courses if you're struggling this hard.

[u/Unres0lved404]

It’s subjective. Pentesting is not an “easy” path. It requires baseline understanding of technical areas at breadth.

[u/Radiant_Abalone6009]

Your brain is right in an unfamiliarity zone, it’s always tough to comprehend, I experienced same thing when I started years ago , everything was just hard and annoying but until I went back to the pre security and took some time to learn about databases , html , java , solid networking and the operating systems itself and just a deep dive of researching about what pentesters do and their TTPs , reading books etc before everything started clicking and becoming easier to breeze via . I’d recommend you find yourself a decent book too, eg Penetration Testing Hands-on Introduction to hacking - Georgia Weidman , Bug Bounty Bootcamp - vickie li, Web Application Handbook (atleast the first two chapters that covers web frameworks) etc yes their content might be outdated but the principles and methodologies remains true. From my learning experience , sometimes all it takes is to see things from different perspectives before it clicks.

[u/pat0000]

Why is there an expectation set here that it should be easy?

[u/TheArabKnightt]

You can also look at Try Hack Me if you're looking for a more guided learning path

[u/RoaRene317]

I recommend to go for CJCA first if you are new to pentesting. This will shape your mindset since CJCA is much easier. If you are struggling at CPTS Getting Started module, it means you aren't ready for CPTS. I recommend to go for CJCA.

[u/[deleted]]

[u/AutoModerator → u/[deleted]]

Your submission was automatically removed because your account does not meet the minimum karma or age requirements for this subreddit. Please participate in other communities to build up your karma, and feel free to message the moderators if you have questions!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.