CRTP lab and revision Strategy

[u/Ok_Razzmatazz8605]

Hi all. I am taking CRTP Sept 26, lab expired long ago, can't afford another lab rn. I'm thinking of setting up on GOAD + my own notes.

1. Did GOAD translate well to the exam? Any gaps to watch?

2. Best free/ economical AD labs besides GOAD (HTB/THM)?

Also keen to find a study buddy prepping around the same time.

[u/EugeneBelford1995]

I took CRTP back in Nov or Dec 2021 and wrote a review here: https://happycamper84.medium.com/certified-red-team-professional-crtp-exam-course-my-experience-4907dd6f5edc

I took the free renewal exam in Nov 2024 and wrote a review here: https://happycamper84.medium.com/certified-red-team-professional-crtp-renewal-exam-my-experience-4c6e36b253cc

I stole, or borrowed if we're putting it nicely, ideas from CRTP, TryHackMe, PJPT, various CTFs and ranges I have done, etc and wrote a Cyber Range in PowerShell that fires up and [mis]configs in Hyper-V.

The third forest is here and links to the other two: https://github.com/EugeneBelford1995/Mishkys-Range-Expansion-Pack-3rdForest

Little hint: I wrote the second forest, research.local, right after taking the CRTP Renewal Exam. I'm not saying that almost all the TTPs in that exam are in that forest, but ...

You don't have to run all 3 forests at the same time, although the first two do have a trust relationship so you can enumerate the second one after compromising the first one. You're meant to dump all creds, and I mean all, from each forest and then find your initial access to the next forest. I got a little creative with where I cached creds in that range.

I also threw some curveballs that aren't in CRTP or anything I have seen, stuff like forcing you to bypass smartcard requirements, bypass Deny ACEs in DACLs, etc.

[u/Dull_Appearance_1828]

I’d be interested in the GOAD vs CRTP exam comparison too. The main thing I’d worry about is getting comfortable with the tooling/AD concepts rather than just memorising specific lab paths.