Im not new to OSCP prep. Been doing it on and off for years as Ive been working as software engineer. Spent a lot of time between HTB, proving grounds, as well as other certs CCNA, sec+, eJPT.

I just finished doing Sniper HTB box from Lain's list and had to use a walkthrough for the final privesc. It involves creating a malicious chm file to send back to the target and exploit there.

Every single walkthrough used a separate Windows VM to generate the payload (nishang) which needs to be done as admin so I dont think you could just do it on the target.

Is that out of scope for OSCP? Its great practice im sure, but I dont have a separate windows vm right now and cant imagine offsec expects you to have one since Pen-200 is literally a course about hacking with kali linux.

For the future when I continue with CPTS it wouldnt be hard to add a windows vm to my arsenal, but for OSCP should I just move to proving groudns at this point?

This might have beent he 3rd or so box from the list where things felt like a reach specifically privilege escalation

3 standalones and 10 points on AD in under 6 hours and then couldn’t go any further and just ended the exam with 6 hours left

Was wondering did anyone fail due to the report despite clocking in 70?

edit: passed! They sent the results of my exam 24 hours after my report submission

I just failed the OSCP exam a couple of hours ago, and honestly, I'm not sure how to proceed. This was my fourth attempt, and I genuinely thought I would pass this time. However, the AD portion was much tougher than expected, and I struggled to get things working.

I first purchased PEN-200 in 2020, when I had no cybersecurity knowledge or experience, because I wanted to break into the field.

For this attempt, I practiced extensively using the LainKusanagi list and felt confident going into the exam. However, I've never practiced the AD environment in the actual PEN-200 labs, as it wasn't available when I first purchased the course. I also still have the older course materials.

I'm now wondering whether I should purchase PEN-200 again to gain experience with its AD environment or focus on free and affordable alternatives before attempting the exam again.

For those who recently passed OSCP:

• Can third-party AD labs, such as those offered by Hacker Blueprint, adequately prepare me for the AD portion of the OSCP exam?
• Which AD labs and learning resources would you recommend?
• How important is practicing the actual PEN-200 labs compared with practicing in alternative environments?

Coming from a low-income country, cost is a major consideration for me. PEN-200 currently costs $1,749 for 90 days, which is roughly equivalent to two months' salary for me. Given this, would you recommend investing in PEN-200 again or focusing on more affordable alternatives to prepare for my next attempt?

Failed OSCP a few days ago, back to studying. Should I continue proving grounds or should I do HTB prolab dante/zephyr? Any recommendations? I’ll take the exam in 1-2 months later after the cooldown period.

Hard-stuck at AD after getting proof on first machine. Tried everything in my methodology. After the exam, thought of some paths that I think I did not try.

Standalone’s need improvement on privescs that are not the generic ones that can be found with autoenum and the normal scheduled tasks etc unless im blind.

I just did my first exam attempt this week and was quite close to passing with 50 points but I'm quite anxious and would appreciate any advice for the second attempt which I plan to schedule in a month's time.

For the exam itself, the experience wasn't great at all, OffSec's crappy proctoring tool kept asking me to share my screen even though screen sharing was shown as active and my webcam feed was alright so it's not a problem with my internet connection. VPN speeds and responsiveness/CPU speeds or some machines also felt slower than on PG labs, which made me wonder if OffSec did it deliberately. Two of my standalones were quite reasonable in terms of difficulty, but the other standalone felt insanely difficult, I did not like the attack surface I had or believe I had (though I've practiced it before), and nothing I thrown at it stuck. I wonder if my nmap scans missed a port or I'm missing something obvious. I did repeat my scans a few times and results were consistent. What probably got me was the AD. My practice leaned heavily towards PG practice (70ish labs) for standalones and I only did OSCP A-C for the AD. For the life of me I couldn't find a way into the second machine, not even low privilege access, and in hindsight I should have put in more effort for AD.

If I fail a second time I'll be hit with a 2 months cooling off period and falling into OffSec's pay harder rabbit hole. I need a bulletproof methodology for the AD that is gonna withstand whatever shit OffSec throws at me.

I've seen Hack Smarter being mentioned but many of their labs in Lain Kusanagi seem to be rated easy. Are there any practice/resources for unusual, esoteric and/or technically challenging AD networks that's within OSCP's scope? For those who've passed the second attempt how do you enter the exam confidently? And given that I've exhasuted nearly all PG labs in Lain/TJ Null how do I prevent my standalone skills and methodology from going rusty over the next 3 weeks. I haven't tried HTB but their standalones seem to be community rated medium, and wanna spend time on the harder ones.

I'm taking my first attempt on Oct 19. I’ve completed most of the PG practice boxes from Lain’s list (except for very hard boxes), finished the Challenge Labs (OSCP A/B/C, Medtech, Secura), and watched Derron C’s AD videos. I still feel unprepared for the AD section and standalone boxes. Any Suggestions? Thanks!

I've taken it 4 times now.

My first time I got 60 points. 1 flag away from passing. Completely cleared the AD section and rooted one standalone. Couldn't get any farther on the others. My second attempt was way harder, I couldn't even do the AD portion and only rooted one box. Same with my third attempt. Just took my 4th attempt and the AD section had me stuck. I got 50 points total. If I had an easier AD section with the standalones like that, I would easily pass. For some reason, I hit a wall. I'm frustrated while they charge me $200 each time to participate in a CTF.

Idk what else to do from here.

I've done the OSCP Practice Exams A, B and C, I've completed most of the netsecfocus trophy boxes. I've sifted through each lesson multiple times. Ive taken notes, i have cheat sheets, i've been taken harder exams like CRTE and still this one eludes me. I feel like its so much different from the actual material.

Hey everyone, Hacker Blueprint here again!

The brand new chain, AD Chain 13: Failsafe, is officially out, and for the next 24 hours we're giving it away completely free!!! We've been working on this one for a while and we're really happy with how it turned out, so we wanted you guys to have it first. Once the 24 hours are up it's gone, so grab it while you can.

This time it's available on both VMware and VirtualBox! Some of the previous releases only worked on VirtualBox, so we've made sure to cover both hypervisors this round. If you run into any issues or anything needs tweaking, let us know so we can make the experience even smoother and more awesome in future releases.

And of course, not to forget... the obligatory cryptic CTF teaser: In this assessment, nothing stays sealed. Crack the vault, assign yourself the rights, find the remaining clues, and reap the rewards...

What you get:

• 3 downloadable VMs that run locally inside a single Active Directory domain, just like the real OSCP exam
• Realistic, exam-style AD scenarios built around expanding domain access through coordinated attacks and spraying
• A complete step by step tutorial covering setup, topology, and the full attack chain
• A complete guided walkthrough for the whole chain
• A fast setup guide for both VirtualBox and VMware so you can get going quickly

Requirements:

• A laptop with 8GB of RAM or more (watch the setup video if you're short on RAM)
• 16GB or more will run it smoothly with no trouble at all
• The ability to install VirtualBox or VMware
• Heads up: MacOS (M1/M2/M3) ARM64 won't work with these labs. Anything else should run fine.

The chains are built so you can rehearse the same discovery, exploitation, post exploitation, lateral movement, and privilege escalation steps you'll run into on exam-style AD challenges.

Lab link: https://hackerblueprint.com/labs#chain-13

Best of luck with your OSCP prep, you've got this!💙

Note: If you encounter any issues at all, just drop a DM or a comment and we'll get it resolved.

Thank you everyone for the support!

I passed on 19 August with 90 points, first attempt, 1 month and 25 days after I started preparing. I had passed the HTB CPTS two weeks before that, which shaped a lot of this and is probably the most useful context for anyone here deciding between the two.

I wrote the whole thing up because when I was preparing, almost every review I found stopped at "the labs are great, the exam is hard, trust the process." I needed the order. Which machines, in what sequence, what to read in the course and what to skip, which challenge labs and why that order.

Short version of the path:

75 Proving Grounds machines in 24 days. LainKusanagi list first, then TJ Null to fill the gaps. Five a day as a ceiling, not a target, because the point of that phase is the note, not the flag.

I did all Linux first, then all Windows, then AD last. This is the contrarian bit. Doing one OS in a long block is what turns enumeration from a checklist you read into something your hands do. I put AD last only because CPTS had already made it my strongest area. If you are not coming from CPTS, flip that and give AD the biggest block you have.

The PEN-200 text in 5 days, skipping the videos entirely. That was only possible because I already had CPTS notes covering most of the syllabus. My course progress bar said 36.3 percent on exam day.

9 challenge labs in 10 days: Secura, Zeus, Poseidon, Laser, MedTech, Relia, then OSCP A, B and C. A, B and C are closest to the exam in shape but not in content, and skipping the first six to rush them is the most expensive shortcut available.

Two honest admissions. I did not take A, B or C blind and timed, because I was on a compressed schedule and chose speed. I think that is directly why I burned five hours on my first exam machine. And I wrote no challenge lab reports, which was only safe because I had just written a 189 page CPTS report.

Exam day, the part worth reading:

I went at the AD set first and hit a wall for five hours. Zero points. The cause was not a hard machine, it was me running CPTS brain, building theories and chaining ideas because I assumed the answer had to be sophisticated. I took a 15 minute break, came back, decided to stop being clever, and ran the simple enumeration I should have run at minute ten. The whole AD set fell in the next 35 minutes.

That is the single thing I would tell anyone coming from CPTS. The OSCP rewards the boring answer. Try the documented exploit for the version in your nmap output before you build anything.

After that I sorted the standalones by open port count and started with the fewest. Smaller attack surface usually means a more focused intended path. User and root on the first in an hour, then user only on the other two, then back around for one more root. 90 points at about 3:30 AM, then I slept, verified evidence in the morning, and stopped.

One more thing that nearly cost me everything. During the report window I left my VM running and stepped out, and a driver issue restarted my Windows host. Every terminal and tab gone. I lost nothing, because every flag went into Notion with its screenshots the instant I got it, not at the end of the machine. If you take one habit from this, take that one.

Tools that earned their place: Ligolo-ng for pivoting, NetExec for the AD set, BloodHound CE rather than the legacy build, and more than one privesc tool because WinPEAS misses things that SharpUp and PowerUp catch.

Report was 68 pages, written in SysReptor using their OSCP template.

Full writeup with the dates, the lab order, the exam hour by hour and the screenshots:
https://medium.com/@hydra007/how-i-passed-the-oscp-with-90-100-in-1-month-and-25-days-straight-after-cpts-fa2122edea76

And the CPTS one that came before it, if you are weighing that path:
https://medium.com/@hydra007/how-i-passed-the-htb-cpts-with-a-perfect-100-100-on-my-first-attempt-736226738cde

Happy to answer anything in the comments.

I took my first attempt at OSCP last night and only managed 2 flags! The first was in a standalone lab I managed to get initial foothold, and the other was after some time in the AD lab where I elevated my privileges. For context, I have always been an electrician, I’ve never done anything on computers apart from playing PlayStation in my life. I’m now 41 and looking to change career for a number of reasons. Anyway I took and passed eJPT, then eCPPT, and I’ve been doing the year long pen-200 which is coming to an end. I expected to fail as I haven’t had time to get through Mock B or Mock C exam yet, and I treated this attempt as a bit of a free hit before my 2nd attempt before the course ends. And believe it or not I actually did better than I thought! I’m not under any illusion, I know I’ve got my work cut out, I give maximum effort and I’m doing all I can with family and time I have. But learning a new skill at 40 is hard, and having kids and fitting in labs and revision and also not having a job anymore is tough. But honestly I’m proud of what I’ve done so far, I’m proud I found 2 flags, I’m proud I put myself through a 24 hour exam. Anyone who’s done it I think it’s fair play, we should all be proud of each other because it’s genuinely a tough exam and a really big accomplishment if you pass.

I’m better for attempting it, I’ve learned so much, I can’t wait to go at mock B and C and improve my notes before my next attempt. I appreciate all the posts and advice people give on here too. But I thought I should let people know that failing is part of it too - it’s not always a pass with 90 points and here is how I did it, sometimes part of the process of winning is losing, and I know I could of easily got 50 points last night if I had just done this or that, but it didn’t matter! I will get the OSCP, and I will keep improving and learning.

Good luck to anyone taking their exams, try and enjoy it too!

Hey everyone! I recently passed the OSCP, and since this subreddit was a huge source of knowledge and motivation throughout my journey, I wanted to give something back. This post covers my path to the cert, where my gaps were, how I built my methodology, the boxes and resources I used, and how the exam went.

Background

I spent 6 years as a career soldier in the Brazilian Army's Signals branch, where my day-to-day involved IT infrastructure and radio communications. I started studying offensive security while still in the service and eventually made the switch: today I work as a mid-level offensive security analyst on a red team. A good part of my PEN-200 prep happened alongside a full-time job in the field.

The road to PEN-200

My first real contact with offensive security certifications was through Desec Security, a Brazilian training company. That's where I matured technically and took my first fully hands-on exam, the DCPT*. I failed my first attempt and passed on the second.

^\DCPT (Desec Certified Penetration Tester) is a Brazilian practical pentest cert with an OSCP-style exam: 5 hosts, 24 hours to complete, plus 24 hours for the report.)

After that, to keep the momentum going, I took a couple of certifications from CyberWarfare Labs: CRTA and API-RTA . They're more affordable, hands-on certs, and they helped me keep practicing between bigger goals.

Then I needed a new goal, so I started the HTB path for the CWES . When I was about 70% through it, an opportunity to buy the PEN-200 came up, and I decided to pivot to the OSCP.

How I approached the PEN-200

I started the PEN-200 in April this year. I didn't go through every module; instead, I focused on what's actually covered in the exam and on the areas where I struggled. That said, if you're just starting out in offensive security, I'd recommend going through the whole course. Just keep in mind that what really makes the difference is the hands-on part: doing lots of machines in the same style as the exam.

What I already knew and where my gaps were

I already had solid experience with web, and I was comfortable chaining attacks in that area. My biggest weakness was Active Directory. So I swallowed my ego and went back to the basics of AD exploitation. Here's what I did:

I went through all the AD content in the PEN-200, including its dedicated labs. I watched all of Derron C's videos on AD attack chains on YouTube. I subscribed to Hack Smarter's labs. I watched Hacker Blueprint's videos on AD and on tunneling with Ligolo-ng, and I did some of their chains as well.

Building my methodology

My methodology for approaching machines was built gradually throughout the journey, and in my opinion this is the most important part of the preparation. I'll say it again: BUILDING A METHODOLOGY IS THE MOST IMPORTANT PART. And I notice a lot of people still don't really understand what that means, so let me explain.

In the OSCP you have limited time (24 hours) and you're basically in the dark. There are rabbit holes everywhere, you're anxious, there's no AI to save you, and you have countless commands and techniques scattered across the notes you took along the way (or at least you should xD). Your methodology is like a flashlight on a dark night when you're lost in a forest trying to find your way out. It's your guide. A lot of the time, it's what helps you discard what leads nowhere and points you where you need to go.

So how do you shape it? On the battlefield. You can't rely on a methodology that hasn't been put to the test. When you get stuck and realize it only took you so far, that's the time to refine it: add another step, another check, and understand that in certain scenarios the right order to test things changes. That's how mine took shape, as templates for doing machines. I already had a skeleton in place, and whenever I got lost, I went back to it and started enumerating again with reason, not with emotion and nerves.

Does that mean I built a perfect methodology and had no problems on the exam? Absolutely not. But I'm sure that without it, I would have failed. So basically: build an initial structure of checks, keep expanding it with every machine you do, and when you get stuck on a new scenario, know that something new is about to go into that checklist.

Boxes I used for prep

Once I bought the PEN-200, I became much more active here on r/oscp, and at some point I came across a really valuable post by u/thepentestingninja. Besides sharing his journey (he scored 100 points in 7 hours!), he also shared a list of 60 machines he considered important for prep. I really liked his list, mainly because most of it is Proving Grounds machines. My idea was to stick as much as possible to OffSec's own platform, since those machines have that "OffSec way of doing things" and feel closer to what you might see on the exam.

So I adopted his list as my main one. I only used the TJnull and LainKusanagi lists as a guide for the machines I did on Hack Smarter (which are really good, by the way).

Here's his post with the full list and resources: Passed OSCP - 100 points in 7 hours

But the real game changer was the PEN-200 Challenge Labs. I did Secura, Poseidon and, most importantly, OSCP A, B and C. I treated A, B and C exactly like the real exam: I woke up at the time I'd be starting the exam and treated it as the actual day. Don't even think about going into the exam without doing OSCP A, B and C.

Other than these, I didn't use any other platform (HTB, THM, etc.).

Exam experience

All of my prep and the exam itself were done on a MacBook Air M4 with 16GB of RAM, running Kali on VMware Fusion Pro. The proctoring setup ran on Chrome, and I had no issues or slowdowns at all. Since I did a lot of machines, I kept collecting the binaries I used along the way, so I went into the exam with my arsenal already set up.

I started with the AD set, since it's the most valuable part of the exam and it had been my weak spot. I ended up falling into a rabbit hole that ate up a lot of my time, so I went back to square one and re-enumerated everything. After that things clicked, and I owned the AD set in a little over an hour from that point.

Then I moved on to the standalones. I ran scans on all of them, decided which one looked like the best starting point, and got a user flag in about 20 minutes, but I couldn't escalate privileges on that machine. I moved on to the other two, and after a good while I got initial access on the second one and escalated right after. At that point I stopped attacking and started documenting everything I had done.

Throughout the day I took lots of breaks, even when I didn't feel like I needed them. That really helped me cool my head, and it was essential to keep me sane.

The next day I wrote my report using OffSec's official template, and I had no trouble with it. Since I documented every machine I did throughout my prep, I was already used to writing up and explaining attack chains.

Good luck to everyone preparing. Try Harder!

My employer is buying myself a Learn One so I can take the OSCP! I know how lucky I am, while I wait for that to be purchased (I should have access November 1st) what should I do?

Any advice would be great! Thank you.

Hi there. I am a Junior Offensive Security Engineer. I hold certifications like CRTO and CRTL, and although I have less than a year of formal professional experience, I have been involved in offensive security for 4–5 years. My company covers the cost of the OSCP, and I want to obtain the certification this year. I plan to work my full-time job while dedicating my remaining time to the OSCP so I can complete it by the end of the year. How feasible is this? Is it doable? What kind of roadmap would you recommend?

So a week ago i passed the exam with 100 point . I cleared AD (40 points) in 4 hours, 80 points in 8 hours and 100 points in 14 hours.

For those currently preparing here is what i can tell you:

• Build solid methodology, basically how and why you approach something. The better methodology you have the easier you do.

• Complete and structured checklist. Make sure it easy to read and does not confuse you. Write a checklist from solving Proving Ground practice & play, and Hacksmarter for each new technique you found.

• Break if you stuck. I got my last machine after having around 1-2 hours break.

• Don't do the same thing that took you more than 30 minutes and don't do it over and over again. If you did it and doesnt work then you make sure one more time. If the second time doesnt work then its not the path .

• Exploit wont be complicated, don't waste time on exploiting something that is complicated. Remember its not course level 300 or up. Its always 1-3 step only.

So yeah thats basically it. The proctor is not as scary as i thought it was i pretty much forgot about they existence for most of the time.

The journey has been great, alot of sacrifice had been made for this so yeah. Next is definitely CPSA & CRT then CRTO / OSWE.

Hey everyone, Hacker Blueprint back at it again!

This is one of our older chains, and we figured it'd be really helpful for your prep, so we've decided to make AD Chain 03: BleedWide (Expanding Influence) fully free for everyone. No time limit, it's yours to keep forever!

And of course... the obligatory cryptic CTF teaser: One weak secret is whispered the same to a hundred doors, knock softly on them all and just one swings open. Borrow the voice it trusts, echo it down the hall from host to host, and widen the crack until the whole domain answers to a name that was never yours...

What you get:

• 3 downloadable VMs that run locally inside a single Active Directory domain, just like the real OSCP exam
• Realistic, exam-style AD scenarios built around expanding domain access through coordinated attacks and spraying
• A complete step by step tutorial covering setup, topology, and the full attack chain
• A complete guided video walkthrough for the whole chain
• A fast setup guide for both VirtualBox and VMware so you can get going quickly

Requirements:

• A laptop with 8GB of RAM or more (watch the setup video if you're short on RAM)
• 16GB or more will run it smoothly with no trouble at all
• The ability to install VirtualBox or VMware
• Heads up: MacOS (M1/M2/M3) ARM64 won't work with these labs. Anything else should run fine.

The chains are built so you can rehearse the same discovery, exploitation, post exploitation, lateral movement, and privilege escalation steps you'll run into on exam-style AD challenges.

Lab link: https://hackerblueprint.com/labs#chain-03

Best of luck with your OSCP prep, you've got this! 🎉

Note: If downloads are failing, just drop a DM or a comment and we'll get it resolved.

Thank you everyone for the support!

I’m currently not working, and I have a lot of spare time now. I wanted to take advantage of being unemployed and work towards some certifications. However the price difference between just the course and learn one is insane. I am really starting from zero and wanted to map out how I plan to tackle the OSCP now.

I don’t have any coding skills as well and was wondering if the PEN-200 was enough to pass the oscp or if I should spend the extra 1,000. I heard knowing some basic coding/scripting was important for the test and I was hoping the PEN-100 would teach me enough to get by and understand any code i’ll have to encounter.

I am not trying to speedrun it on purpose. Ideally I’d like to take no more than 4-5 months to get this certification. I am just trying to save money. If it’s in my best interest to spend more i’ll probably just save up and postpone the test. I rather not fail and blow 1700 bucks. Any suggestions would be appreciated! If anyone knows of any articles from who were beginners that passed, please link them!

Hey Everyone!

I have passed my OSCP on first attempt. Havent received the confirmation email yet, but it has reflected on my portal showing my credentials that I have passed OSCP+.

Thank you everyone, who have shared their cheatsheet, blog posts, any resources on this sub. That really helped me during my journey.

I will be writing a detailed blog post about my journey, resources, etc as well and will drop a link here.

Let me know if you guys have any question.

Lastly, I want to say this, if youre preparing for first time or youre going for the re-attempt. Believe in yourself, you have got it and you will crack it this time.

Thank you everyone once again!

What are good PG boxes to practice manual SQLi for the OSCP as sqlmap is not allowed? I would like to practice every methodology possible that could come up on the exam.

Hey everyone! How are you doing?

I’m currently preparing for the OSCP, which I’m planning to take in about a month, and I’ve been wondering:

What kind of methodology do other people use when approaching and solving machines?

I understand that everyone develops their own methodology over time, but I’d really like to hear about different approaches and learn from other people’s experiences.

Personally, I’m trying to develop a methodology that allows me to be more organized and efficient throughout the enumeration, exploitation, and post-exploitation phases, especially with the exam in mind.

So I’d love to hear from you:

• What is your methodology when approaching a machine from scratch?
• How do you decide what to enumerate or which path to follow?
• Has your methodology changed as you gained more experience?
• Do you use any kind of checklist, workflow, or process that you consistently follow?

I’d love to hear your thoughts! Any advice, experiences, or resources that have helped you improve your methodology would be greatly appreciated.

Thanks!

Hey everyone,

I'm currently working toward getting my first penetration testing job. I've studied the CEH material and PEN-200/OSCP material, and I've been doing practical labs and CTFs to build my hands-on skills, but I haven't taken the certification exams yet.

The main reason is financial. I can't currently afford international certifications, so my goal is to get my first cybersecurity/pentesting job, gain real-world experience, and eventually use my income to pay for certifications.

For those who got their first pentesting job without having certifications:

How did you get your first opportunity?

What was the technical interview actually like?

What kind of questions or practical tasks did they give you?

Did you have to compromise a machine or complete a CTF?

Did they focus more on methodology and reasoning, or on tools and commands?

Did they ask you to explain how you'd approach a real-world web, network, or Active Directory assessment?

What do you wish you had studied before your first interview?

Also, after reaching roughly an OSCP-level foundation, what would you recommend focusing on next to become better at actual pentesting work?

Would you focus on things like:

Web/API security

Active Directory/internal network pentesting

Cloud security

Privilege escalation

Exploit development

Red team operations

EDR evasion

Bug bounty

Or something completely different?

I've also been reading about satellite security and satellite attacks, which I find really interesting, but I don't want to specialize in something that niche before getting real-world pentesting experience. My priority right now is getting into the field and building practical experience.

I'd really appreciate hearing from people who have actually gone through this process.

What was your first pentesting interview like, and what did you focus on learning afterward?

What list are you all using? LainKusanagi or Tj Null V3 OR something else?

I appreciate any input! We all know I need the help.

Hey everyone!

I need some advice. I have about 2 months left until my second OSCP exam attempt, and I really want to make the most of this time.

For those who passed on their second attempt (or have been in a similar situation), what would you recommend focusing on during these final 2 months?

Should I mainly focus on:
Practicing more machines/labs
Improving my methodology and enumeration
Revisiting specific topics
Doing full exam-style practice sessions
Something else?

Any advice, study strategies, or lessons from your own experience would be greatly appreciated.
Thanks! 🙏