Sources, review date and section shortcuts
Key claims reviewed: October 19, 2026. The exam requirements and vendor purchase options below are sourced; the seven review prompts and recovery schedule are editorial suggestions, not a verified personal failure story.
Exam guide · Pricing · Standalone and retake terms · Proctoring
Go straight to: Recovery plan · Costs
An unsuccessful OSCP attempt needs a specific review, not another motivational story. Start with the requirements you could not demonstrate, the evidence you could not reproduce, and the logistics that interrupted the work. This guide presents seven review questions and an example recovery plan. It does not describe a documented personal exam attempt or establish the most common causes of failure.
Keep technical performance, exam administration and spending decisions separate. A score calculator or an encouraging practice session cannot predict a pass. Use your own authorized-lab work and the current provider instructions to decide what needs to change.
1. Recheck the Current Exam Rules
Old writeups can describe a different exam. Read the current OSCP+ guide and the instructions supplied for your appointment. Separate an official requirement from a suggestion such as changing targets after a fixed interval. A suggested timer is a planning aid, not a grading rule.
Check restrictions for the exact features you intend to use. Do not assume every function of a familiar tool is permitted. Direct assistance from another person or an AI chatbot is prohibited; that restriction also matters while preparing the exam report. Practise with permitted resources before the appointment.
2. Review the Questions Behind Your Enumeration
For each practice target, list what you knew, what you tested and what the output changed. A version banner can suggest a hypothesis, but it does not establish that an exploit applies. Record the service, target address, test conditions and result so you can distinguish a negative result from a connectivity problem.
Use one unfamiliar, authorized practice machine to check your method. Save initial observations, explain your next test, and write down why a lead was accepted or rejected. The purpose is to expose gaps in reasoning rather than accumulate a particular number of solved boxes.
3. Reproduce the Evidence Before Access Disappears
For the real examination, follow the proof instructions for each target. Display the supplied proof file from its original location in an interactive target shell with the target IP address in the same screenshot. Submit required proof values in the control panel before assessment time ends. A copied flag in a note or an exploit banner is not a replacement.
In practice, have a technically competent reader follow your notes without verbal hints. Record the sequence, necessary commands, relevant output and any exploit modifications. If a step cannot be reproduced, fix that documentation while the lab is still available. Do not publish confidential exam material as a portfolio example.
4. Review Time, Rest and Connection Arrangements
Mark the assessment deadline and the later report deadline separately. Build a schedule containing investigation, evidence checks, meals, rest and contingencies. Choose intervals that you have rehearsed; there is no universal sleep schedule or proven pivot timer in this article.
Notify the proctor before leaving and when returning. Follow the current session instructions instead of assuming that a break pauses the assessment. Test your permitted backup arrangements in advance. Personal connection trouble does not automatically entitle you to an extension.
At a review point, ask whether the last block produced new evidence. If you repeated the same idea without a changed condition, write down the unresolved question and reassess the next useful task. Keep the notes needed to return later.
5. Turn a General Failure Into Specific Skill Gaps
Possible review categories include service enumeration, Linux or Windows privilege analysis, Active Directory reasoning, maintaining access, and report reproduction. These are prompts for your own review, not an empirical ranking of candidate weaknesses.
For each gap, define a small exercise with an observable output. An example is explaining a permission boundary, reproducing a permitted lab path and writing the corresponding report section. Include unfamiliar tasks as well as repeated ones so recognition of a remembered walkthrough does not stand in for understanding.
6. Compare What Each Purchase Actually Includes
The Course + Cert bundle is listed at $1,749 with 90 days of selected course/lab access and one attempt. Learn One is listed at $2,749 per year with longer course access and two attempts; review its automatic-renewal terms. The separate OSCP+ exam product is listed at $1,699 for two attempts without PEN-200 training. These are different products, not three prices for the same package.
The standalone FAQ lists a regular retake at $249 after the included attempts have been used. Verify your account eligibility, waiting period and actual scheduling deadline before paying. Provider pages can differ on validity details, so confirm the terms attached to your purchase rather than inferring them from the price.
Make a budget with separate lines for an eligible attempt, any genuinely needed training, optional lab access, applicable tax and currency conversion. Subtract attempts you already hold. An allowance for a possible retake is your contingency assumption, not a requirement to buy another full course.
7. Write a Recovery Plan With Observable Outputs
An illustrative four-week cycle could use the first week for diagnosis, the next two for focused lab work, and the last for a timed exercise and report review. Extend or shorten it according to the gaps. This example is not a measured preparation average or a promise that four weeks is sufficient.
- Name the gap and the exercise that will test it.
- Record the evidence that would show improvement.
- Assign a practice date and a review date.
- Check the available attempt, cost and scheduling terms.
- Decide whether the remaining uncertainty justifies another attempt.
Before rebooking, choose one lab task you previously could not explain clearly and reproduce it with complete notes. That gives you a concrete basis for the next decision. For additional planning, use the exam-day checklist and package and budget comparison.