Sources, review date and section shortcuts
Key claims reviewed: October 19, 2026. This is an editorial preparation workflow, not a documented personal exam attempt or a passing formula. Suggested session lengths are adjustable; exam scope, evidence and permitted tools are controlled by OffSec’s current guide.
Official exam guide · Current training prices
Go straight to: Overview · Practical checks
Build an OSCP preparation hub around tasks you can explain and evidence you can reproduce. This guide proposes a workflow; it does not report an author’s exam result, a study-hours survey or a measured improvement in pass rates.
Start with current requirements
The current OSCP+ exam guide describes 23 hours and 45 minutes of examination time and another 24 hours to upload documentation. Three standalone machines contribute 60 points; a three-machine Active Directory set contributes 40. Passing requires at least 70/100 and the specified evidence. Read the complete guide and your Exam Control Panel; this summary does not replace their conditions.
Compare your present skills with the exam scope before choosing more practice targets. Legacy Linux exercises can develop useful habits, but they do not establish Windows or multi-host Active Directory coverage. Separate ordinary training assistance from the restrictions that apply during an actual exam.
Create one private evidence hub
Use a directory you can back up and search. For permitted practice work, keep these records together:
- Scope: target identifier, permission, date, network boundary and reset instructions.
- Observations: commands, relevant output and the difference between an inference and a confirmed result.
- Attempts: hypothesis, action, observed response and why you changed direction.
- Evidence: original screenshots, filenames and a short explanation of what each image proves.
- Report: a reproducible narrative, limitations and remediation appropriate to the observed issue.
Keep OffSec course and exam information private under the provider’s rules. Public portfolio work should come from independent material you are permitted to share. A private cloud account or redacted report does not itself establish sharing permission.
Use an adjustable weekly schedule
| Session | Output to review |
|---|---|
| Investigation | One scoped hypothesis and its supporting or contradicting evidence. |
| Repeat practice | Repeat a permitted task without copying a walkthrough; record any assistance. |
| Reporting | Explain one observed finding so a technically competent reader can reproduce it. |
| Weekly review | Choose a specific gap for next week and remove an activity that is not helping. |
A 90-minute block is an optional timebox. Three such blocks per week for 12 weeks allocate 54 hours; this arithmetic does not establish productive learning, required preparation time or readiness. Shorten or extend blocks around work, sleep and the task. Record actual time separately from planned time.
Practise switching with a reason
Choose an investigation checkpoint before a session. At the checkpoint, summarize what is known, what remains uncertain and the next justified test. Continue only when that test has a useful purpose; otherwise record a return point and switch. A fixed 90-minute rule is not an official exam strategy or a proven optimum.
Compare access before buying
Downloadable VulnHub releases, hosted PG and Hack The Box offerings have different content and terms. PG rules currently describe free PG Play access for three hours in a 24-hour window, and Practice access to one running machine at a time. A familiar machine name does not guarantee current availability. Check the actual product and included content before payment.
Capture proof while it is available
For the actual exam, follow the guide’s original proof, screenshot, Control Panel and final-package requirements. For practice, pair each finding with reproducible actions and relevant output. Check that image files exist and the final exported document opens; a page count is not a quality measure.
Choose your next small task
- List one gap supported by your own recent practice.
- Select an authorized task that addresses it.
- Set a realistic session and evidence checklist.
- Review the result before adding another platform or paid subscription.
Budget from the current OffSec packages, applicable taxes and your actual access period. Retake eligibility and included attempts depend on the purchased product. Do not treat an illustrative retake allowance as a guaranteed price or entitlement.