I failed OSCP in November. I passed it in March. The version of me that passed is not smarter than the version that failed. He is more boring.
What I changed
- Stopped reading writeups before attempting boxes. Read them only after.
- Wrote everything down — wrong commands, dead ends, even typos.
- Built a methodology checklist and refused to skip steps even when I 'knew' the answer.
- Slept eight hours the night before. Cannot overstate.
Is OSCP still worth it in 2026?
If you want a job in offensive security, yes. Not because the cert is magic, but because the failure mode of preparing for it — building a working methodology — is the actual job. The certificate is a receipt.
Cost
$1,649
Time
~640h over 5 months
Attempts
2 of 2
Repeat?
Yes, slower