Sooooo I failed the PNPT , all thanks to OSINT, my new arch-nemesis. Spent five full evenings after work chasing digital ghosts, while my cat made sure I never focused for more than 10 minutes. Honestly, I found everything short of classified documents… but apparently not the right login creds. Enumerated the whole internet from what it seems and now I have to write a fail report. Oh well, live and learn.

For XSS. Know your sinks. That is, figure out exactly what function will be executing your injected code. That s what a sink is. Get to know the function that will be executing your input. Then find vulnrabiltiies

Just wanna piggyback on Exit here: It is against the PNPT certification exam rules to reach out for help with the exam during your attempt. Just don't do it. I'm saying this from my own personal experience: If you are struggling with external on a penetration test EXAM - and this is an exam, so there must be a path - PLEASE refer to the RoE. The rules of engagement. Just stop what you are doing and really read it. And reallt think about it. Why did they give you that specific information?

hey watsup man thanks for coming to my site. I'm sorry man we can't really talk about the exam. I don't really mind what you said cause everyone knows there is an OSINT section and I think "bruteforcing has been no help" is not going to give any kind of hint to anybody haha. but please dont say more. I will give hints but like the most general freakin hints. I"m not really allowed to talk to anyone while they are taking the exam remember. Make a post about another cybersecurity related thing sometime soon! thanks good luck man you got this. My advice is not to give up although it might be looking bleak. you know listen to what everyone says in the videos i would say there is one common theme among all these pnpt videos, it is just to follow the main course carefully, maybe a little bit of the pen test playbook. Don't worry Earl lol you'll be alright!!!!!

I am on my second attempt for the PNPT and I'm still stuck at the OSINT section , brutefore has been of no help , can you please give me a hint or pathway to move forward

k

i have yet to implement delete posts lol sorry guys. just um make it blank for now if you want.

watch the last couple of videos in the active directory section of the course. watch the case studies.

yes, so I strongly recommend the Portswigger labs because they always work! They are burp suite labs basically. There are about 300 of them. Some of them take a few minutes, some longer, some a few hours. If you notice, there are usually youtube walkthrouhgs on the bottom. One guy, I won't say his name, is so dry haha. All he does is say the exact solution that is already given by portswigger. Instead, look out for Z3nSh3ll videos, which would be linked right under. Not every lab has a Z3nSh3ll video. But a lot of the important ones do. For instance, just hit the XSS labs, there are like 30 of them. Just go one after the other, and Z3nSh3ll will explain it to you beautifully. He really talks you through it. The logic behind all the attacks, and how to conduct similar attacks it's the best.

CONGRATS!!!! WOOOHOOOOO