Milestone map
Milestone map
3 milestones
Build a legal practice routine
4–8 weeks
Practise on legal lab platforms until you can compromise beginner machines on your own. Keep structured notes for every machine. Only ever test systems you have permission to test.
Proof required
Submit your lab profile or completion list (at least 20 machines) and three sample write-ups from your notes.
What gets checked
- 20+ machines on legal platforms
- Notes follow a repeatable method
- Write-ups show enumeration, not just the exploit
Common mistakes
- Testing systems without permission
- Following walkthroughs step by step
- No notes kept
Powstik Guide
Twenty lab machines and structured notes.
Steps
- Use only legal lab platforms.
- Write your enumeration checklist.
- Attempt each machine before reading hints.
- Write up each one in the same format.
Template
Machine write-up Name / platform: Enumeration (ports, services): Foothold: Privilege escalation: What I missed at first:
What gets sent back
- Testing without permission.
- Copying walkthroughs.
- Fewer than 20 machines.
Resources
Foundationstart here
Depthgo deeper
What a verifier looks for
- Check the lab profile
- Read the three write-ups
- Check enumeration is shown
You'll sign in first, then come straight back here.
Complete the course labs and a mock exam
8–12 weeks
Work through the official course labs and sit a full timed mock exam. Write a professional report afterwards. The real exam grades the report as well as the hacking.
Proof required
Submit your lab progress, the mock exam timeline, and your full mock report (redacted of any course-restricted content).
What gets checked
- Mock done under exam time limits
- Report meets the exam's report format
- Weak areas identified from the mock
Common mistakes
- Skipping the report
- Mock done in pieces over days
- Sharing restricted course material
Powstik Guide
A timed mock exam and a professional report.
Steps
- Read the official exam guide and report rules.
- Block out the full exam time in one go.
- Take screenshots as proof as you work.
- Write the report in the required format.
- List your weak areas from the mock.
Template
Mock timeline Start: Machine / points / time taken Breaks: End: Weak areas to fix:
What gets sent back
- No report.
- Mock split over days.
- Restricted material shared.
Resources
Foundationstart here
Depthgo deeper
What a verifier looks for
- Check the timeline
- Read the report structure
- Check nothing restricted is shared
You'll sign in first, then come straight back here.
Pass the OSCP+ exam
Exam window
Sit and pass the official exam. Share the certificate and its verification link. The proctored exam is the external proof of hands-on skill.
Proof required
Submit your official OffSec certificate and the credential verification link, with your name matching your profile.
What gets checked
- Official certificate, not a course badge
- Verification link resolves
- Name matches your profile
Common mistakes
- Submitting a course completion badge
- No verification link
- Name mismatch
Powstik Guide
An official, verifiable OSCP+ certificate.
Steps
- Book the exam when your mock scores are passing.
- Prepare your report template in advance.
- Submit the report within the deadline.
- Save the certificate and verification link.
Template
Proof checklist [ ] Official certificate [ ] Verification link [ ] Name matches profile [ ] Exam date
What gets sent back
- A course badge.
- No verification link.
- A name mismatch.
Resources
Foundationstart here
Depthgo deeper
What a verifier looks for
- Open the verification link
- Check the name
- Check the credential type
You'll sign in first, then come straight back here.