HUGE OSCP Changes You MUST KNOW | OSCP+

Summary

In this video, Kaiser Clark discusses significant changes to the Offensive Security Certified Professional (OSCP), rebranded as OSCP Plus from November 1st, 2024. The new certification requires renewal every three years, contrasting the lifetime validity of the original OSCP. Existing holders retain their lifetime status, while new candidates will earn the Plus designation. The exam's Active Directory portion has been revamped for realism, and bonus points are abolished. Kaiser shares his initial disappointment but acknowledges the potential benefits, such as meeting ISO 17024 standards and possibly aligning with the DOD 8570 program, which could open government job opportunities. He advises on whether to pursue the current OSCP or wait for the Plus version, considering the pros and cons of each.

Takeaways

• 📅 Starting November 1st, 2024, the Offensive Security Certified Professional (OSCP) will be rebranded as OSCP Plus.
• ⏰ Existing OSCP holders will retain their certification for life, while new certifications will require renewal every three years.
• 💡 The OSCP Plus will have changes in the Active Directory portion of the exam, starting from an assumed compromised position within the internal network.
• 📝 The scoring system for the Active Directory set is being adjusted to allow for partial points, rather than an all-or-nothing approach.
• 🚫 The bonus point system is being removed, which previously awarded 10 bonus points for completing 80% of the course modules and compromising 40 machines in the labs.
• 💼 For existing OSCP holders, there's a special offer to upgrade to OSCP Plus for $199 until March 31st, 2025, after which the price increases to $799.
• 🔄 There are three ways to renew the OSCP Plus certification: retaking and passing the exam, passing a qualifying OffSec certification, or through the new OffSec CPE program.
• 🌐 The changes aim to align the OSCP with ISO 17024 standards and potentially qualify for the DOD 8570 program, which lists certifications for government cybersecurity roles.
• 📉 The community reaction to the changes, as seen on the OffSec Discord, is largely negative, with many expressing concerns about the cost and the shift from a lifetime certification.
• 🤔 The decision to remove the bonus points and introduce a renewal system is seen by some as a move towards increased revenue for OffSec, but also as a step towards greater industry standardization and recognition.

Q & A

What is the major change announced by OffSec for the OCP certification?

Starting November 1st, 2024, the OCP certification will be rebranded as OCP Plus, and it will no longer be a good-for-life certification, requiring renewal every 3 years.

How does the rebranding to OCP Plus affect existing OCP holders?

Existing OCP holders remain OCP holders for life, and their status will never change. Only those who get certified after November 1st will become OCP Plus certified, requiring renewal.

What is the new requirement for maintaining the OCP Plus designation?

To maintain the OCP Plus designation, one must renew it every 3 years. If not renewed, the certification will downgrade to a regular OCP certification.

How is the exam content changing for the OCP Plus certification?

The Active Directory portion of the exam is changing, with candidates now starting inside the internal network and having to escalate privileges from there, rather than starting as an outside attacker.

What is the new scoring system for the Active Directory section in the OCP Plus exam?

The new scoring system allows for partial points, so candidates can earn points for compromising individual machines within the AD network, instead of needing full domain admin or compromising all machines.

Why is OffSec removing the bonus point option from the OCP Plus exam?

OffSec is removing the bonus point option to comply with ISO 17024 standards, which are global standards for the competence of personal certification bodies.

What special offer is available for existing OCP holders to get the OCP Plus certification?

Existing OCP holders can take the OCP Plus certification exam for $199 until March 31st, 2025, after which the price increases to $799.

What are the three ways to renew the OCP Plus certification?

One can renew the OCP Plus certification by taking and passing the certification exam again, passing a qualifying OffSec certification (OSED, OSWA, or OSEP), or through the new OffSec CPE (Continuing Professional Education) program.

What are the two main reasons OffSec provided for making these changes to the OCP certification?

The two main reasons are to make the AD portion of the exam more realistic and to better represent a student's capability to perform Active Directory penetration testing, and to ensure the OCP meets ISO 17024 standards.

What is the speaker's opinion on the changes to the OCP certification?

The speaker initially felt the changes were a step back and a way for OffSec to profit from its certification holders. However, after further consideration, they understood the rationale behind the changes, especially regarding ISO standards and potential government recognition.

What advice does the speaker give to those considering getting the OCP certification before or after the changes?

The speaker suggests waiting until after November 1st to get the OCP Plus certification, unless one feels they absolutely need the bonus points available before the change.