post-oscp#

You passed. Now what? The cert is a starting line, not a finish line. Full guide coming — rough directions below.

directions to go#

• Web deep-dive → OSWE, PortSwigger Web Security Academy
• Red teaming → CRTO (Certified Red Team Operator)
• AD mastery → CRTP / CRTE from Altered Security
• Binary exploitation → OSED
• Bug bounty → HackerOne, Bugcrowd, Intigriti
• Research → pick a CVE, write your own PoC

The honest answer: stop chasing certs for a while and actually do the work. Hunt bugs, contribute to open source tools, write up what you find.

Full post coming with learning paths for each direction.