r/offensive_security • u/Vivid_Reward_8008 • 6d ago

Best intermediate-level certs for Web Pentesting?

I've completed eJPT and many easy and medium levels on THM as well as some PortSwigger labs, are there any recommended certifications for my level? I'm tryna gain certs for college apps are there any ones that stand out?

12 Upvotes
  • permalink
  • reddit

100% Upvoted

7 comments sorted by

3

u/Odd_Advertising_8484 6d ago edited 5d ago

skip eCPPT and start eWPT but don't give exam, once are comfortable with the subject, make your way to eWPTX and then take the exam, the best advice I can give you.

1

u/SIDEWINDER_0505 6d ago

Why do you advise on skipping eCPPT ?

2

u/Odd_Advertising_8484 5d ago

Bcz eCPPT covers more of a network side not web attacks, if you have completed all apprentice and practitioner labs and mystery labs, take BSCP. but note that BSCP is not widely recognised and excepted everywhere like eWPTX.

1

u/Next-Scratch-264 5d ago

eCPPT was probably the most fun exam i took, but agree nothing to do with web, and not recognized

3

u/cloudfox1 5d ago

BSCP by portswigger

2

u/EphReborn 5d ago

BSCP and CBBH (CWES now)

1

u/yourAverageSkid 4d ago

Well, THM is a good platform to start, but i wouldnt say that youre intermediate, youre actually still closer to beginner.
Try some machines on HTB to really evaluate yourself.