02 / about
I'm Sergio, an offensive security student based in Seville, Spain, currently in the final year of a vocational degree in network and systems administration (ASIR). My focus is penetration testing: Active Directory, web applications and wireless networks.
I hold the OSCP+, OSWP and BSCP, all earned in 2026. This blog is where I document how I prepared for each certification, what worked, what did not, and the techniques I pick up along the way.
03 / certifications
04 / training & labs
- 130+machines rooted across Hack The Box and Proving Grounds
- 273PortSwigger Web Security Academy labs, all of them
- 100mystery labs before sitting the BSCP
Open source
- bscp-field-guideA practical guide to preparing for and passing the Burp Suite Certified Practitioner
Platforms
- Hack The BoxActive Directory and assumed-breach machines
- OffSec profile500+ hours in the labs, plus verifiable OSCP+ and OSWP
05 / latest posts
- 003OSWP ReviewThe OffSec Wireless Professional: a dated, barebones certification that OffSec clearly doesn't maintain. Only worth doing if it comes bundled and you're bored.
- 002BSCP ReviewThe Burp Suite Certified Practitioner: incredible quality for the price and a brutal learning curve, just nowhere near as recognised as it deserves.
- 001OSCP+ ReviewAn honest take on the OSCP+ after passing it in 2026: great for getting past HR filters, but you're paying for the badge more than for the content.