@xyzxyz said:
@21y4d First of all congrats for passing the exam. I’m planning to take the exam too
…
Thanks in advance guys & wish you all the best
1- Of course you can, and it is encouraged. Even if you have a writeup on a similar vulnerability you can refer to it. Basically, the only thing that isn’t allowed is if you have someone else do the exam “or parts of it” for you.
2-There’s no 35, the max is 25. I can’t specifically point out the box distribution “I think it’s not allowed” but you might find it online.
3-Yes you can. What isn’t allowed is auto exploitation, not auto recon/enumeration. Nessus is not allowed because it is a Pro “paid” tool.
4-I’m not sure, depends whether it’s free or not. You can ask the exam team about this.
I hope I could help 