Don't do CEH :) It's focused (or at least was , last time I looked at the syllabus) on learning long lists of stuff about security testing tools, this is not a

Don't do CEH :) It's focused (or at least was , last time I looked at the syllabus) on learning long lists of stuff about security testing tools, this is not a good way to learn about security testing/penetration testing/whatever people want to call it this year. OSCP is a useful entry point in terms of what it teaches. But there are also loads of free resources which can provide some hands on examples https://pentesterlab.com/ https://pentesterlab.com/ is one example which has some good free examples as well as paid for additional content.