> For the complete documentation index, see [llms.txt](https://infosecsanyam261.gitbook.io/tryharder/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://infosecsanyam261.gitbook.io/tryharder/one-page-methodology.md).
# OSCP- One Page Repository
#### Hello Everyone
#### This is the one page repository for OSCP learners.
### 1 Kali Linux Basic knowledge -
* Online Course Link:
* Book Link:
Hands on challenge to get comfortable with Linux:
* Overthewire Bandit:
* Root me
* Cmdchallenge.com:
* HackerRank Linux Shell:
### 2 Learn Basics Bash Scripting and Python Language
* [https://guide.bash.academy/
]()
*
### 3 Recon - Learn about network reconnaissance
* Nmap Resouces
* Nmap Official Guide -
*
*
*
* Service Enumeration
*
### 4 Vulnerable Machines
Now move to vulnerable machines. There are two main websites for practice on vulnerable machines. **Hackthebox machines and Vulnhub Machines.** There are multiples infosec guys who has written blogs related to these machines for community. First thing you need to do, read blogs for 5 machine and try to understand the approach for start on these machines.
*
*
**TjNull has shared a list which has OSCP related boxes.**
* Below is the google sheet for vulnhub and hackthebox boxes:
### 5 Public Exploits
Most of the time in OSCP you will need to use a public exploit on your target to see if you can obtain a shell on it. With that exploit you may need to modify shellcode or even parts of the exploit to match with your system to obtain a connection from your target.
* Exploit-DB -
* SearchSploit - Offline kali Database -
* Packetstorm -
### 6. File Transfer
There are multiple ways to transfer the files from attacker system to target system.
* **Windows**
*
* VBS Script
* SMB Server
* HTTP Server
* FTP Server
* TFTP Server
* Powershell
* Debug.exe
* Certutil
* **Linux**
* Python Server
* Curl
* Wget
* Netcat
* FTP
* PHP
* SCP - SSH
### 7. Privilege Escalation
* For Practice on Local Machine:
*
* Windows Privilege Escalation
*
*
*
* Linux Privilege Escalation
*
* Gtfobins -
### 8. Web App Vulnerabilities
* SQL Injection -
* Remote File Inclusion -
* Local File Inclusion -
* Bypass File upload -
* Vulnerable Application for Practice
* OWASP Juice Shop:
* Metasploitable 2
* BWAPP
* Multidae
* DVWA -
### 9. Buffer Overflow
* Exploiting Simple Buffer Overflow on Win 32
* Buffer Overflow for Dummies -
* For Practice:-
* Windows Binaries (Recommend that you run these on Windows 7/XP 32 bit):
* Brain Pan Machine -
* Vulnserver:
* Minishare 1.4.1:
* Savant Web Server 3.1:
* Freefloat FTP Server 1.0:
* Core FTP Server 1.2:
* SLMAIL -
* Linux Binaries:
* Linux Buffer Overflow:
### 10 Pivoting & Port Forwarding
* Abatchy’s Port Forwarding Guide:
* Windows Port Forwarding:
* SSH Tunneling Explained:
* Understanding Proxy Tunnels:
* Explore Hidden Networks with Double Pivoting:
* 0xdf hacks stuff. Pivoting and Tunneling:
* Tools:
* SSHuttle:
* Proxychains:
#### Youtube Channels for OSCP related HTB Boxes writeups
* IPPSEC TJ\_NULL OSCP LIST -
*
*
* IPPSEC -
HTB Boxes to Prepare for OSCP (Youtube Playlist):
### Tool Set
* **Web Recon**
* Dirsearch:
* Dirbuster:
* Gobuster:
* Wfuzz:
* **SQL**
* SQLmap: [https://github.com/sqlmapproject/sqlmap/wiki/Usag](https://github.com/sqlmapproject/sqlmap/wiki/Usage)
* NoSQLMap:
* SQLNinja:
* **Windows Privilege Escalation**
* Winpeas
* Window exploit suggester -
* Powerup
* Sharpup
* Seatbelt
* Sherlock -
* Windows Priv checker
* JAWS -
* **Linux Privilege Escalation**
* Linux smart enumeration
* Pspy64
* Linenum -
* Linpeas
* Lpe
* Linux Exploit Suggester
* Beroot
* Bashark
* Linux priv checker
* Password Cracking
* John The Ripper -
* Hashcat:
* Online Tools for Password Cracking:
* THC Hydra:
* Medusa:
* Wordlist generators:
* Cewl:
* Crunch:
* Wordlists:
* In Kali: /usr/share/wordlists
* Seclists: apt-get install seclists You can find all of his password lists here:
* Online Password Crackers:
*
*
*
*
*
### Other OSCP guides:
I got some content from these below OSCP guides.
*
*
*
*
*
*
*
*
*
*
* Other Links:
*
*
*
* [https://maikthulhu.github.io/2017-11-20-onenote-layout](https://maikthulhu.github.io/2017-11-20-onenote-layout/)