OSCP- One Page Repository
Last updated
Was this helpful?
Last updated
Was this helpful?
Online Course Link:
Book Link:
Hands on challenge to get comfortable with Linux:
Overthewire Bandit:
Root me
Cmdchallenge.com:
HackerRank Linux Shell:
Nmap Resouces
Nmap Official Guide -
Service Enumeration
Now move to vulnerable machines. There are two main websites for practice on vulnerable machines. Hackthebox machines and Vulnhub Machines. There are multiples infosec guys who has written blogs related to these machines for community. First thing you need to do, read blogs for 5 machine and try to understand the approach for start on these machines.
TjNull has shared a list which has OSCP related boxes.
Most of the time in OSCP you will need to use a public exploit on your target to see if you can obtain a shell on it. With that exploit you may need to modify shellcode or even parts of the exploit to match with your system to obtain a connection from your target.
There are multiple ways to transfer the files from attacker system to target system.
Windows
VBS Script
SMB Server
HTTP Server
FTP Server
TFTP Server
Powershell
Debug.exe
Certutil
Linux
Python Server
Curl
Wget
Netcat
FTP
PHP
SCP - SSH
For Practice on Local Machine:
Windows Privilege Escalation
Linux Privilege Escalation
Vulnerable Application for Practice
Metasploitable 2
BWAPP
Multidae
For Practice:-
Windows Binaries (Recommend that you run these on Windows 7/XP 32 bit):
Linux Binaries:
Tools:
Web Recon
SQL
Windows Privilege Escalation
Winpeas
Powerup
Sharpup
Seatbelt
Windows Priv checker
Linux Privilege Escalation
Linux smart enumeration
Pspy64
Linpeas
Lpe
Linux Exploit Suggester
Beroot
Bashark
Linux priv checker
Password Cracking
Online Tools for Password Cracking:
Wordlist generators:
Wordlists:
In Kali: /usr/share/wordlists
Online Password Crackers:
I got some content from these below OSCP guides.
Other Links:
Below is the google sheet for vulnhub and hackthebox boxes:
Exploit-DB -
SearchSploit - Offline kali Database -
Packetstorm -
Gtfobins -
SQL Injection -
Remote File Inclusion -
Local File Inclusion -
Bypass File upload -
OWASP Juice Shop:
DVWA -
Exploiting Simple Buffer Overflow on Win 32
Buffer Overflow for Dummies -
Brain Pan Machine -
Vulnserver:
Minishare 1.4.1:
Savant Web Server 3.1:
Freefloat FTP Server 1.0:
Core FTP Server 1.2:
SLMAIL -
Linux Buffer Overflow:
Abatchy’s Port Forwarding Guide:
Windows Port Forwarding:
SSH Tunneling Explained:
Understanding Proxy Tunnels:
Explore Hidden Networks with Double Pivoting:
0xdf hacks stuff. Pivoting and Tunneling:
SSHuttle:
Proxychains:
IPPSEC TJ_NULL OSCP LIST -
IPPSEC -
HTB Boxes to Prepare for OSCP (Youtube Playlist):
Dirsearch:
Dirbuster:
Gobuster:
Wfuzz:
SQLmap:
NoSQLMap:
SQLNinja:
Window exploit suggester -
Sherlock -
JAWS -
Linenum -
John The Ripper -
Hashcat:
THC Hydra:
Medusa:
Cewl:
Crunch:
Seclists: apt-get install seclists You can find all of his password lists here:
