# OSCP- One Page Repository
#### Hello Everyone
#### This is the one page repository for OSCP learners.
### 1 Kali Linux Basic knowledge -
* Online Course Link:
* Book Link:
Hands on challenge to get comfortable with Linux:
* Overthewire Bandit:
* Root me
* Cmdchallenge.com:
* HackerRank Linux Shell:
### 2 Learn Basics Bash Scripting and Python Language
* [https://guide.bash.academy/
]()
*
### 3 Recon - Learn about network reconnaissance
* Nmap Resouces
* Nmap Official Guide -
*
*
*
* Service Enumeration
*
### 4 Vulnerable Machines
Now move to vulnerable machines. There are two main websites for practice on vulnerable machines. **Hackthebox machines and Vulnhub Machines.** There are multiples infosec guys who has written blogs related to these machines for community. First thing you need to do, read blogs for 5 machine and try to understand the approach for start on these machines.
*
*
**TjNull has shared a list which has OSCP related boxes.**
* Below is the google sheet for vulnhub and hackthebox boxes:
### 5 Public Exploits
Most of the time in OSCP you will need to use a public exploit on your target to see if you can obtain a shell on it. With that exploit you may need to modify shellcode or even parts of the exploit to match with your system to obtain a connection from your target.
* Exploit-DB -
* SearchSploit - Offline kali Database -
* Packetstorm -
### 6. File Transfer
There are multiple ways to transfer the files from attacker system to target system.
* **Windows**
*
* VBS Script
* SMB Server
* HTTP Server
* FTP Server
* TFTP Server
* Powershell
* Debug.exe
* Certutil
* **Linux**
* Python Server
* Curl
* Wget
* Netcat
* FTP
* PHP
* SCP - SSH
### 7. Privilege Escalation
* For Practice on Local Machine:
*
* Windows Privilege Escalation
*
*
*
* Linux Privilege Escalation
*
* Gtfobins -
### 8. Web App Vulnerabilities
* SQL Injection -
* Remote File Inclusion -
* Local File Inclusion -
* Bypass File upload -
* Vulnerable Application for Practice
* OWASP Juice Shop:
* Metasploitable 2
* BWAPP
* Multidae
* DVWA -
### 9. Buffer Overflow
* Exploiting Simple Buffer Overflow on Win 32
* Buffer Overflow for Dummies -
* For Practice:-
* Windows Binaries (Recommend that you run these on Windows 7/XP 32 bit):
* Brain Pan Machine -
* Vulnserver:
* Minishare 1.4.1:
* Savant Web Server 3.1:
* Freefloat FTP Server 1.0:
* Core FTP Server 1.2:
* SLMAIL -
* Linux Binaries:
* Linux Buffer Overflow:
### 10 Pivoting & Port Forwarding
* Abatchy’s Port Forwarding Guide:
* Windows Port Forwarding:
* SSH Tunneling Explained:
* Understanding Proxy Tunnels:
* Explore Hidden Networks with Double Pivoting:
* 0xdf hacks stuff. Pivoting and Tunneling:
* Tools:
* SSHuttle:
* Proxychains:
#### Youtube Channels for OSCP related HTB Boxes writeups
* IPPSEC TJ\_NULL OSCP LIST -
*
*
* IPPSEC -
HTB Boxes to Prepare for OSCP (Youtube Playlist):
### Tool Set
* **Web Recon**
* Dirsearch:
* Dirbuster:
* Gobuster:
* Wfuzz:
* **SQL**
* SQLmap: [https://github.com/sqlmapproject/sqlmap/wiki/Usag](https://github.com/sqlmapproject/sqlmap/wiki/Usage)
* NoSQLMap:
* SQLNinja:
* **Windows Privilege Escalation**
* Winpeas
* Window exploit suggester -
* Powerup
* Sharpup
* Seatbelt
* Sherlock -
* Windows Priv checker
* JAWS -
* **Linux Privilege Escalation**
* Linux smart enumeration
* Pspy64
* Linenum -
* Linpeas
* Lpe
* Linux Exploit Suggester
* Beroot
* Bashark
* Linux priv checker
* Password Cracking
* John The Ripper -
* Hashcat:
* Online Tools for Password Cracking:
* THC Hydra:
* Medusa:
* Wordlist generators:
* Cewl:
* Crunch:
* Wordlists:
* In Kali: /usr/share/wordlists
* Seclists: apt-get install seclists You can find all of his password lists here:
* Online Password Crackers:
*
*
*
*
*
### Other OSCP guides:
I got some content from these below OSCP guides.
*
*
*
*
*
*
*
*
*
*
* Other Links:
*
*
*
* [https://maikthulhu.github.io/2017-11-20-onenote-layout](https://maikthulhu.github.io/2017-11-20-onenote-layout/)
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://infosecsanyam261.gitbook.io/tryharder/one-page-methodology.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.