OSCP_study_guide - GitLite

KO | EN

gitlite — search

#hacktoberfest #react #llm #go #deep-learning #docker #macos #nodejs #windows #cli #security #mcp #ios #openai

OSCP_study_guide

(★ 470)

Notes of my OSCP study plan

파일 탐색기

최종 버전 다운로드 (.zip)

- - README.md
  - reverse_shell.pl
  - reverse_shell.py
  - reverse_shell.sh
- evil.opm
- README.md
- reverse_shell.cgi
- - escalation_gathering.sh
  - LinEnum.sh
  - linuxprivchecker.py
  - README.md
- - elevate_privileges.ps1
  - PowerUp.ps1
  - README.md
  - Sherlock.ps1
  - windows-exploit-suggester.py
- dirbust.py
- dnsrecon.py
- enum4linux
- finger-user-enum.pl
- ftprecon.py
- readme.txt
- reconscan.py
- samrdump.py
- smbrecon.py
- smtp-user-enum.pl
- smtprecon.py
- snmprecon.py
- sshrecon.py
- README.md
- - list.asp
  - webshell.asp
  - webshell.aspx
- - cmd.cfml
  - README.md
- - cmd.php
- web.config
- directory-list-lowercase-2.3-medium.txt
- dirfuzzing.txt
- README.md
- unix_users.txt
- windows_interesting_files
- drupal_prior_7.32.py
- mempodipper.c
- openfuck.c
- proftpd_1_3_3_a.py
- trans2open.c
- trans2open.pl
README.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Oscp study

Notes of my Offensive Security Certified Professional (OSCP) study plan.

**Last update**: 2019-04-10

## OSCP-like VMs on Vulnhub:
- Beginner friendly:
	- Kioptrix: Level 1 (#1) [ok]
	- Kioptrix: Level 1.1 (#2) [ok]
	- Kioptrix: Level 1.2 (#3) [ok]
	- Kioptrix: Level 1.3 (#4) [ok]
	- FristiLeaks: 1.3 [ok]
	- Stapler: 1 [ok]
	- PwnLab: init [ok]
	- Pluck: 1 [ok]
	- W1R3S: 1.0.1 [ok]
- Intermediate:
	- Kioptrix: 2014 [ok]
	- Brainpan: 1 (Part 1 of BO is relevant to OSCP. egghunting is out of scope though)
	- Mr-Robot: 1 [ok] 
	- HackLAB: Vulnix [ok]
 	- Not so sure (Didn't solve them yet):
	- VulnOS: 2 [ok]
	- SickOs: 1.2 [ok]
	- /dev/random: scream 
	- pWnOS: 2.0
	- SkyTower: 1 
	- IMF
	- Lord of the Root 1.0.1 [ok]
	- Tr0ll
	- Pegasus
	- SkyTower [ok]
- Windows 
	- Metasploitable 3
	- Bobby: 1 (Uses VulnInjector, need to provide you own ISO and key.)

(credits for **@abatchy**)  
  
Link to download VMs: http://vulnhub.com

## Hackthebox.eu (HTB)

I strongly recommend the boxes on the <a href="http://hackthebox.eu"> hackthebox.eu</a> to study for OSCP cert. HTB has a good set of windows boxes to training: **Devel**, **Optimum**, **Bastard**, **Grandpa**, **Blue**, **Sizzle**, **Reel**.

My hackthebox profile: https://www.hackthebox.eu/profile/5823. Feel free to contact me there :)

*PS: It's needed to solve a little "challenge" to obtain the invite.*

## Recommended books:

<a href="https://www.amazon.com.br/Penetration-Testing-Hands-Introduction-Hacking/dp/1593275641">Penetration Testing: A Hands-On Introduction to Hacking</a> (+Highly recommended for beginners)  
<a href="https://www.amazon.com/Hacking-Art-Exploitation-Jon-Erickson/dp/1593271441/ref=sr_1_1?ie=UTF8&qid=1492297164&sr=8-1&keywords=hacking">Hacking: The Art of Exploitation, 2nd Edition</a>  
<a href="https://www.amazon.com/Rtfm-Red-Team-Field-Manual/dp/1494295504/ref=sr_1_2?ie=UTF8&qid=1492297153&sr=8-2&keywords=pentest">Rtfm: Red Team Field Manual</a>  
<a href="https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470/ref=sr_1_1?ie=UTF8&qid=1492297179&sr=8-1&keywords=the+web+application+hacker%27s+handbook">The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws</a>  
<a href="https://www.amazon.com/Hacker-Playbook-Practical-Penetration-Testing-ebook/dp/B00J5S9OPU">The Hacker Playbook: Practical Guide To Penetration Testing</a>

## Stack-based buffer overflow links [must-read]:

https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/ [Recommended]  
http://www.tenouk.com/Bufferoverflowc/Bufferoverflow1.html  
https://raw.githubusercontent.com/m0nad/Papers/master/buffer_overflow_iniciantes.txt [PT-BR]

## Other interesting links:

https://forum.hackthebox.eu/discussion/1655/oscp-exam-review-2019-notes-gift-inside/p1 [+ EXCELLENT tool from @21y4d to enumeration... I really recommend it :) ]  
https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/ [Linux privilege escalation]  
http://www.fuzzysecurity.com/tutorials/16.html [Windows privilege escalation]  
http://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob.html  
https://www.securitysift.com/offsec-pwb-oscp/ [+Scripts]     
http://hackingandsecurity.blogspot.com.br/2016/04/oscp-related-notes.html  
http://rtfm-ctf.org/2017/PWN-PATH-TO-OSCP  
http://www.techexams.net/forums/security-certifications/110760-oscp-jollyfrogs-tale.html [RECOMMENDED reading]  
https://tulpa-security.com/2016/09/19/prep-guide-for-offsecs-pwk/

## My write-ups

<a href="https://ferreirasc.github.io/post/kioptrix_level_1/">Kioptrix level 1</a>  
<a href="https://ferreirasc.github.io/post/kioptrix_level_1_1/">Kioptrix level 1.1 </a>  
<a href="https://ferreirasc.github.io/post/kioptrix_level_1_2/">Kioptrix level 1.2 </a>