offsec

KO | EN

gitlite — search

#javascript #python #typescript #go #machine-learning #rust #deep-learning #linux #nodejs #java #windows #kubernetes #openai #open-source

(★ 65)

OSCP preperation and HackTheBox write ups.

offsec 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Offsec

It consists of machines I did for the OSCP exam preperation and also HackTheBox writeups.

![](https://geps.dev/progress/78)  
**131/168** done.

**Active boxes and Fortresses are password protected.**

## Useful Links

- [ippsec.rocks](https://ippsec.rocks/)
- [kashz-jewel](https://kashz.gitbook.io/kashz-jewels/) - like Hacktricks
- [revshells](https://www.revshells.com/) - generate reverse shells easily
- [OSCP preperation notes](https://oscpnotes.infosecsanyam.in/My_OSCP_Preparation_Notes.html) - super useful list of commands in case you forgot how to run
- [Windows cheetsheet](https://0xsp.com/offensive/red-team-cheatsheet/)
- [Windows file transfer methods](https://academy.hackthebox.com/course/preview/file-transfers/windows-file-transfer-methods)
- [PowerView tips and tricks](https://gist.github.com/the-robot/c0396e87dd2bab8c4ca0ac80e70c95b4)
- [Exploitdb Bin Sploits](https://gitlab.com/exploit-database/exploitdb-bin-sploits) - pre-compiled list of exploitdb binaries

### Active Directory

- [WADComs - GTFOBin for AD](https://wadcoms.github.io/)
- [Active Directory cheetsheet](https://medium.com/@kuwaitison/active-directory-cheat-sheet-94e0bb9bed2)

### Some good articles to read for OSCP preperation

- [OSCP — CRACKING THE NEW PATTERN](https://jaiguptanick.github.io/Blog/blog/OSCP_Cracking_New_Pattern_Walkthrough/)
- [OSCP 2022 — Tips To Help You Pass: K.I.S.S.](https://medium.com/@0xP/oscp-2022-tips-to-help-you-pass-dddd3563967e)

### HTB Machine Summary and Mock Exam Generator

- [Offsec Machine Summary](https://docs.google.com/spreadsheets/d/18r9XQZrtxxADBotsvSYpT6-hZJWvDBXLK5zufNaYlUU/edit?usp=sharing) - It can generate random machines to do as mock exam. Machines are from HackTheBox, Proving Grounds and PWK Lab.

### HTB CBBH Preperation

- [CBBH Prep](https://github.com/the-robot/offsec/tree/master/CBBH)

# HackTheBox writeups

## tjnull Linux boxes

- [x] Lame
- [x] brainfuck
- [x] shocker
- [x] bashed
- [x] nibbles
- [x] beep
- [x] cronos
- [x] nineveh
- [x] sense
- [x] solidstate
- [x] node
- [x] valentine
- [x] poison
- [x] sunday
- [x] tartarsauce
- [ ] lrked
- [x] Friendzone
- [x] Swagshop
- [x] Networked
- [x] jarvis
- [ ] Mirai
- [ ] Popcorn
- [x] Haircut
- [x] Blocky
- [x] Frolic
- [x] Postman
- [x] Mango
- [x] Traverxec
- [x] OpenAdmin
- [x] Magic
- [x] Admirer
- [x] Blunder
- [x] Tabby
- [x] Doctor
- [ ] SneakyMailer
- [ ] Passage
- [ ] Luanne
- [ ] Time
- [x] Ready
- [x] Delivery
- [x] Ophiuchi
- [x] ScriptKiddie
- [x] Armageddon
- [x] Knife
- [x] Pit
- [x] Seal
- [x] Previse
- [x] Forge
- [x] Horizontall
- [x] Shibboleth
- [x] Paper
- [x] Meta

## tjnull Window boxes

- [x] legacy
- [x] Blue
- [x] Devel
- [x] Optimum
- [x] Bastard
- [x] granny
- [x] Arctic
- [x] grandpa
- [x] silo
- [x] bounty
- [x] jerry
- [x] conceal
- [x] chatterbox
- [x] Forest (Active Directory)
- [ ] BankRobber
- [x] secnotes
- [x] Suana (Active Directory)
- [ ] Bastion
- [ ] Buff
- [ ] Servmon
- [x] Active (Active Directory)
- [ ] Remote
- [ ] Fuse
- [ ] Omni
- [x] Worker
- [ ] Love
- [ ] Intelligence (Active Directory)
- [ ] APT
- [ ] Object (Active Directory)
- [ ] Support
- [ ] Acute
- [x] Timelapse (Active Directory)
- [x] StreamIO (Active Directory)
- [x] Scrambled (Active Directory)
- [x] Resolute (Active Directory)
- [x] Cascade (Active Directory)

## Other boxes

- [x] Ambassador
- [x] MetaTwo
- [x] Photobomb
- [x] RedPanda
- [x] Shoppy
- [x] UpDown
- [x] Stocker
- [x] Soccer
- [x] Precious
- [x] Investigation
- [x] Awkward
- [x] Forgot
- [x] Mentor
- [x] Encoding
- [x] BroScience
- [x] Ransom
- [x] SteamCloud
- [x] Tenet
- [x] Apocalyst
- [x] Backdoor
- [x] Inject
- [x] Agile
- [x] Bagel
- [x] Escape
- [x] Interface
- [x] Vessel
- [x] Pollution
- [x] Academy
- [x] BountyHunter

## Fortresses

- [x] Akerva

# Proving Grounds

## Linux

- [x] ClamAV
- [x] Wombo
- [ ] ~~Payday~~ (retried - [can read writeup here](https://medium.com/@vivek-kumar/offensive-security-proving-grounds-walk-through-payday-639f5128b0ca))
- [x] Fail
- [x] Nibbles
- [x] Banzai
- [x] Hunit
- [x] Dibble
- [x] Zino
- [x] Hetemit
- [x] Peppo
- [ ] Postfish
- [x] Malbec
- [x] Sybaris
- [ ] ~~Hawat~~ (retried - [can read writeup here](https://bing0o.github.io/posts/pg-hawat/))
- [x] ZenPhoto
- [x] Readys
- [x] Nukem
- [x] Sorcerer
- [x] Pelican
- [x] Snookums
- [x] Exfiltrated
- [x] Walla
- [x] Voip
- [x] ERP
- [x] Depreciated
- [x] Wheels

## Windows

- [x] Nickel
- [x] Slort
- [x] Authby
- [x] Jacko
- [x] MeatHead
- [x] UT99
- [x] MedJed
- [ ] ~~Algeron~~ (retried - [can read writeup here](https://benheater.com/proving-grounds-algernon/))
- [x] Billyboss
- [ ] ~~Kevin~~ (retried - [can read writeup here](https://dylanrholloway.com/proving-grounds-kevin-write-up/))
- [ ] ~~Metallus~~ (retried)
- [x] Hutch (Active Directory)
- [x] Heist (Active Directory)
- [ ] Vault (Active Directory)
- [x] Shenzi
- [x] DVR4
- [x] Craft
- [ ] ~~Hepet~~ (retried)
- [x] Squid
- [ ] ~~compromised~~ (retried - [can read writeup here](https://viperone.gitbook.io/pentest-everything/writeups/pg-practice/windows/compromised))
- [ ] ~~robust~~ (retried)
- [x] resourced (Active Directory)
- [x] Craft2
- [x] Access (Active Directory)

## Harder Boxes

- [x] Bratarina - Linux
- [x] Internal - Windows
- [x] Clyde - Linux
- [ ] Vector
- [ ] Shifty
- [x] XposedAPI - Linux
- [x] Helpdesk - Windows
- [x] Twiggy - Linux
- [ ] ~~Pebbles~~ (retried - [can read writeup here](https://pentesting.zeyu2001.com/proving-grounds/warm-up/pebbles)) - Linux
- [ ] ~~Panic~~ (retired - buffer overflow)
- [ ] CookieCutter
- [x] Tico - Linux
- [ ] Zipper
- [ ] Thor

## Active Directory practice

- [x] [THM: Attacktive Directory](https://tryhackme.com/room/attacktivedirectory)
- [x] [THM: Hacking Active Directory](https://tryhackme.com/module/hacking-active-directory)
    - [draw.io diagram to understand the AD attack easier](https://github.com/the-robot/hackthebox/blob/master/THM/compromising-active-directory/THM%20-%20Hacking%20AD.pdf)
- [ ] [Active Directory 101 by HackTheBox](https://app.hackthebox.com/tracks/Active-Directory-101)

![AD attack diagram](https://raw.githubusercontent.com/the-robot/hackthebox/master/THM/compromising-active-directory/AD%20Privesc.svg)
- [Pentesting Active Directory Cheatsheet](https://github.com/the-robot/offsec/blob/master/IMAGES/PentestingAD.png?raw=true)

## Scripts

#### Privilege escalation

- [jailbreak-rbash](https://github.com/the-robot/hackthebox/blob/master/SCRIPTS/pe/jailbreak-rbash.sh) - command to find out what commands are available that has a potential of spawning a proper shell, commands are taken from [GTFOBins with +Shell](https://gtfobins.github.io/#+Shell)

offsec

offsec 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

offsec

offsec 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README