Pre-OSCP reading list

 

PREP

 

Gathering some good ol’ links here that should be beneficial in some way for my pursuit of the OSCP. Got many of these links from other people and from scrolling through reddit r/asknetsec, r/netsecstudents.

 

Template intermediate lab documentation
411hall.github.io

Scripts
OSCP-2 Codingo Github
Reconnoitre – Codingo Github

https://411hall.github.io/JAWS-Enumeration/
https://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc
https://github.com/rasta-mouse/Sherlock

https://github.com/kevthehermit/pentest/blob/master/linux-enum-mod.sh
https://github.com/mzet-/linux-exploit-suggester

Reverse shells
http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet

Creating Metasploit Payloads

Spawning a TTY Shell

Privilege escalation in general
https://github.com/sagishahar/lpeworkshop/blob/master/Local%20Privilege%20Escalation%20Workshop%20-%20Slides.pdf

Windows privilege escalation
https://www.fuzzysecurity.com/tutorials/16.html

Windows Privilege Escalation Methods for Pentesters

Well, That Escalated Quickly…


https://www.sploitspren.com/2018-01-26-Windows-Privilege-Escalation-Guide/

https://blog.ropnop.com/transferring-files-from-kali-to-windows/

Linux privilege escalation

A guide to Linux Privilege Escalation


https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/
https://www.sans.org/reading-room/whitepapers/testing/attack-defend-linux-privilege-escalation-techniques-2016-37562

Buffer overflow – Windows

Simple Buffer Overflows

Buffer overflow – Linux
http://www.whitelist1.com/2016/11/stack-overflow-8-exploiting-crossfire.html

Pivotting
https://blog.techorganic.com/2012/10/06/introduction-to-pivoting-part-1-ssh/
https://blog.techorganic.com/2012/10/10/introduction-to-pivoting-part-2-proxychains/

Dynamic Port Forwarding (SSH)

https://blog.techorganic.com/2012/10/16/introduction-to-pivoting-part-3-ncat/

Reviews
https://411hall.github.io/OSCP-Preparation/

Offensive Security Certified Professional – Lab and Exam Review


https://jhalon.github.io/OSCP-Review/

Misc links
https://raw.githubusercontent.com/AnasFullStack/Penetration-Testing-Study-Notes/master/oscp_resources/OSCP-Survival-Guide.md
https://digi.ninja/projects/zonetransferme.php

Related Post