OSCP-Prep

How to prepare for OSCP complete guide

Below are 5 skills which you have to improve before registering for OSCP
> Learn basic of Computer Network, Web application, and Linux
> Learn Bash and Python scripting
> Enumeration is key in OSCP lab, I repeat Enumeration is key in OSCP Lab and in real world too
> Download vulnerable VM machines from vulnhub
> Buffer Overflow (BOF) exploitation

Below are the free reference before registration of OSCP
> https://www.cybrary.it/course/ethical-hacking/
> https://www.cybrary.it/course/web-application-pen-testing/
> https://www.cybrary.it/course/advanced-penetration-testing/
> https://www.offensive-security.com/metasploit-unleashed/
> https://www.cybrary.it/course/python/

Below is the reference for Buffer overflow and exploit development for OSCP
> http://www.fuzzysecurity.com/tutorials/expDev/1.html
> https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/

For Bash Scripting
> http://www.tldp.org/LDP/Bash-Beginners-Guide/html/

Transferring Files from Linux to Windows & post-exploitation
> https://blog.ropnop.com/transferring-files-from-kali-to-windows/
> https://www.cybrary.it/course/post-exploitation-hacking/

Privilege Escalation:
> http://www.greyhathacker.net/?p=738
> http://www.fuzzysecurity.com/tutorials/16.html
> https://github.com/GDSSecurity/Windows-Exploit-Suggester
> http://pwnwiki.io/#!privesc/windows/index.md
> https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/
> https://github.com/rebootuser/LinEnum
> https://www.youtube.com/watch?v=PC_iMqiuIRQ
> https://www.adampalmer.me/iodigitalsec/2013/08/13/mysql-root-to-system-root-with-udf-for-windows-and-linux/

Port redirection/tunneling
> https://chamibuddhika.wordpress.com/2012/03/21/ssh-tunnelling-explained/
> http://www.abatchy.com/search/label/Networking

Practise Lab online & offline --- Most of this lab help you to understand different attack and (privilege escaltion very very important for OSCP )
> http://overthewire.org/wargames/bandit/
> https://www.explainshell.com/
> https://www.vulnhub.com/?q=kioptrix&sort=date-asc&type=vm
> https://www.vulnhub.com/entry/fristileaks-13,133/
> https://www.vulnhub.com/entry/brainpan-1,51/ (Buffer overflow vm)
> https://www.vulnhub.com/entry/mr-robot-1,151/
> https://www.vulnhub.com/entry/hacklab-vulnix,48/
> https://www.vulnhub.com/entry/vulnos-2,147/
> https://www.vulnhub.com/entry/sickos-12,144/
> https://www.vulnhub.com/entry/devrandom-scream,47/
> https://www.vulnhub.com/entry/skytower-1,96/
> https://github.com/rapid7/metasploitable3/wiki
====================================================================================================

OSCP Links
This is a list of links I used while studying for the Offensive Security Certified Professional (OSCP) exam.

Reverse Shell Cheat Sheet – http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet

Offensive Security’s Exploit Database Archive – https://www.exploit-db.com/

OSCP resource gold mine – https://backdoorshell.gitbooks.io/oscp-useful-links/content/

0x0 Exploit Tutorial: Buffer Overflow – Vanilla EIP Overwrite – http://www.primalsecurity.net/0x0-exploit-tutorial-buffer-overflow-vanilla-eip-overwrite-2/

Basic Linux Privilege Escalation – https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation

Vulnerable by Design – https://vulnhub.com

Elevating privileges by exploiting weak folder permissions – www.greyhathacker.net/?p=738/

NSEDoc Reference – https://nmap.org/nsedoc/

Encyclopaedia Of Windows Privilege Escalation – Brett Moore – www.youtube.com/watch?v=kMG8IsCohHA

Windows Privilege Escalation Fundamentals – http://www.fuzzysecurity.com/tutorials/16.html

0daysecurity Enumeration – http://0daysecurity.com/penetration-testing/enumeration.html

Free Password Hash Cracker – https://crackstation.net/

LinEnum – https://github.com/rebootuser/LinEnum

Linux_Exploit_Suggester – https://github.com/PenturaLabs/Linux_Exploit_Suggester

Windows-Exploit-Suggester – https://github.com/GDSSecurity/Windows-Exploit-Suggester

Windows Privilege Escalation – a cheatsheet – http://it-ovid.blogspot.com/2012/02/windows-privilege-escalation.html

unix-privesc-check – http://pentestmonkey.net/tools/audit/unix-privesc-check

windows-privesc-check – http://pentestmonkey.net/tools/windows-privesc-check

John The Ripper Hash Formats – http://pentestmonkey.net/cheat-sheet/john-the-ripper-hash-formats

Microsoft Privilege Escalation – www.toshellandback.com/2015/11/24/ms-priv-esc/

Kali linux Commands Complete List from A to Z – https://geekviews.tech/kali-linux-commands-complete-list/
====================================================================================================================

Vulnerable vms for oscp
Kioptrix: Level 1 (#1) https://www.vulnhub.com/entry/kioptrix-level-1-1,22/
Kioptrix: Level 1.1 (#2) https://www.vulnhub.com/entry/kioptrix-level-11-2,23/
Kioptrix: Level 1.2 (#3) https://www.vulnhub.com/entry/kioptrix-level-12-3,24/
Kioptrix: Level 1.3 (#4) https://www.vulnhub.com/entry/kioptrix-level-13-4,25/
Kioptrix: 2014 https://www.vulnhub.com/entry/kioptrix-2014-5,62/
FristiLeaks: 1.3 https://www.vulnhub.com/entry/fristileaks-13,133/
Stapler: 1 https://www.vulnhub.com/entry/stapler-1,150/
VulnOS: 2 https://www.vulnhub.com/entry/vulnos-2,147/
SickOs: 1.2 https://www.vulnhub.com/entry/sickos-12,144/
Brainpan: 1https://www.vulnhub.com/entry/brainpan-1,51/
HackLAB: Vulnix https://www.vulnhub.com/entry/hacklab-vulnix,48/
/dev/random: scream https://www.vulnhub.com/entry/devrandom-scream,47/
pWnOS: 2.0 https://www.vulnhub.com/entry/pwnos-20-pre-release,34/
SkyTower: 1 https://www.vulnhub.com/entry/skytower-1,96/
Mr-Robot: 1 https://www.vulnhub.com/entry/mr-robot-1,151/
PwnLab: init https://www.vulnhub.com/entry/pwnlab-init,158/
IMF https://www.vulnhub.com/entry/imf-1,162/
=================================================================================================================