2019-02-22 11:34:06 +11:00
# Awesome OSCP
[](https://github.com/sindresorhus/awesome)
> A curated list of awesome OSCP resources
## Contents
- [Resources ](#resources )
2019-02-22 12:04:15 +11:00
- [OSCP Reviews and Guides ](#oscp-reviews-and-guides )
2019-02-22 16:12:13 +11:00
- [Cheatsheets and Scripts ](#cheatsheets-and-scripts )
2019-02-22 12:04:15 +11:00
- [Topics ](#topics )
2023-05-18 15:46:28 +05:30
- [Buffer Overflow ](#buffer-overflow )
- [Privilege Escalation ](#privilege-escalation )
- [Active Directory ](#Active-Directory )
2019-02-22 12:30:47 +11:00
- [Other OSCP Resources ](#other-oscp-resources )
2023-05-18 15:46:28 +05:30
- [Books ](#books )
2019-02-22 11:34:06 +11:00
- [License ](#license )
## Resources
2019-02-22 12:30:47 +11:00
### OSCP Reviews and Guides
2022-01-06 18:21:55 +11:00
- [Official OSCP Certification Exam Guide ](https://help.offensive-security.com/hc/en-us/articles/360040165632-OSCP-Exam-Guide )
2019-02-22 12:30:47 +11:00
- Luke’ Part 1 ](https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-1-is-oscp-for-you-b57cbcce7440 ), [Part 2 ](https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-2-workflow-and-documentation-tips-9dd335204a48 ), [Part 3 ](https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-3-practical-hacking-tips-and-tricks-c38486f5fc97 ))
2019-02-22 15:02:43 +11:00
- [How to prepare for PWK/OSCP, a noob-friendly guide ](https://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob )
- [n3ko1's OSCP Guide ](http://www.lucas-bader.com/certification/2015/05/27/oscp-offensive-security-certified-professional )
2019-02-22 12:30:47 +11:00
- [Jan's "Path to OSCP" Videos ](https://www.youtube.com/playlist?list=PLyPJ3SHNkjIFITR-Lzsc0XSOBS7JUXsOy )
2019-02-22 15:02:43 +11:00
- [Offensive Security’ ](http://www.securitysift.com/offsec-pwb-oscp/ ) (+ some scripts)
2019-02-22 15:55:06 +11:00
- [OSCP Lab and Exam Review ](https://theslickgeek.com/oscp/ )
- [OSCP Preparation Notes ](https://www.jpsecnetworks.com/category/oscp/ )
- [A Detailed Guide on OSCP Preparation – ](http://niiconsulting.com/checkmate/2017/06/a-detail-guide-on-oscp-preparation-from-newbie-to-oscp/ )
2019-04-20 13:56:32 +10:00
- [My Fight for OSCP ](https://alphacybersecurity.tech/my-fight-for-the-oscp/ )
2021-04-12 23:20:24 -04:00
- [The Ultimate OSCP Preparation Guide ](https://johnjhacking.com/blog/the-oscp-preperation-guide-2020/ )
2022-06-08 21:17:55 +08:00
- [The Journey to Try Harder: TJnull’ ](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html )
2019-02-22 12:30:47 +11:00
2019-02-22 15:30:08 +11:00
### Cheatsheets and Scripts
2019-02-22 12:30:47 +11:00
- [Luke's Practical hacking tips and tricks ](https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-3-practical-hacking-tips-and-tricks-c38486f5fc97 )
2019-02-22 15:30:08 +11:00
- [Penetration Testing Tools Cheat Sheet ](https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/ )
2019-02-22 15:55:06 +11:00
- [How to Pass OSCP ](https://gist.github.com/unfo/5ddc85671dcf39f877aaf5dce105fac3 )
2019-02-22 15:30:08 +11:00
- [Reverse Shell Cheat Sheet ](https://highon.coffee/blog/reverse-shell-cheat-sheet/ )
2022-01-06 18:25:37 +11:00
- [Reverse Shell Generator ](https://www.revshells.com/ )
2019-02-22 15:30:08 +11:00
- [7 Linux Shells Using Built-in Tools ](https://www.lanmaster53.com/2011/05/7-linux-shells-using-built-in-tools/ )
- [Windows Exploit Suggester ](https://github.com/GDSSecurity/Windows-Exploit-Suggester )
- [Linux Exploit Suggester ](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester )
2019-02-22 15:55:06 +11:00
- [OSCPRepo ](https://github.com/rewardone/OSCPRepo )
- [Go-for-OSCP ](https://github.com/pythonmaster41/Go-For-OSCP )
- [Pentest Compilation ](https://github.com/adon90/pentest_compilation )
- [Collection of OSCP scripts ](https://github.com/ihack4falafel/OSCP )
2019-02-22 12:30:47 +11:00
2019-02-22 12:04:15 +11:00
### Topics
2019-02-22 11:34:06 +11:00
2019-02-22 15:02:43 +11:00
#### Buffer Overflow
- [Corelan's Exploit writing tutorial part 1 : Stack Based Overflows ](https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/ )
- [Justin's DoStackBufferOverflowGood ](https://github.com/justinsteven/dostackbufferoverflowgood )
- [Writing Exploits for Win32 Systems from Scratch ](https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2016/june/writing-exploits-for-win32-systems-from-scratch/ )
- [32-Bit Windows Buffer Overflows Made Easy ](https://veteransec.com/2018/09/10/32-bit-windows-buffer-overflows-made-easy/ )
- [Introduction to Buffer Overflow Video ](https://www.youtube.com/watch?v=1S0aBV-Waeo )
- [OverTheWire's Narnia Wargame ](http://overthewire.org/wargames/narnia/ )
2019-02-22 12:04:15 +11:00
#### Privilege Escalation
- [Windows Privilege Escalation Fundamentals ](http://www.fuzzysecurity.com/tutorials/16.html )
2019-02-22 15:02:43 +11:00
- [Common Windows Privilege Escalation Vectors ](https://toshellandback.com/2015/11/24/ms-priv-esc/ )
2019-02-22 15:30:08 +11:00
- [Encyclopaedia Of Windows Privilege Escalation by Brett Moore ](https://www.youtube.com/watch?v=kMG8IsCohHA )
- [Level Up! Practical Windows Privilege Escalation by Andrew Smith ](https://www.youtube.com/watch?v=PC_iMqiuIRQ )
2019-02-22 12:30:47 +11:00
- [Basic Linux Privilege Escalation ](https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/ )
2019-02-22 15:30:08 +11:00
- [Linux privilege escalation by Jake Williams ](https://www.youtube.com/watch?v=dk2wsyFiosg )
2019-02-22 12:04:15 +11:00
2023-05-18 15:43:26 +05:30
#### Active-Directory
- [Active Directory Methodology ](https://book.hacktricks.xyz/windows/active-directory-methodology )
- [Active Directory Exploitation Cheat Sheet ](https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet )
- [PayloadsAllTheThings AD ](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md )
- [Attacking Active Directory: 0 to 0.9 ](https://zer1t0.gitlab.io/posts/attacking_ad/ )
- [PowerView-3.0 tips and tricks ](https://gist.github.com/HarmJ0y/184f9822b195c52dd50c379ed3117993#file-powerview-3-0-tricks-ps1 )
##### Hands-On Resources.
- TryHackMe
- [Active Directory Basics ](https://tryhackme.com/room/activedirectorybasics ) - Easy
- [Post-Exploitation Basics ](https://tryhackme.com/room/postexploit ) - Easy
- [Vulnnet Roasted ](https://tryhackme.com/room/vulnnetroasted ) - Easy
- [Attacktive Directory ](https://tryhackme.com/room/attacktivedirectory ) - Medium
- [raz0r black ](https://tryhackme.com/room/raz0rblack ) - Medium
- [Enterprise ](https://tryhackme.com/room/enterprise ) - Medium
- [Vulnnet Active ](https://tryhackme.com/room/vulnnetactive ) - Medium
- [Zero Logon ](https://tryhackme.com/room/zer0logon ) - Hard
- [Holo ](https://tryhackme.com/room/hololive ) - Hard
- [Throwback ](https://tryhackme.com/network/throwback ) - Easy
- HackTheBox
- [Forest ](https://app.hackthebox.com/machines/212 ) - Easy
- [Active ](https://app.hackthebox.com/machines/148 ) - Easy
- [Fuse ](https://app.hackthebox.com/machines/235 ) - Medium
- [Cascade ](https://app.hackthebox.com/machines/235 ) - Medium
- [Monteverde ](https://app.hackthebox.com/machines/223 ) - Medium
- [Resolute ](https://app.hackthebox.com/machines/220 ) - Medium
- [Arkham ](https://app.hackthebox.com/machines/179 ) - Medium
- [Mantis ](https://app.hackthebox.com/machines/98 ) - Hard
- [APT ](https://app.hackthebox.com/machines/296 ) - Insane
- [Dante ](https://app.hackthebox.com/prolabs/overview/dante ) - Beginner
- [Offshore ](https://app.hackthebox.com/prolabs/overview/offshore ) - Intermediate
- [RastaLabs ](https://app.hackthebox.com/prolabs/overview/rastalabs ) - Intermediate
- [Cybernetics ](https://app.hackthebox.com/prolabs/overview/cybernetics ) - Advanced
- [APT Labs ](https://app.hackthebox.com/prolabs/overview/aptlabs ) - Advanced
- HackTheBox Academy ( PAID )
- [Introduction to Active Directory ](https://academy.hackthebox.com/module/details/74 ) - Fundamental
- [ActiveDirectory LDAP ](https://academy.hackthebox.com/course/preview/active-directory-ldap ) - Medium
- [ActiveDirectory Powerview ](https://academy.hackthebox.com/module/details/68 ) - Medium
- [ActiveDirectory BloodHound ](https://academy.hackthebox.com/module/details/69 ) - Medium
- [ActiveDirectory Enumeration & Attacks ](https://academy.hackthebox.com/module/details/143 ) - Medium
- Proving Grounds
- [PG-Practice ](https://portal.offsec.com/labs/practice ) ( PAID )
* Hutch
* Heist
* Vault
# Other OSCP Resources
2019-02-22 12:04:15 +11:00
2024-11-28 15:23:54 +01:00
- [pwn.guide ](https://pwn.guide )
2019-02-22 15:02:43 +11:00
- [PWK Syllabus ](https://www.offensive-security.com/documentation/penetration-testing-with-kali.pdf )
2019-02-22 12:30:47 +11:00
- [OSCP-Prep-Resources ](https://github.com/burntmybagel/OSCP-Prep )
2019-02-22 15:30:08 +11:00
- [Offensive Security Bookmarks ](https://jivoi.github.io/2015/07/03/offensive-security-bookmarks/ )
2019-02-22 15:55:06 +11:00
- [The how to get the OSCP certification wiki ](https://www.peerlyst.com/posts/the-how-to-get-the-oscp-certification-wiki-peerlyst )
- [OSCP Goldmine ](http://0xc0ffee.io/blog/OSCP-Goldmine )
- [Penetration Testing Study Notes ](https://github.com/AnasAboureada/Penetration-Testing-Study-Notes )
2019-02-22 15:02:43 +11:00
- [OSCP-like Vulnhub VMs ](https://www.abatchy.com/2017/02/oscp-like-vulnhub-vms )
2019-02-22 15:30:08 +11:00
- [Metasploit Unleashed ](https://www.offensive-security.com/metasploit-unleashed/ )
2019-02-25 11:19:38 +11:00
- [Awesome Penetration Testing ](https://github.com/enaqx/awesome-pentest )
2020-04-08 00:58:53 +02:00
- [OSCP Exam Report Template in Markdown ](https://github.com/noraj/OSCP-Exam-Report-Template-Markdown )
2019-02-22 11:34:06 +11:00
2019-02-22 12:39:23 +11:00
#### Books
- [Penetration Testing: A Hands-on Introduction to Hacking ](https://www.amazon.com/Penetration-Testing-Hands-Introduction-Hacking/dp/1593275641 )
- [The Hacker Playbook 3: Practical Guide to Penetration Testing ](https://www.amazon.com.au/Hacker-Playbook-Practical-Penetration-Testing/dp/1980901759 )
2019-02-22 15:02:43 +11:00
- [RTFM: Red Team Field Manual ](https://www.amazon.com/Rtfm-Red-Team-Field-Manual/dp/1494295504 )
2023-04-03 09:13:35 +01:00
- [RTFM: Red Team Field Manual v2 ](https://www.amazon.com/RTFM-Red-Team-Field-Manual/dp/1075091837 )
2019-02-22 15:02:43 +11:00
- [The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws (2nd Edition) ](https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting-ebook/dp/B005LVQA9S )
2019-02-22 12:39:23 +11:00
2019-02-22 11:34:06 +11:00
## License
[](http://creativecommons.org/publicdomain/zero/1.0)
To the extent possible under law, Adel & #34 ; 0x4D31& #34 ; Karimi has waived all copyright and
related or neighboring rights to this work.
