OSCP certification*
1.Networking Basics:
IP & MAC addresses.
TCP, UDP, ports & protocols.
OSI model understanding.
IP subnetting.
2.Linux Essentials:
Kali Linux overview.
File system navigation.
User privileges.
Bash scripting.
Intro to Python.
3.Web Attacks:
SQL injection.
Broken authentication.
Sensitive data exposure.
XML external entities.
Access control flaws.
Security misconfigurations.
Cross-site scripting.
Insecure deserialization.
Using vulnerable components.
Insufficient logging.
1.Active Directory:
SMB relays.
IPv6 DNS takeover.
Pass-The-Hash attacks.
Token impersonation.
Kerberoasting.
GPP & Golden ticket attacks.
Mimikatz, Bloodhound, PowerView.
2.Windows Privilege Escalation
Kernel exploits
Password hunting
Impersonation attacks
Registry attacks
Executable files
schedule tasks
Startup applications
DLL hijacking
Service permissions
Windows subsytem for Linux
3.Linux Privilege Escalation
Kernel exploits
Password hunting
File permissions
Sudo attacks
shell escaping
Intended functionality
LD_PRELOAD
CVE-2019–14287
CVE-2019–18634
SUID attacks
Shared object injection
Binary symlinks
Environment variables
Capabilities attacks
Scheduled tasks
NFS
Docker
4.HackTheBox machines:
Forest
Mantis
Monteverde
sauna
Active
Blackfield
Cascade
Remote
Optimum
Precise
Delivery
Pandora
5.tryhackme
Complete Beginner
Jr Penetration Tester
red Teaming
Offensive Pentesting
#OSCP #oscp