⚔️ OSCP & eCPPTv3 Exam Notes

🍕 Web version: https://krovs.github.io/oscp-notes

🦩 Notes

• 🦩 Home
• 🔍 Information Gathering
• 🕷️ Web Application Attacks
• 🎣 Client-Side Attacks
• 💣 Exploitation
• 📃 Password Attacks
• 📎 Windows Privilege Escalation
• 🐧 Linux Privilege Escalation
• 🚢 Port Redirection and Tunneling
• 🔭 AD Enumeration
• ⚔️ AD Exploitation
• 🏹 AD Lateral Movement

📚 Study Resources

• PWK Course
• Hackthebox Academy:
  • Pivoting, Tunneling and Port Forwarding
  • Introduction to AD
  • Active Directory Enumeration and Attacks
• PortSwigger Academy:
  • Error-Based and Union-Based SQL Injection
  • Stored, Reflected and DOM-Based Cross-Site Scripting
  • Command Injection
• TryHackme:
  • Linux PrivEsc Room
  • Windows PrivEsc Room

🤖 Machines

• PWK Challenges
• LainKusanagi's List of OSCP-like Machines
  • Proving Grounds Practice
  • HackTheBox
  • TryHackMe

📝 Reporting

Sysreptor

Free Online version

https://docs.sysreptor.com/offsec-reporting-with-sysreptor/

Self-Hosted

https://docs.sysreptor.com/setup/installation/

# downloads and deploys the containers
bash <(curl -s https://docs.sysreptor.com/install.sh)

Adding offsec templates to sysreptor:

cd sysreptor/deploy
url="https://docs.sysreptor.com/assets/offsec-designs.tar.gz"
curl -s "$url" | docker compose exec --no-TTY app python3 manage.py importdemodata --type=design

---

Note: 🔒 All content is for educational purposes only. Always hack responsibly and with permission.