OSCPrep 👻

All tools, scripts, and forks of everything I've used to study and prepare for my OSCP. Below are the tools contained in this repository. I've also included a number of HackTheBox machine walkthroughs I completed in preparation for the exam, all of which were selected from this list of OSCP-like machines.

• quick-map: Uses Nmap to run a quick scan of the target and subsequently uses the port listing to more granularly scan each service. Ideal for initially identifying ports at the beginning of examining a machine.
• c2-master: Automatically downloads popular tools such as WinPEAS, PowerUp, and other tools you'd want to retrieve while logged on to a victim machine. I'll likely expand this to a number of other useful tools to have hosted and accessible.
• git-dumper: Uses basic bash commands to download and rebuild Git repositories that may be unintentionally hosted on victim machines. Specifically useful for a web server where a /.git directory is identified. Pulling it down to your local machine helps in examining git logs, etc.

Useful links I kept coming back to

References

• Pentest Monkey Reverse Shell Cheat Sheet
• Hashcat Example Hashes

Wordlists

• Directory Traversal Paths
• SQL Injection Strings