srakamundo.blogg.se - Sneaky ninja reddit

#Sneaky ninja reddit how to
#Sneaky ninja reddit pdf
#Sneaky ninja reddit plus
#Sneaky ninja reddit windows

Go for the most you can afford, I was fortunate enough to land 90 days in the lab, though I had a slow start and missed out on 1/2 weeks.

#Sneaky ninja reddit pdf

Ideally you want to utilise as much time in the labs as possible, so I avoided doing the PDF exercises and forfeited the 5pts. If you get stuck check out rana-khalil's site for walkthroughs.īit of a catch-22, you might need the official OSCP materials to learn the basics in the first place. Heavily recommended from the community is TJ Null's Box List - Practice a few of these HTB OSCP stlye boxes first. In hindsight I would have popped more boxes in HTB/PG before proceeding into the labs to help build out my methodology and tooling a bit more and really take advantage. This might just give you that idea to gain an initial shell or a pivot point. Stuck somewhere? keyword search either of these resources to take you straight to a relatable video/walkthrough. Without a doubt these are the best resources for CTF walkthroughs I've come across. Its all about management and less stress.

#Sneaky ninja reddit windows

You'll be bouncing around so many windows you will eventually get lost. I used Terminator with custom shortcuts to split and horizontally divide. I can't recommend enough a decent terminal window manager. Sudo /usr/bin/impacket-smbserver -smb2support tools /home/kali/OSCP/web/ Or via SMB sudo /usr/bin/impacket-smbserver tools /home/kali/OSCP/web/ -port 443 Without listing them all, some v.useful priv esc tools Įasily the most common methods I to pull these down (covered in the OSCP materials sudo python -m SimpleHTTPServer 80 Start collating tools that you have personally used into a single directory on your Kali host that you can quickly mount/serve and pull down onto the next machines your attacking. Use the various Sublime syntax highlighters to make it easy on your eyes. Save the "Workspace" so you don't loose your layout/tabs and make sure to sync these text documents using any cloudable service such as Google Drive. I used Sublime Text with layout and tab grouping. To give you an idea here is how mine turned out, not the best but not the worst.

#Sneaky ninja reddit how to

Know how to use the tools and interpreting output is key. Best of the bestįor every box you pop and the commands you used (and verified) add and keep it updated. Build more resiliency on your own over time and build it out as you pwn boxes. Initially start popping a few boxes with help from these and save and commands into your own. Don't fall in the trap of using multiple cheat-sheets, instead start creating your own. This saved me a bunch of cycles and helps solidify your methodology.

Create/insert tables for console commands or output.

Set the default font to something like Consolas to maintain output from kali.

Any newly created pages will have this template as default.

Created a box "template" set this as default.

I used OneNote to document each box I popped. This synchronises with the cloud across all my devices and can take screenshots with ease. You might have to review a box you popped weeks/months ago so it does pay off. Document everything and all steps as you go for all boxes! the clearer your documentation the better. This is super key to the entire learning process. Theres a ton of decent write up experiences so I will keep this brief and to the point of the most useful resources I used when tackling the 2020 version of the OSCP. Theres a reason Offensive Security now offer a 365 PWK lab access + 2 exam try bundle!

#Sneaky ninja reddit plus

Plus on top of this any 3rd party resources you add into the mix to help cement knowledge! - this certification is a marathon for sure. You'll spend 3 months (if your lucky) in just the labs right? plus actually reading and watching the official materials which themselves combined are a nice 100hrs+. The more boxes you pop the more experience you will have - simple as that. Do not underestimate the time needed to study and practice if your new to offensive security. Previous experiences will vary and some will hit the ground running with the OSCP. Good time management and sacrifices will be needed especially if you are in full-time work. I have family with 2 kids under the age of 2 (baby #2 coming a week after the end of my 90 day labs) - passing the OSCP is possible with kids. These are super current as of April 2021. Total boxes owned: ~71 (Vulnhub,HTB,PG-Practice)

OSCP holders have also shown they can think outside the box while managing both time and resources. Keep the following in mind Īn OSCP has demonstrated the ability to use persistence, creativity, and perceptiveness to identify vulnerabilities and execute organized attacks under tight time constraints. A quick dump of notes and some tips before I move onto my next project.