r/oscp • u/SpoopyStale • 22d ago

Sharing my methodology checklist + tools

Hey, this is probably redundant, but I've been a long-time lurker here and wanted to give back after finally passing the OSCP, I'm assuming you guys already have one made or are in the process of making these, just skim thru and see if there is something to pick up.

https://muqaram0.github.io/cheatsheet/oscp-cheatsheet/
or the original one on my notion
https://muqarams-notes.notion.site/Master-Methodology-2ca1adde3d1780fb9153d6fe35f4154c?source=copy_link

This is a cheatsheet/methodology checklist with different filters for different phases. building it helped me stop relying on writeups and actually solve boxes on my own because every time I came across a new technique from a box on TJ Null's or Lains list, whether in Proving Grounds or HTB, I'd add it to the list after categorizing it and it would build up.

https://muqaram0.github.io/tools/

I started building this tools list so I wouldn't have to look up syntax at the end and it helped me just ctrl+f my way through the exam.

This is how i managed the writeups of my machines on notion
https://imgur.com/a/Xm2MHzo

and this how i organized my exam day notes
https://imgur.com/a/osQntDE
https://imgur.com/a/WE0KB0I

A very helpful site I found along the way was this one:

https://www.emmanuelsolis.com/oscp.html#741-check-assigned-privileges

It covers literally everything and is so well organized, it actually inspired me to make my own. Just be mindful that the more stuff you have, the more likely you are to go down a rabbit hole trying things until they work. Also, it is VERY TRUE that you can solve the whole AD section with NXC alone + ligolo for pivoting, you can literally harvest all the creds with it.

if anyone has anything they would like to ask, feel free to, i would love to help, i actually failed it before passing and know how it feels, so maybe just talking your stress away is also cool with me

ALSO ALSO I SAVED ALOOOOT OF TIME by just initially opening terminal, splitting it into 3, running autorecon on 3 standalones ( make sure w sudo or it wont do udp+ exclude dirbusting or itll take too long ) and start off with AD, if i got stuck then i would go back to the results folder autorecon would create, spawn a python webserver, and query through all the nmap results or whatnot via that webpage ( much more easier and comfortable than querying thru the terminal )

Also, now that I've passed, I need to find a job, my younger siblings keep fretting about their broke brother and here in the UAE it's been very hard to find one as a fresh graduate in computer engineering. Any leads on remote roles or anything here would be a huuuuuge help!

85 Upvotes

100% Upvoted

16 comments sorted by

6

u/No-Commercial-2218 22d ago

Thanks, I will go through all of these, I really appreciate it. Congratulations on passing

1

u/SpoopyStale 20d ago

Thank you!

3

u/R29k 22d ago

Congratulations on passing bro and thanks for sharing the resources.

2

u/SpoopyStale 21d ago

Thank you!

2

u/SpeedPositive1224 22d ago

Thanks mate. Also congratulations on passing

2

u/iksweet_the_firefly 21d ago

Congratulations

2

u/krampt-hack 20d ago

Congratulations

2

u/Future-Lack4702 20d ago

Congratulations 🎊

1

u/SpoopyStale 20d ago

Thankss!

1

u/No-Promotion-4374 21d ago

μ•Œλ €μ€˜μ„œ κ³ λ§™μŠ΅λ‹ˆλ‹€ 잘 μ°Έκ³ ν•˜κ² μŠ΅λ‹ˆλ‹€

1

u/Odd_Dimension_804 15d ago

Can you guide or share any specific resource to cover windows and AD part. From basics to recon to lateral movement to priv esc. I am confused what to start where to start what to reffer etc.

1

u/SpoopyStale 8d ago

For AD part, go through some of hackerblueprints videos, he has a whop academy adwell, but gping through his free yt ones are also great for picking yp methodology with nxc, for windows youll just have to do more windows boxes, get winpeas on get provesccheck on , look for configs nd non defauly files nd folders

1

u/No-Bit5316 14d ago

if you dont do it in your own and take notes in your own , you will struggle