OSCP-tools

scripts and key wordlists used for OSCP/PWK

---

• Basic Active Directory Attacks
  • Mimikatz
  • Lateral Movement
• Machine Enumeration Checklist
• Basic PrivEsc
  • if you have SeImpersonatePrivilege from whoami /privs - use Potato/PrintSpoofer
  • Windows PrivEsc Checklist
  • Linux PrivEsc Checklist
• one-liners
• Tools Transfer

Advanced Active Directory Reference

---

How to win - every machine!

1. nmap -p-, -sU, -sV, -A

   --script vuln

2. Onesixtyone, enum4linux,

   FTP?

3. Nikto, gobuster, curl, Burp if needed

4. FTP, LFI, SQLi/Union, OR OS Inject

   OR shitty webapp exploit - view pagesource

5. Shell

6. Root

7. Screenshot proof with ifconfig

---

Other cheatsheets

https://github.com/0xsyr0/OSCP