Hey everyone, I'm H3racl3s. Today I want to share how I passed the OSCP exam on my first attempt, along with the methodology I used and how I prepared for it

An adult beverage company Martini Bars recently had a corporate breach and the compliance and risk team dictates they perform a penetration test at one of their branch offices. The Hack Smarter team has been authorized to perform an internal black box pentest.

ShadowGate recently completed a corporate acquisition that significantly expanded its internal network, user base, and application footprint. Several business-critical systems were migrated and consolidated under tight operational deadlines to minimize downtime and maintain service continuity.

You are a member of the Hack Smarter Red Team. During a phishing engagement, you were able to retrieve credentials for the client's Active Directory environment. Use these credentials to enumerate the environment, elevate your privileges, and demonstrate impact for the client.

As a penetration tester on the Hack Smarter Red Team, your objective is to achieve a full compromise of the Active Directory environment.

You are a member of the Hack Smarter Red Team. This penetration test will operate under an assumed breach scenario, starting with valid credentials for a standard domain user, faraday. The primary goal is to simulate a realistic attack, identifying and exploiting vulnerabilities to escalate privileges from a standard user to a Domain Administrator.

You are a member of the Hack Smarter Red Team. During a phishing engagement, you were able to retrieve credentials for the client's Active Directory environment. Use these credentials to enumerate the environment, elevate your privileges, and demonstrate impact for the client.

In this lab, access is gained by exploiting a file upload vulnerability in a web shell, leading to remote code execution. Privilege escalation is performed through password guessing and abusing misconfigured sudo permissions on the mysql binary to execute commands as root.

In this lab, we will uncover SSH credentials encoded in Morse code hidden inside an audio file. Privilege escalation is achieved by exploiting writable file permissions on /etc/passwd, allowing the creation of a root-equivalent user.

In this lab, an outdated WordPress plugin (Social Warfare) is exploited to gain remote code execution. From there, a private SSH key is leaked, granting access to a user account. Misconfigured sudo permissions are then abused to escalate privileges by creating and running a script as root.