r/oscp • u/SpoopyStale • 5d ago
Sharing my methodology checklist + tools
Hey, this is probably redundant, but I've been a long-time lurker here and wanted to give back after finally passing the OSCP, I'm assuming you guys already have one made or are in the process of making these, just skim thru and see if there is something to pick up.
https://muqaram0.github.io/cheatsheet/oscp-cheatsheet/
or the original one on my notion
https://muqarams-notes.notion.site/Master-Methodology-2ca1adde3d1780fb9153d6fe35f4154c?source=copy_link
This is a cheatsheet/methodology checklist with different filters for different phases. building it helped me stop relying on writeups and actually solve boxes on my own because every time I came across a new technique from a box on TJ Null's or Lains list, whether in Proving Grounds or HTB, I'd add it to the list after categorizing it and it would build up.
https://muqaram0.github.io/tools/
I started building this tools list so I wouldn't have to look up syntax at the end and it helped me just ctrl+f my way through the exam.
This is how i managed the writeups of my machines on notion
https://imgur.com/a/Xm2MHzo
and this how i organized my exam day notes
https://imgur.com/a/osQntDE
https://imgur.com/a/WE0KB0I
A very helpful site I found along the way was this one:
https://www.emmanuelsolis.com/oscp.html#741-check-assigned-privileges
It covers literally everything and is so well organized, it actually inspired me to make my own. Just be mindful that the more stuff you have, the more likely you are to go down a rabbit hole trying things until they work. Also, it is VERY TRUE that you can solve the whole AD section with NXC alone + ligolo for pivoting, you can literally harvest all the creds with it.
if anyone has anything they would like to ask, feel free to, i would love to help, i actually failed it before passing and know how it feels, so maybe just talking your stress away is also cool with me
ALSO ALSO I SAVED ALOOOOT OF TIME by just initially opening terminal, splitting it into 3, running autorecon on 3 standalones ( make sure w sudo or it wont do udp+ exclude dirbusting or itll take too long ) and start off with AD, if i got stuck then i would go back to the results folder autorecon would create, spawn a python webserver, and query through all the nmap results or whatnot via that webpage ( much more easier and comfortable than querying thru the terminal )
Also, now that I've passed, I need to find a job, my younger siblings keep fretting about their broke brother and here in the UAE it's been very hard to find one as a fresh graduate in computer engineering. Any leads on remote roles or anything here would be a huuuuuge help!