OSCP Tools I Built and Time to Crush the Exam.

Go time

I have two more weeks until fight night with the OSCP, and I'm passing this time. I'll stay up for 24/48 (with report) hours if I have to and beat this thing to submission. And it's time to bring this home. I've officially done both LainKusanagia's and TJ Nulls' lists on Proving Grounds, and I'm going to spend more of the week redoing that list to get the bash history on my fresh Kali install.

I'll put everything I built here: website, Notion list, everything.

GitHub - TheHuskyHacker/husky-privesc: oscp privesc script

My privesc script! Both Windows and Linux. Run tools to get all the tools on your box that OffSec approves.

GitHub - TheHuskyHacker/husky-recon: recon tool

The special recon tools I made.

GitHub - TheHuskyHacker/rev-shell-generator: python script for making payloads

Shell generator: you can stay in the terminal.

GitHub - TheHuskyHacker/ADchain: Ad chain after running blood hound

Ad Chain when you give BloodHound data.

GitHub - TheHuskyHacker/piviot-python: python for pivoting

Piviot scripts as well, of commands and automation (probably not needed).

Grab these:

GitHub - TheHuskyHacker/ADchain: Ad chain after running blood hound

GitHub - TheHuskyHacker/git-dumper: A tool to dump a git repository from a website

GitHub - TheHuskyHacker/OSCPv.2: Remake of the my current repo with more organization to it

OSCP Guide

OSCP version 3.0 | Notion

Now for the repos!

Starting with privsec, because I built it this way!

Toolbox.sh

It will install all tools when you’re ready!

Also, here's a copy-paste of where it gets installed and where it's shared!

I moved the oscp-tool repo folder anyway, or made a copy, just to be safe!

Scope:

Address the machine names in the terminal.

Get The Husky Hacker’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

And this is my replacement of winpeas/linpeas

This runs everything and looks for cron jobs, suids, sudo, name a thing; it's just a quicker version of linpeas and is the same thing, while also looking for creds. It’s friendly because it also connects to GTFO bins, but you have to go to the site for it to work.

Same thing for privesc.exe or .ps1 for Windows. It really takes the guest work out.

To recon:

Find hosts; gives you the hosts on the vpn.

Recon tool: nmap is fine here.

Fruitpicker: looking for that low-hanging fruit.

xfind.py finds the CVE’s and repo so you can clone it or get the searchsploit.

Web recon: you can change the list.

Not sure about this one:

It could be considered an RCE. I also made an LFI tester too.

Tools in the folder:

Revshell.py and revshell.sh

That way, you can just copy and paste.

The pivoting tools.

And my ad tool:

Everything you probably need to pass and more.

Time to pass this thing.