OSCP Tricks 2023 - Welcome and good journey!</h2>
---
---
## Trigger Tips
- [Information Gathering](/OSCP-Tricks-2023/information_gathering.html)
- [Web Application Attacks](/OSCP-Tricks-2023/web_application_attacks.html)
- [Password Attacks](/OSCP-Tricks-2023/password_attacks.html)
- [Client-Side Attacks](/OSCP-Tricks-2023/client_side_attacks.html)
- [File Transfers](/OSCP-Tricks-2023/file_transfers.html)
- [Linux Enumeration and Privilege Escalation](/OSCP-Tricks-2023/linux_enumeration_and_privilege_escalation.html)
- [Windows Enumeration and Privilege Escalation](/OSCP-Tricks-2023/windows_enumeration_and_privilege_escalation.html)
- [Shell and Some Payloads](/OSCP-Tricks-2023/shell_and_some_payloads.html)
- [Port Forwarding and Tunneling](/OSCP-Tricks-2023/port_forwarding_and_tunneling.html)
- [Active Directory](/OSCP-Tricks-2023/active_directory.html)
## Other Tips
- [Linux Privilege Escalation - HackTricks](https://book.hacktricks.xyz/linux-hardening/privilege-escalation)
- [Windows Local Privilege Escalation - HackTricks](https://book.hacktricks.xyz/windows-hardening/windows-local-privilege-escalation)
- [Active Directory - HackTricks](https://book.hacktricks.xyz/windows-hardening/active-directory-methodology)
- [Wordpress - HackTricks](https://book.hacktricks.xyz/network-services-pentesting/pentesting-web/wordpress)
- [Drupal - HackTricks](https://book.hacktricks.xyz/network-services-pentesting/pentesting-web/drupal)
- [Joomla - HackTricks](https://book.hacktricks.xyz/network-services-pentesting/pentesting-web/joomla)
- [Tomcat - HackTricks](https://book.hacktricks.xyz/network-services-pentesting/pentesting-web/tomcat)
- [Jenkins - HackTricks](https://cloud.hacktricks.xyz/pentesting-ci-cd/jenkins-security)
## Tutorials
- Information Gathering
- [Hack The Box Academy - Network Enumeration with Nmap](https://academy.hackthebox.com/course/preview/network-enumeration-with-nmap)
- [Hack The Box Academy - FootPrinting](https://academy.hackthebox.com/course/preview/footprinting)
- [Hack The Box Academy - Attacking Common Services](https://academy.hackthebox.com/course/preview/attacking-common-services)
- [Hack The Box Academy - Information Gathering Web Edition](https://academy.hackthebox.com/course/preview/information-gathering---web-edition)
- [Try Hack Me - Walking An Application](https://tryhackme.com/room/walkinganapplication)
- [Try Hack Me - Web Enumeration](https://tryhackme.com/room/webenumerationv2)
- Web Application Attacks
- [Hack The Box Academy - Introduction to Web Applications](https://academy.hackthebox.com/course/preview/introduction-to-web-applications)
- [Hack The Box Academy - Web Attacks](https://academy.hackthebox.com/course/preview/web-attacks)
- [Hack The Box Academy - File Inclusion](https://academy.hackthebox.com/course/preview/file-inclusion)
- [Hack The Box Academy - Abusing HTTP Misconfigurations](https://academy.hackthebox.com/course/preview/abusing-http-misconfigurations)
- [Hack The Box Academy - HTTP Attacks](https://academy.hackthebox.com/course/preview/http-attacks)
- [Hack The Box Academy - SQL Injection Fundamentals](https://academy.hackthebox.com/course/preview/sql-injection-fundamentals)
- [Hack The Box Academy - Blind SQL Injection](https://academy.hackthebox.com/course/preview/blind-sql-injection)
- [Hack The Box Academy - Advanced SQL Injection](https://academy.hackthebox.com/course/preview/advanced-sql-injections)
- [Hack The Box Academy - Using Web Proxies](https://academy.hackthebox.com/course/preview/using-web-proxies)
- [Hack The Box Academy - Attacking Web Applications with ffuf](https://academy.hackthebox.com/course/preview/attacking-web-applications-with-ffuf)
- [Hack The Box Academy - Session Security](https://academy.hackthebox.com/course/preview/session-security)
- [Hack The Box Academy - Attacking Authentication Mecanism](https://academy.hackthebox.com/course/preview/attacking-authentication-mechanisms)
- [Hack The Box Academy - Web Service & API Attacks](https://academy.hackthebox.com/course/preview/web-service--api-attacks)
- [Hack The Box Academy - Broken Authentication](https://academy.hackthebox.com/course/preview/broken-authentication)
- [Hack The Box Academy - File Upload Attacks](https://academy.hackthebox.com/course/preview/file-upload-attacks)
- [Hack The Box Academy - Whitebox Pentesting 101: Command Injection](https://academy.hackthebox.com/course/preview/whitebox-pentesting-101-command-injection)
- [Hack The Box Academy - Command Injections](https://academy.hackthebox.com/course/preview/command-injections)
- [Hack The Box Academy - Cross-Site Scripting (XSS)](https://academy.hackthebox.com/course/preview/cross-site-scripting-xss)
- [Hack The Box Academy - Server-Side Attacks](https://academy.hackthebox.com/course/preview/server-side-attacks)
- [Hack The Box Academy - Introduction to NoSQL Injection](https://academy.hackthebox.com/course/preview/introduction-to-nosql-injection)
- [Hack The Box Academy - Introduction to Deserialization Attacks](https://academy.hackthebox.com/course/preview/introduction-to-deserialization-attacks)
- [Try Hack Me - SQL Injection](https://tryhackme.com/room/sqlinjectionlm)
- [Try Hack Me - SQL Injection Lab](https://tryhackme.com/room/sqlilab)
- [Try Hack Me - Authentication Bypass](https://tryhackme.com/jr/authenticationbypass)
- [Try Hack Me - IDOR](https://tryhackme.com/jr/idor)
- [Try Hack Me - SSRF](https://tryhackme.com/jr/ssrfqi)
- [Try Hack Me - File Inclusion](https://tryhackme.com/room/fileinc)
- [Try Hack Me - Cross-Site Scripting ](https://tryhackme.com/room/xss)
- [Try Hack Me - Command Injection](https://tryhackme.com/room/oscommandinjection)
- [Try Hack Me - Upload Vulnerabilities](https://tryhackme.com/jr/uploadvulns)
- [Try Hack Me - Bypass Disable Functions](https://tryhackme.com/room/bypassdisablefunctions)
- [PortSwigger Web Security Academy - SQL Injection](https://portswigger.net/web-security/sql-injection)
- [PortSwigger Web Security Academy - Cross-Site Scripting](https://portswigger.net/web-security/cross-site-scripting)
- [PortSwigger Web Security Academy - XML external entity (XXE) injection](https://portswigger.net/web-security/xxe)
- [PortSwigger Web Security Academy - OS command injection](https://portswigger.net/web-security/os-command-injection)
- [PortSwigger Web Security Academy - Server-side template injection](https://portswigger.net/web-security/all-labs#server-side-template-injection)
- [PortSwigger Web Security Academy - Directory traversal](https://portswigger.net/web-security/file-path-traversal)
- [PortSwigger Web Security Academy - Access control vulnerabilities](https://portswigger.net/web-security/access-control)
- [PortSwigger Web Security Academy - Information Disclosure](https://portswigger.net/web-security/all-labs#information-disclosure)
- [PortSwigger Web Security Academy - File upload vulnerabilities](https://portswigger.net/web-security/file-upload)
- [PortSwigger Web Security Academy - Authentication](https://portswigger.net/web-security/authentication)
- [PortSwigger Web Security Academy - JWT attacks](https://portswigger.net/web-security/jwt)
- [PortSwigger Web Security Academy - CSRF](https://portswigger.net/web-security/csrf)
- [PortSwigger Web Security Academy - SSRF](https://portswigger.net/web-security/ssrf)
- [PortSwigger Web Security Academy - Business logic vulnerabilities](https://portswigger.net/web-security/logic-flaws)
- [PentesterLab - From SQL Injection to Shell](https://pentesterlab.com/exercises/from_sqli_to_shell/course)
- [PentesterLab - From SQL injection to Shell II](https://pentesterlab.com/exercises/from_sqli_to_shell_II/attachments)
- [PentesterLab - From SQL injection to Shell III](https://pentesterlab.com/exercises/from_sqli_to_shell_III/course)
- [PentesterLab - SQL Injection 01](https://pentesterlab.com/exercises/sqli_01/course)
- [PentesterLab - SQL Injection 02](https://pentesterlab.com/exercises/sqli_02/course)
- [PentesterLab - SQL Injection 03](https://pentesterlab.com/exercises/sqli_03/course)
- [PentesterLab - SQL Injection 04](https://pentesterlab.com/exercises/sqli_04/course)
- [PentesterLab - SQL Injection 05](https://pentesterlab.com/exercises/sqli_05/course)
- [PentesterLab - SQL Injection 06](https://pentesterlab.com/exercises/sqli_06/course)
- [PentesterLab - XSS and MySQL FILE](https://pentesterlab.com/exercises/xss_and_mysql_file/course)
- [PentesterLab - RCE via argument injection - PentesterLab](https://pentesterlab.com/exercises/virusfatal/course)
- [PentesterLab - Server Side Template Injection 01](https://pentesterlab.com/exercises/ssti_01/course)
- [PentesterLab - Server Side Template Injection 02](https://pentesterlab.com/exercises/ssti_02/course)
- [PentesterLab - Express Local File Read](https://pentesterlab.com/exercises/express_lfr/course)
- [PentesterLab - PHP Include And Post Exploitation](https://pentesterlab.com/exercises/php_include_and_post_exploitation/course)
- [PentesterLab - File Include 01](https://pentesterlab.com/exercises/fileinc_01/course)
- [PentesterLab - File Include 02](https://pentesterlab.com/exercises/fileinc_02/course)
- [PentesterLab - File Upload 01](https://pentesterlab.com/exercises/upload_01/course)
- [PentesterLab - File Upload 02](https://pentesterlab.com/exercises/upload_02/course)
- [PentesterLab - CVE-2021-33564 Argument Injection in Ruby Dragonfly](https://pentesterlab.com/exercises/cve-2021-33564/course)
- [PentesterLab - CVE-2014-6271/Shellshock](https://pentesterlab.com/exercises/cve-2014-6271/course)
- Shells & Payloads
- [Hack The Box - Shells & Payloads](https://academy.hackthebox.com/course/preview/shells--payloads)
- Linux Enumeration and Privilege Escalation
- [Try Hack Me - Linux: Local Enumeration](https://tryhackme.com/room/lle)
- [Try Hack Me - Enumeration](https://tryhackme.com/room/enumerationpe)
- [Try Hack Me - Linux PrivEsc](https://tryhackme.com/room/linuxprivesc)
- [Try Hack Me - Linux Privilege Escalation](https://tryhackme.com/room/linprivesc)
- [Hack The Box Academy - Linux Privilege Escalation](https://academy.hackthebox.com/course/preview/linux-privilege-escalation)
- Windows Enumeration and Privilege Escalation
- [Try Hack Me - Enumeration](https://tryhackme.com/room/enumerationpe)
- [Try Hack Me - Windows PrivEsc](https://tryhackme.com/room/windows10privesc)
- [Try Hack Me - Windows PrviEsc Arena](https://tryhackme.com/room/windowsprivesc20)
- [Hack The Box Academy - Windows Privilege Escalation](https://academy.hackthebox.com/course/preview/windows-privilege-escalation)
- File Transfers
- [Hack The Box Academy - File Transfers](https://academy.hackthebox.com/course/preview/file-transfers)
- Public Exploits (Localizing, Code Review, Improvements)
- [Try Hack Me - Vulnerabilities 101](https://tryhackme.com/jr/vulnerabilities101)
- [Try Hack Me - Exploit Vulnerabilities](https://tryhackme.com/jr/exploitingavulnerabilityv2)
- [Try Hack Me - Vulnerability Capstone](https://tryhackme.com/jr/vulnerabilitycapstone)
- [Try Hack Me - Intro PoC Scripting](https://tryhackme.com/room/intropocscripting)
- Port Forwarding and Tunneling
- [Try Hack Me - Wreath](https://tryhackme.com/room/wreath)
- [Hack The Box Academy - Pivoting, Tunneling, and Port Forwarding](https://academy.hackthebox.com/course/preview/pivoting-tunneling-and-port-forwarding)
- Active Directory
- [Hack The Box Academy - Introduction to Active Directory](https://academy.hackthebox.com/course/preview/introduction-to-active-directory)
- [Hack The Box Academy - Active Directory Enumeration Attacks](https://academy.hackthebox.com/course/preview/active-directory-enumeration--attacks)
- [Hack The Box Academy - Active Directory LDAP](https://academy.hackthebox.com/course/preview/active-directory-ldap)
- [Hack The Box Academy - Active Directory PowerView](https://academy.hackthebox.com/course/preview/active-directory-powerview)
- [Hack The Box Academy - Active Directory BloodHound](https://academy.hackthebox.com/course/preview/active-directory-bloodhound)
- [Hack The Box Academy - Kerberos Attacks](https://academy.hackthebox.com/course/preview/kerberos-attacks)
- [Hack The Box Academy - Using crackmapexec](https://academy.hackthebox.com/course/preview/using-crackmapexec)
- [Hack The Box Academy - Password Attacks](https://academy.hackthebox.com/course/preview/password-attacks)
- [Hack The Box Academy - Attacking Enterprise Networks](https://academy.hackthebox.com/course/preview/attacking-enterprise-networks)
- [Try Hack Me - Active Directory Basics](https://tryhackme.com/room/winadbasics)
- [Try Hack Me - Attacktive Directory](https://tryhackme.com/room/attacktivedirectory)
- [Try Hack Me - Attacking Kerberos](https://tryhackme.com/room/attackingkerberos)
- [Try Hack Me - Breaching Active Directory](https://tryhackme.com/room/breachingad)
- [Try Hack Me - AD Enumeration](https://tryhackme.com/room/adenumeration)
- [Try Hack Me - Lateral Movement and Pivoting](https://tryhackme.com/jr/lateralmovementandpivoting)
- [Try Hack Me - Exploiting Active Directory](https://tryhackme.com/room/exploitingad)
- [Try Hack Me - Post-Exploitation Basics](https://tryhackme.com/room/postexploit)
- [Try Hack Me - HoloLive](https://tryhackme.com/room/hololive)
- [Try Hack Me - Throwback Network Labs Attacking Windows Active Directory](https://tryhackme.com/network/throwback)
- Pentest Report
- [Hack The Box Academy - Documentation & Reporting](https://academy.hackthebox.com/course/preview/documentation--reporting)
## Machines List
As you go through the list of machines, keep in mind the changes that occurred in the exam and disregard what came out of the exam recently. [PEN-200 (PWK): Updated for 2023](https://www.offsec.com/offsec/pen-200-2023/)
- [Machine List - vulndev](https://vulndev.io/machine-list/)
- [TJ_Null's OSCP Prep - Youtube](https://www.youtube.com/watch?v=2DqdPcbYcy8&list=PLidcsTyj9JXK-fnabFLVEvHinQ14Jy5tf)
- [HackTheBox - Active Directory machines(OSCP) - Youtube](https://www.youtube.com/watch?v=jUc1J31DNdw&list=PLIU37Kps3dWApq77TnChQ52clmau8DfZA)
- [Hack the Box - Active Directory - Youtube](https://www.youtube.com/watch?v=H9FcE_FMZio&list=PLrmSJpHp5WGg4sUndkYBg8B5qO2COSxS4)
- [Vulnhub OSCP pathway training - Youtube](https://www.youtube.com/watch?v=LRO9KIDv_DQ&list=PLV_npv_S1L938Gal4XNiUfmHjUFNLq4rc)
- [Beco do Exploit - Hack 30 machines in 30 days! - Youtube](https://www.youtube.com/watch?v=xnCS8fYfrjs&list=PLHBDBcFA_l_WBcUJWf8cp5BaPsUkquRQU)
-> Platforms
- [PEN-200 (PWK)](https://www.offsec.com/courses/pen-200/)
- [PG Practice](https://www.offsec.com/labs/individual/)
- [Hack The Box](https://www.hackthebox.com/)
- [Try Hack Me](https://tryhackme.com/)
- [Vulnhub](https://www.vulnhub.com/)
## Overview and Articles
I decided to put only recent overviews, due to the changes that occurred in the exam.
"Since Buffer Overflows will no longer be a part of the course material, they will also be removed from the exam body of knowledge and no longer part of the exam." [PEN-200 (PWK): Updated for 2023](https://www.offsec.com/offsec/pen-200-2023/)
- [OSCP 2023 version — A Small write-up on preparation and my exam experience - Neelamegha Kannan S](https://medium.com/@kannnannmk/oscp-2023-version-a-small-write-up-on-preparation-and-my-exam-experience-55c31d543d17)
- [Overview OSCP - rodolfomarianocy](https://rodolfomarianocy.medium.com/overview-oscp-9bb7c6609cb5)
- [The road to OSCP in 2023 - Thexssrat](https://thexssrat.medium.com/the-road-to-oscp-in-2023-ed88f695f349)
- [Beginner's To OSCP 2023- Daniel Kula](https://infosecwriteups.com/guide-to-oscp-2023-37c0aea0dec0)
- [OSCP Reborn - 2023 Exam Preparation Guide - johnjhacking](https://johnjhacking.com/blog/oscp-reborn-2023/)
- [OffSec OSCP Review & Tips (2023)- James Billingsley](https://www.linkedin.com/pulse/offsec-oscp-review-tips-2023-james-billingsley/)
- [2023 OSCP STUDY GUIDE (NEW EXAM FORMAT) - JOHN STAWINSKI IV](https://johnstawinski.com/2022/10/09/oscp-2023-study-guide-new-exam-format/)
- [The Journey to Becoming an OSCP - 0xBEN](https://benheater.com/journey-to-oscp/)
- [Exame OSCP - Jornada e Dicas - Jonatas Villa Flor](https://decriptosec.com/oscp-review/)
- [OSCP — Cracking The New Pattern - Jai Gupta](https://infosecwriteups.com/oscp-cracking-the-new-pattern-6c4f1c9e2409)
## Template Report
- [OSCP Exam Report - OffSec](https://www.offensive-security.com/pwk-online/OSCP-Exam-Report.docx )
- [OSCP Exam Report Template Markdown - noraj](https://github.com/noraj/OSCP-Exam-Report-Template-Markdown)
## Exam Guide
- [OSCP Exam Guide - OffSec](https://help.offsec.com/hc/en-us/articles/360040165632-OSCP-Exam-Guide)
---
Good preparation ;)
