OSCP Training

• Fundamentals of Kali Linux
• Brief Introduction to Penetration Testing
• VPN Lab Network Access- Internally
• Brief about Domains- Sandbox. local & MegaCorpone.com
• Knowing PWK Reports
• About Student Forum of Offensive Security
• In brief about- PWK VPN Labs
• Control Panel & Reverts
• Reporting methods
• About Client Machines(CM)
• About KVM-Kali Virtual Machine

• Buffer Overflows - Introduction
• Know about - x Architecture
• About Buffer Overflowing
• Example of Vulnerable Code
• Code Navigation
• Introduction to Windows Buffer Overflows
• Vulnerability discovery
• The exploitation of Windows Buffer overflows
• Learn about DEP, CFG, and ASLR
• Reproducing the Crash
• EIP Management
• Introduction to Linux Buffer Overflows
• Learn about DEP, CFG, and ASLR
• Reproducing the Crash
• EIP Management
• Locating Shellcode Space
• Bad Characters verification
• Execution Flow Diversion
• Locating Return Address
• Shellcode production using Metasploit
• Obtaining Shell
• Boosting Exploit

• Know about Arguments & Variables
• Statements (if, else,if-else)
• Loops & Functions
• Logical Operations in Boolean (BLO)
• PowerShell- File Transfer & Reverse Shells
• About Bind Shells
• About Powercat
• Powercat- reverse shells, bind shells & file transfers
• About Netcat & Socat
• Fundamentals of Wireshark
• Running Wireshark
• Learn about Filter types
• Learn about TCP dump

• Bash Environment & its Variables
• Completion of Tab
• Tricks related to Bash History
• File redirection
• Redirect to the Latest File
• Learn - Piping system
• Redirect to the Existing/Current File
• Redirecting the STDERR(Standard Error)

Part-01 Search Text and OperateThrough Commands

• grep, sed, cut, & awk commands

Part-02: Monitoring - Files & Commands

Part-03: Modifying the Bash Environment

• Personalize Bash history and Persistent bash

Part-04: Commands for File Downloading

• curl, axel, wget

Part-05: Learn about Process Handling

• Know the background process & manage it
• Manage jobs

Part-06: Learn about File Editing

Part-07: Comparison of Files using commands

• Diff, Comm, and Vimdiff commands

• Researching & Collecting Client Data- Passive & Active
• Extensive use of HTML Apps
• Learn about HTA Attack Action
• Exploring Complete MS Office
• MS Office Installation, Use MS Word Macro, Avoid Protected View

• Web Exploits Fixation
• Memory Corruption Exploits Fixation

Part-01- Active Information Collection

A) Enumerating DNS

• DNS Server interaction
• Zone Migrations
• Brute Force- Forward & Reverse lookup
• Lookup Automations
• Kali Linux Tools

B) Scanning the Port

• TCP & Nmap Scanning

C) Enumerating SMB

• NetBIOS Service- Scanning
• Nmap Scripts of SMB NSE

E) Enumeration of SMTP & SNMP

Part-02- Passive Information Collection

• Know about Website Scanning
• Basics of Netcraft
• Recon-ng
• Learning about Google Hacking
• Open-Source Code
• SSL Server Test & Pastebin
• Tools related to Social Media
• Getting User Information
• Know about Information Collection Frameworks

• File transfers using Windows Hosts
• Windows Uploads & Downloads
• Using Windows Script Language
• Issues with the transfer of attack-tools
• Pure-FTPd installation process

• Offline Resources
• Online Resources

• Enumerating Web Apps
• Reviewing- Web URLs, Sitemap, and Web Page Content
• Finding Web-based vulnerabilities
• CSS- Cross site-scripting & SQL Injection
• Using Admin Consoles
• Using Web App Evaluation Tools- DIRB, Burp Suite

• About Antivirus Software and its uses
• Identification of Malware/ Malicious Code
• Different methods of locating malware
• Avoiding Detection of Antivirus

• Wordlists - Standard & Brute-force
• Using Password Hashes
• Recovering and Cracking- Password hashes
• Approaches of Common Network Service(CNS) Attacks

• Collecting Information-Manual & Automated Enumeration
• Windows Privilege Escalation-Instances
• Learn about Windows Privileges
• Levels of Integrity in Windows Privileges
• About UAC- user access control
• About Insecure File Consent
• Know about Linux Privileges
• Escalation of Linux Privileges
• Kernel Vulnerabilities and Insecure File Consent

Part-01: About SSH Tunneling

• Forwarding ports- local, remote, dynamic

Part-02: Forward Port- RINETD

Part-03: NETSH

Part-04: In-depth inspection of Packet - HTTP tunneling

• PowerShell-Installation, SetUp, and using it
• PowerShell Modules
• PowerShell Credentials & Escalation of Privilege
• Awareness about conditions
• Moving Sideways

Part-01: Setting Up Metasploit & its User Interface

• Learning Metasploit Framework Syntax
• Accessing Metasploit Database

Part-02: Developing own modules of MSF

Part-03: Exploiting Modules

Part-04: Automating Metasploit

Part-05: Payloads in Metasploit

• Executable & Meterpreter Payloads
• Staged & Non-Staged Payloads
• Knowing about Client-side Attacks
• More Advanced Features

Part-06: Metasploit Post-Exploitation Process

• Post-Exploitation - features & modules
• Process of Migration
• Revolving MSF

• Enumeration of Public Network

Part-01: Focusing on Database

• Database Enumeration & Exploitation

Part-02: Focusing on Poultry

• Exploitation & Enumeration
• Post-Exploitation Enumeration
• Exploiting Unlisted Search path

Part-03: Exploitation of Domain Controller

Part-04: Re-Targeting Database

• Exploitation
• Post-Exploitation Enumeration
• Secure Reverse Tunnel Development

Part-05: Application Server’s In-depth Enumeration

• Inquiring Database Credentials
• In-depth Post Exploitation

Part-06: Targeting Jenkin’s Server

• Exploitation of Jenkins
• Post-exploitation Enumeration
• Enumeration of App & Privilege 

Part-07: Enumeration of Internal Network

• Basics of Active Directory

Part-01: Enumeration of AD

• Traditional & Modern Approach
• Solution for Nested Groups
• Enumeration through Names of Principle Service (SP)

Part-02: Determination of AD

• Syncing Domain Control (DC)

Part-03: Authenticating AD

• NTLM
• Kerberos
• Guessing Password
• Attacks on Service Account

Part-04: Sideways Movement of Active Directory

• Allocated CO Model (Component object)
• Ticket Passing
• Passing and Overpassing the Hash