oscp

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

Red Teaming Tactics and Techniques

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

Linux enumeration tool for pentesting and CTFs with verbosity levels

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

OSCP Cheat Sheet

OSWE, OSEP, OSED, OSEE

A curated list of awesome OSCP resources

Free copy of The Cyber Plumber's Handbook - The definitive guide to Secure Shell (SSH) tunneling, port redirection, and bending traffic like a boss.

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

🆕 The Multi-Tool Web Vulnerability Scanner.

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

A curated list of awesome privilege escalation

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.