0x4d31/awesome-oscpUma lista curada de recursos incríveis do OSCP
# Awesome OSCP [](https://github.com/sindresorhus/awesome) > Uma lista curada de recursos incríveis de OSCP ## Conteúdo - [Recursos](#resources) - [Análises e Guias de OSCP](#oscp-reviews-and-guides) - [Cheatsheets e Scripts](#cheatsheets-and-scripts) - [Tópicos](#topics) - [Buffer Overflow](#buffer-overflow) - [Escalação de Privilégios](#privilege-escalation) - [Active Directory](#Active-Directory) - [Outros Recursos de OSCP](#other-oscp-resources) - [Livros](#books) - [Licença](#license) ## Recursos ### Análises e Guias de OSCP - [Guia Oficial do Exame de Certificação OSCP](https://help.offensive-security.com/hc/en-us/articles/360040165632-OSCP-Exam-Guide) - Guia Definitivo de OSCP do Luke ([Parte 1](https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-1-is-oscp-for-you-b57cbcce7440), [Parte 2](https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-2-workflow-and-documentation-tips-9dd335204a48), [Parte 3](https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-3-practical-hacking-tips-and-tricks-c38486f5fc97)) - [Como se preparar para PWK/OSCP, um guia amigável para iniciantes](https://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob) - [Guia de OSCP do n3ko1](http://www.lucas-bader.com/certification/2015/05/27/oscp-offensive-security-certified-professional) - [Vídeos "Caminho para OSCP" do Jan](https://www.youtube.com/playlist?list=PLyPJ3SHNkjIFITR-Lzsc0XSOBS7JUXsOy) - [PWB e OSCP da Offensive Security - Minha Experiência](http://www.securitysift.com/offsec-pwb-oscp/) (+ alguns scripts) - [Análise do Laboratório e Exame OSCP](https://theslickgeek.com/oscp/) - [Notas de Preparação para OSCP](https://www.jpsecnetworks.com/category/oscp/) - [Um Guia Detalhado de Preparação para OSCP – De Iniciante a OSCP](http://niiconsulting.com/checkmate/2017/06/a-detail-guide-on-oscp-preparation-from-newbie-to-oscp/) - [Minha Luta pela OSCP](https://alphacybersecurity.tech/my-fight-for-the-oscp/) - [O Guia Definitivo de Preparação para OSCP](https://johnjhacking.com/blog/the-oscp-preperation-guide-2020/) - [A Jornada para Try Harder: Guia de Preparação do TJnull para PEN-200 PWK/OSCP 2.0](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html) ### Cheatsheets e Scripts - [Dicas e truques práticos de hacking do Luke](https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-3-practical-hacking-tips-and-tricks-c38486f5fc97) - [Folha de dicas de ferramentas de teste de penetração](https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/) - [Como Passar na OSCP](https://gist.github.com/unfo/5ddc85671dcf39f877aaf5dce105fac3) - [Folha de dicas de reverse shell](https://highon.coffee/blog/reverse-shell-cheat-sheet/) - [Gerador de Reverse Shell](https://www.revshells.com/) - [7 Shells Linux Usando Ferramentas Integradas](https://www.lanmaster53.com/2011/05/7-linux-shells-using-built-in-tools/) - [Windows Exploit Suggester](https://github.com/GDSSecurity/Windows-Exploit-Suggester) - [Linux Exploit Suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester) - [OSCPRepo](https://github.com/rewardone/OSCPRepo) - [Go-for-OSCP](https://github.com/pythonmaster41/Go-For-OSCP) - [Compilação de Pentest](https://github.com/adon90/pentest_compilation) - [Coleção de scripts de OSCP](https://github.com/ihack4falafel/OSCP) ### Tópicos #### Buffer Overflow - [Tutorial de escrita de exploits do Corelan, parte 1: Stack Based Overflows](https://www.corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/) - [DoStackBufferOverflowGood do Justin](https://github.com/justinsteven/dostackbufferoverflowgood) - [Escrevendo Exploits para Sistemas Win32 do Zero](https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2016/june/writing-exploits-for-win32-systems-from-scratch/) - [Buffer Overflows em Windows de 32 Bits Facilitados](https://veteransec.com/2018/09/10/32-bit-windows-buffer-overflows-made-easy/) - [Vídeo de Introdução a Buffer Overflow](https://www.youtube.com/watch?v=1S0aBV-Waeo) - [Wargame Narnia do OverTheWire](http://overthewire.org/wargames/narnia/) #### Escalação de Privilégios - [Fundamentos de Escalação de Privilégios no Windows](http://www.fuzzysecurity.com/tutorials/16.html) - [Vetores Comuns de Escalação de Privilégios no Windows](https://toshellandback.com/2015/11/24/ms-priv-esc/) - [Enciclopédia de Escalação de Privilégios no Windows por Brett Moore](https://www.youtube.com/watch?v=kMG8IsCohHA) - [Level Up! Escalação de Privilégios Prática no Windows por Andrew Smith](https://www.youtube.com/watch?v=PC_iMqiuIRQ) - [Escalação de Privilégios Básica no Linux](https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/) - [Escalação de privilégios no Linux por Jake Williams](https://www.youtube.com/watch?v=dk2wsyFiosg) #### Active-Directory - [Metodologia de Active Directory](https://book.hacktricks.xyz/windows/active-directory-methodology) - [Folha de dicas de exploração de Active Directory](https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet) - [PayloadsAllTheThings AD](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md) - [Atacando Active Directory: 0 a 0.9](https://zer1t0.gitlab.io/posts/attacking_ad/) - [Dicas e truques do PowerView-3.0](https://gist.github.com/HarmJ0y/184f9822b195c52dd50c379ed3117993#file-powerview-3-0-tricks-ps1) ##### Recursos Práticos. - TryHackMe - [Fundamentos de Active Directory](https://tryhackme.com/room/activedirectorybasics) - Fácil - [Fundamentos de Pós-Exploração](https://tryhackme.com/room/postexploit) - Fácil - [Vulnnet Roasted](https://tryhackme.com/room/vulnnetroasted) - Fácil - [Attacktive Directory](https://tryhackme.com/room/attacktivedirectory) - Médio - [raz0r black](https://tryhackme.com/room/raz0rblack) - Médio - [Enterprise](https://tryhackme.com/room/enterprise) - Médio - [Vulnnet Active](https://tryhackme.com/room/vulnnetactive) - Médio - [Zero Logon](https://tryhackme.com/room/zer0logon) - Difícil - [Holo](https://tryhackme.com/room/hololive) - Difícil - [Throwback](https://tryhackme.com/network/throwback) - Fácil - HackTheBox - [Forest](https://app.hackthebox.com/machines/212) - Fácil - [Active](https://app.hackthebox.com/machines/148) - Fácil - [Fuse](https://app.hackthebox.com/machines/235) - Médio - [Cascade](https://app.hackthebox.com/machines/235) - Médio - [Monteverde](https://app.hackthebox.com/machines/223) - Médio - [Resolute](https://app.hackthebox.com/machines/220) - Médio - [Arkham](https://app.hackthebox.com/machines/179) - Médio - [Mantis](https://app.hackthebox.com/machines/98) - Difícil - [APT](https://app.hackthebox.com/machines/296) - Insana - [Dante](https://app.hackthebox.com/prolabs/overview/dante) - Iniciante - [Offshore](https://app.hackthebox.com/prolabs/overview/offshore) - Intermediário - [RastaLabs](https://app.hackthebox.com/prolabs/overview/rastalabs) - Intermediário - [Cybernetics](https://app.hackthebox.com/prolabs/overview/cybernetics) - Avançado - [APT Labs](https://app.hackthebox.com/prolabs/overview/aptlabs) - Avançado - HackTheBox Academy ( PAGO ) - [Introdução ao Active Directory](https://academy.hackthebox.com/module/details/74) - Fundamental - [ActiveDirectory LDAP](https://academy.hackthebox.com/course/preview/active-directory-ldap) - Médio - [ActiveDirectory Powerview](https://academy.hackthebox.com/module/details/68) - Médio - [ActiveDirectory BloodHound](https://academy.hackthebox.com/module/details/69) - Médio - [Enumeração e Ataques de ActiveDirectory](https://academy.hackthebox.com/module/details/143) - Médio - Proving Grounds - [PG-Practice](https://portal.offsec.com/labs/practice) ( PAGO ) * Hutch * Heist * Vault # Outros Recursos de OSCP - [Programa do PWK](https://www.offensive-security.com/documentation/penetration-testing-with-kali.pdf) - [OSCP-Prep-Resources](https://github.com/burntmybagel/OSCP-Prep) - [Favoritos da Offensive Security](https://jivoi.github.io/2015/07/03/offensive-security-bookmarks/) - [O wiki de como obter a certificação OSCP](https://www.peerlyst.com/posts/the-how-to-get-the-oscp-certification-wiki-peerlyst) - [Mina de Ouro de OSCP](http://0xc0ffee.io/blog/OSCP-Goldmine) - [Notas de Estudo de Teste de Penetração](https://github.com/AnasAboureada/Penetration-Testing-Study-Notes) - [VMs Vulnhub Semelhantes à OSCP](https://www.abatchy.com/2017/02/oscp-like-vulnhub-vms) - [Metasploit Unleashed](https://www.offensive-security.com/metasploit-unleashed/) - [Awesome Penetration Testing](https://github.com/enaqx/awesome-pentest) - [Modelo de Relatório de Exame OSCP em Markdown](https://github.com/noraj/OSCP-Exam-Report-Template-Markdown) #### Livros - [Teste de Penetração: Uma Introdução Prática ao Hacking](https://www.amazon.com/Penetration-Testing-Hands-Introduction-Hacking/dp/1593275641) - [The Hacker Playbook 3: Guia Prático de Teste de Penetração](https://www.amazon.com.au/Hacker-Playbook-Practical-Penetration-Testing/dp/1980901759) - [RTFM: Manual de Campo de Red Team](https://www.amazon.com/Rtfm-Red-Team-Field-Manual/dp/1494295504) - [RTFM: Manual de Campo de Red Team v2](https://www.amazon.com/RTFM-Red-Team-Field-Manual/dp/1075091837) - [The Web Application Hacker's Handbook: Encontrando e Explorando Falhas de Segurança (2ª Edição)](https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting-ebook/dp/B005LVQA9S) ## Licença [](http://creativecommons.org/publicdomain/zero/1.0) Na medida do possível, nos termos da lei, Adel "0x4D31" Karimi renunciou a todos os direitos autorais e direitos conexos ou vizinhos sobre esta obra.
