refabr1k's Pentest Notebook

Hello! refabr1k is my handle and I'm a pentester. I originally created this for my OSCP prep, but now I use this note book as reference when I'm performing pentesting. Feel free to use for your gain!

refabr1k's Pentest Notebook | refabr1k's Pentest Notebookrefabr1k.gitbook.io

:bulb: Use the search function to look for a command.

Must read

• Windows Privilege Escalation - https://www.fuzzysecurity.com/tutorials/16.html

• Linux Privilege Escalation - https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/

• hakluke's OSCP guide pt. 1 - https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-1-is-oscp-for-you-b57cbcce7440

• hakluke's OSCP guide pt. 2 - https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-2-workflow-and-documentation-tips-9dd335204a48

• hakluke's OSCP guide pt. 3 - https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-3-practical-hacking-tips-and-tricks-c38486f5fc97

• Abatchy's OSCP guide - https://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob

• TJnull's OSCP study guide - https://www.netsecfocus.com/oscp/2019/03/29/The_Journey_to_Try_Harder-_TJNulls_Preparation_Guide_for_PWK_OSCP.html

• James Hall's OSCP Prep - https://411hall.github.io/OSCP-Preparation/

• KongWenBin OSCP Review - https://kongwenbin.wordpress.com/2017/02/23/officially-oscp-certified/

Must do

• TJnull's HTB and Vulnhub machines - https://www.netsecfocus.com/oscp/2019/03/29/The_Journey_to_Try_Harder-_TJNulls_Preparation_Guide_for_PWK_OSCP.html#vulnerable-machines

• Georgia Weidman's Cybrary Pentest Course (Free!) - https://www.cybrary.it/course/advanced-penetration-testing/

• OverTheWire: Bandit linux challenges - https://overthewire.org/wargames/bandit/

• Windows/Linux Privesc Workshop (lpeworkshop) - https://github.com/sagishahar/lpeworkshop

• Metasploit Unleashed - https://www.offensive-security.com/metasploit-unleashed/

• Try harder

Must use

• SecLists wordlists - https://github.com/danielmiessler/SecLists

• PentestMonkey cheatsheet - http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet

• PayloadsAllTheThings cheatsheet - https://github.com/swisskyrepo/PayloadsAllTheThings

• OSCP Prep Discord Channel - https://discord.gg/2AG6TCm

• SecWiki windows kernel exploits - https://github.com/SecWiki/windows-kernel-exploits

• AutoRecon.py - https://github.com/Tib3rius/AutoRecon

• OBS Recorder for OSCP EXAM - https://obsproject.com/