refabr1k's Pentest Notebook

Hello! refabr1k is my handle and I'm a pentester. I originally created this for my OSCP prep, but now I use this note book as reference when I'm performing pentesting. Feel free to use for your gain!

refabr1k's Pentest Notebookrefabr1k's Pentest Notebook

:bulb: Use the search function to look for a command.

Must read

• Windows Privilege Escalation - https://www.fuzzysecurity.com/tutorials/16.html
• Linux Privilege Escalation - https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/
• hakluke's OSCP guide pt. 1 - https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-1-is-oscp-for-you-b57cbcce7440
• hakluke's OSCP guide pt. 2 - https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-2-workflow-and-documentation-tips-9dd335204a48
• hakluke's OSCP guide pt. 3 - https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-3-practical-hacking-tips-and-tricks-c38486f5fc97
• Abatchy's OSCP guide - https://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob
• TJnull's OSCP study guide - https://www.netsecfocus.com/oscp/2019/03/29/The_Journey_to_Try_Harder-_TJNulls_Preparation_Guide_for_PWK_OSCP.html
• James Hall's OSCP Prep - https://411hall.github.io/OSCP-Preparation/
• KongWenBin OSCP Review - https://kongwenbin.wordpress.com/2017/02/23/officially-oscp-certified/

Must do

• TJnull's HTB and Vulnhub machines - https://www.netsecfocus.com/oscp/2019/03/29/The_Journey_to_Try_Harder-_TJNulls_Preparation_Guide_for_PWK_OSCP.html#vulnerable-machines
• Georgia Weidman's Cybrary Pentest Course (Free!) - https://www.cybrary.it/course/advanced-penetration-testing/
• OverTheWire: Bandit linux challenges - https://overthewire.org/wargames/bandit/
• Windows/Linux Privesc Workshop (lpeworkshop) - https://github.com/sagishahar/lpeworkshop
• Metasploit Unleashed - https://www.offensive-security.com/metasploit-unleashed/
• Try harder

Must use

• SecLists wordlists - https://github.com/danielmiessler/SecLists
• PentestMonkey cheatsheet - http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet
• PayloadsAllTheThings cheatsheet - https://github.com/swisskyrepo/PayloadsAllTheThings
• OSCP Prep Discord Channel - https://discord.gg/2AG6TCm
• SecWiki windows kernel exploits - https://github.com/SecWiki/windows-kernel-exploits
• AutoRecon.py - https://github.com/Tib3rius/AutoRecon
• OBS Recorder for OSCP EXAM - https://obsproject.com/