Pentesting

Sometimes it can be that simple. I had gained an unprivileged reverse shell via netcat on a Linux host. Besides root, there was one other user. After I had invested several hours in privilege escalation via exploits to no avail, I was on the verge of giving up…

A reverse shell with netcat is unfortunately not interactive. As a result, tools such as sudo, mysql, su etc. are unusable or only usable to a limited extent. If Python is installed on the target system, a terminal can easily be simulated within the Netcat session:

My current status: 5x privileged access, 6x unprivileged access, DEV and IT network unlocked. It is dragging on a bit. The lab is enormous. Sometimes you have a good idea and a bit of luck, so a machine is rooted quickly. On other machines, though, you…

With the OSCP you can use your own lab panel to return servers to their original state (revert). Although you can only revert a limited number of servers per day, it is worth doing so before an attack. Other OSCP students…

My first tally: 1x Windows (privileged access) 5x Linux (unprivileged access) DEV lab unlocked I have read in many write-ups how steep the learning curve with the OSCP is and how extensive the course is. Now I can relate. It is also true that…

The documentation runs to several hundred pages and the video material lasts longer than 5min as well. Not to mention that the exercises in the documentation also take their time. Somewhat impatient, I then tried my hand directly at the lab. That was a mistake. I wasted several…

I signed up for the Penetration Testing with BackTrack (PWB) course, which - if successfully passed - concludes with the Offensive Security Certified Professional (OSCP) certification. After a master’s degree in security management and certifications such as CISSP, CISM…