ZeroBoxCPTS and OSCP study notes
Short field-manual notes with the commands you need during a lab or exam.
01. Network Discovery & Port Scanning Guide
Master network port scanning and host enumeration using Nmap, Rustscan, SNMP, and SMB discovery techniques.
02. Web Content Discovery & Directory Fuzzing
Exhaustive web path discovery, virtual host routing, parameter fuzzing, and CMS audit methodologies.
03. Web Application Exploitation & Injection
Core web exploitation vectors: SQL Injection, Local File Inclusion to RCE, JWT manipulation, and GraphQL introspection.
04. Linux Privilege Escalation Master Guide
Comprehensive Linux privilege escalation checklist: SUID binaries, Linux capabilities, sudo misconfigurations, cron wildcards, and container escapes.
05. Windows Local Privilege Escalation & LOLBAS
Local Windows privilege escalation vectors: Token impersonation (Potato exploits), Unquoted Service Paths, AlwaysInstallElevated, and LOLBAS.
06. Active Directory Attack Paths & Domain Enumeration
Domain mapping and attack path analysis using SharpHound, BloodHound, NetExec, and Impacket secretsdump.
07. Kerberos Exploitation: AS-REP & Kerberoasting
Kerberos ticket attacks: AS-REP Roasting for preauth-disabled accounts and Kerberoasting Service Principal Names.
08. Active Directory Certificate Services (AD CS) Abuse
Active Directory Certificate Services (AD CS) misconfiguration discovery and exploitation using Certipy (ESC1-ESC13).
09. Pivoting, Tunnels & Lateral Movement
Deep network pivoting: Ligolo-ng TUN routing, Chisel SOCKS5 reverse proxies, SSH port forwarding, and Proxychains routing.
10. Password Cracking & Hash Identification
Offline password recovery: Hashcat modes cheat sheet, John the Ripper formats, and dictionary mutation rules.
11. Offensive File Transfers Across Restricted Networks
Reliable stagers and file transfer techniques for Windows and Linux hosts with egress restrictions.
12. Interactive TTY Stabilization & Terminal Spawning
Stabilizing non-interactive reverse shells into fully featured TTY sessions with tab-completion and terminal window resize support.