As many of you are aware, I am currently ‘trying harder‘ studying for my OSCP in preparation for my exam next month. I have done the labs provided by Offensive Security and now I am going to be focusing on the Hack the Box (HTB) style OSCP boxes (and possibly a pro lab) leading up to my exam. Below is a chart taken from @TJ_Null on Twitter highlighting all the boxes I will be attempting. As I complete each box on the list I will tag it here for an easy reference.

I can say from the reading I have done across the web that I approach these boxes differently than most. I prefer the easiest laziest approach possible and prefer a GUI to a console window. With all that being said ALL these boxes will be done without the help of SQLMap or Metasploit or any other tool not allowed (or one time use) from the exam.

I hope you enjoy!

*Some of the boxes I have completed and haven’t done a guide for (yet!). Also, some of the boxes Nibbles and Arctic gave so much lag/issues they were annoying to complete and I didn’t do proper screenshots.

During my preparation for the OSCP exam I have been coming across a lot of one-off exploits for escalation after the initial foothold. For Windows exploits I found an amazing article HERE by kakyouim which outlines a ton of Windows exploits. I took this article and made a excel file (for my notes) which I have included below. I plan to expand upon it in the future but figured it would be a quick reference for anyone looking. PLEASE visit the original author who took the time to put all this together.