Search for a command to run...
Series
OSCP Toolkit is an expanding Hack2Harden series built around the tools and workflows I actually relied on while preparing for and passing the OSCP. Each chapter focuses on a specific job such as enumeration, web testing, Active Directory, pivoting, credential attacks, and privilege escalation, with clear commands, practical reasoning, common mistakes, and straightforward guidance designed for real use in labs and exam prep.
The offensive security tools I actually relied on while preparing for and passing OSCP, organized by the job they solve. Hey everyone. I just officially passed the OSCP, and now that I'm on the other
How I actually use Ligolo-ng to pivot: the mental model, the minimal workflow to get a working tunnel, and the listener, file transfer, and troubleshooting workflows for when you need more. This is th
The Active Directory Swiss Army Knife If Ligolo-ng is the tool I want ready the second I need to pivot, NetExec is the tool I want ready the second Active Directory shows up. NXC is one of the tools I
You have a foothold. You ran NetExec, validated a credential, and watched NXC print that green [+]. Good. Now what? Now you're standing in a domain with one low-priv account and no idea where it can t
Executing the Active Directory attack paths BloodHound finds, from a Linux box. What bloodyAD is, and where it fits BloodHound is very good at one thing: showing you what's possible in an Active Direc
