Discover and read the best of Twitter Threads about #pwk
Most recents (1)
initinfosec's #PWK / #OSCP survival tips/thoughts. Thread of tips/tricks to hopefully help in PWK/OSCP:
caveat emptor:
* i'm a scrub, trust but verify?
* none are novel/new, YMMV
* can only speak to my own exp
* in no particular order
* added to/updated at random
GL;HF
1/x
caveat emptor:
* i'm a scrub, trust but verify?
* none are novel/new, YMMV
* can only speak to my own exp
* in no particular order
* added to/updated at random
GL;HF
1/x
RCE to shell:
In OSCP world, usually the time to dig in, if you truly have RCE, just need to be clever and creative.
For rev shells, see above. Try common ports or ones on target likely to be allowed by FW.
1/x
In OSCP world, usually the time to dig in, if you truly have RCE, just need to be clever and creative.
For rev shells, see above. Try common ports or ones on target likely to be allowed by FW.
1/x
That doesn't work? Try URL-encoding and/or bash -c 'rev_shell_cmd' - redirection can get weird.
That doesn't work? Try alt methods - bind shell? look for creds or SSH keys for users? Upload a webshell (i like github.com/WhiteWinterWol…) for easier time working.
2/x
That doesn't work? Try alt methods - bind shell? look for creds or SSH keys for users? Upload a webshell (i like github.com/WhiteWinterWol…) for easier time working.
2/x
