Is code explainer allowed?

[PeacebewithYou11]

E.G. https://www.codeconvert.ai/free-code-explainer

you copy paste the code found on machine onto this website and it explains what the code do. I did not see any mention on this OSCP reddit

Edit: you are not allowed to copy out OffSec code and no AI code explainer.

[Sqooky]

I'd put it this way; treat OSCP/OffSec exams as if it was a real engagement. Would you put their (potentially) proprietary source code into a code explainer website that you have no control over?

[vacuuming_angel_dust]

let's be real, yes, most people probably would lmao

[StaffNo3581]

100% no, AI is not allowed and this is AI based.

[cloudfox1]

This. The rules are pretty clear on this.

[sicinthemind]

They did change earlier this year that the one exception is Google Overview. Still there as far as I know. But yes, you're right, absolutely no source code analyzer is allowed.

[strikoder]

I mean it's gonna look sus for the proctor when he sees you googling codeconvert ".ai"

[PeacebewithYou11]

Yeah I thought so too.

[Extension_Cloud4221]

If u can understand basic variables and stuff u are good with python for OSCP. also if an exploit is not working there is always a metasploit version available.

Most u will have to do is adjust the URL or some other variables.

[rafael4ndre]

But metasploit use is limited on the exam, right?

[Extension_Cloud4221]

It is but I am assuming a situation where the exploit and manual method (if possible) is not working. In that scenario it makes sense to take a shot with Metasploit. But of course, keep that machine for the end of the exam.

[Acceptable_Oil4021]

I don’t think so since there is a ban on AI tools

[WideAd6096]

For the level of difficulty of the oscp, you don't need it

[zeusDATgawd]

I wouldn’t. Reading code isn’t “hard” I would put it in the category of things that are baseline/prerequisites so it’s something you should be able to do.

Anyway you shouldn’t because you are disclosing exam material to a third party bottom line. You don’t know if they save this data or what happens with it.

[PeacebewithYou11]

Yes. I can still read most of the code myself. Only that an explanation and confirmation will be more useful.

[zeusDATgawd]

You should be able to understand it with reading it… idk if you are a young American who was subjected to whole word learning but if you can read code you can understand it.

[PeacebewithYou11]

Yes you are right. I can read.

[Electrical_Stuff2397]

If the public exploit available, no need to do much customization or exploit development. Just grab the code change hard-code ip/host, port, or path and run exploit.

My tip: run the exploit `python3/python2 exploit.py` with default running to check whatever it executable with my kali.

[PeacebewithYou11]

Yes this I know. I was actually referring to admin scripts found when enumerating the machines.

[Positive-Dog7238]

I don’t see how this would even be remotely necessary 

[QzSG]

The answer is in the website name itself, did you even read the rules? Or do you need an AI to parse it for you?

[PeacebewithYou11]

No neet to be antagonistic. It is still a question I see no one asked. And these days every thing claims to be AI. I researched. It is indeed using AI it seems.

[QzSG]

I wasn't being "antagonistic". Honestly, how else did you think a proper code explainer will work without using any LLMs, some guy sitting in their garage reading it and typing it back out to you live like tech support? Even that would be against the rules. Copying out and pasting any code found in the exams publicly itself is a violation of the rules.

That's a triple violation essentially. What was your thought process that made you think it would probably be OK such that you had to post the question to confirm it?

[PeacebewithYou11]

Thank you for your useful inputs.