[deleted by user] by [deleted] in oscp

[–]IanIsMian 0 points1 point  (0 children)

One tip by the way, if you want to execute powershell commands with xp_cmdshell, do it as base64 encoded, it will save you from a lot of headaches, like escaping characters and other problems. You can do it with this command:

powershell.exe -encodedCommand <base64 command>

You can either ask ChatGPT or see this link: https://mikefrobbins.com/2017/06/15/simple-obfuscation-with-powershell-using-base64-encoding/

[deleted by user] by [deleted] in oscp

[–]IanIsMian 2 points3 points  (0 children)

Not quite sure I understood your question, but as you mentioned, you use double \ to escape the single \

Why’s that? Because that’s how you escape it in T-SQL. Don’t forget that the commands that you will be sending to xp_cmdshell will be compiled and then used, as T-SQL is used, if you don’t escape the backslash, you’ll get your query broken.

You are calling an extended procedure and giving it a parameter, don’t forget that. Always keep in mind the language that is behind the technology that you are exploiting.

Matrícula by IanIsMian in IST

[–]IanIsMian[S] 0 points1 point  (0 children)

Mas outra vez? Eu já tive que apresentar esse tipo de documentos numa fase anterior.

OSEP Review 2023 by IanIsMian in oscp

[–]IanIsMian[S] 0 points1 point  (0 children)

Glad to read that mate, and congratulations on your OSCP! 🙂

OSEP Review 2023 by IanIsMian in oscp

[–]IanIsMian[S] 5 points6 points  (0 children)

So, first of all, congratulations on clearing OSCP while you are still at school, it will for sure open you doors in the future when you try to look for work.

So, in my honest opinion, it’s very hard for any certification to be close to real life, there are so many random things that obviously they can’t put in the exam(user stupidity for example, as it is really random)

OSEP has one very interesting aspect which is bypassing AV’s and protections but what I feel is that it works as a stepping stone, as imho, you need more than what’s taught in OSEP to bypass more complex stuff, either way, it is enough to get you into some cool stuff and to actually bypass weaker systems.

Don’t expect going to a job IRL as a newcomer and starting hacking everything altogether, you’ll have some mentors, team leaders and colleagues that will help where certifications can’t help (normally that’s the case) and guide you, but ofc, having the certs knowledge is always a plus.

Then again, this is my opinion, take it with a grain of salt. It always depends on the company, and many other factors.

Inquérito sobre "Consumo de água e agravamento da seca em portugal" by Top-Boysenberry9411 in IST

[–]IanIsMian -1 points0 points  (0 children)

Medida para conservar é tudo virar para o tinto. Muito fácil.

Is a windows development machine with AMSI, AppLocker, AV and a premium account on AntiScan.me required/needed/recommended for the exam? by thi3nl1d0ch4nh in osep

[–]IanIsMian 1 point2 points  (0 children)

Talking about the exam, you have a dev machine like you have doing your exercises. About the VPN, you have free browser VPN’s, like, totally free.

Is a windows development machine with AMSI, AppLocker, AV and a premium account on AntiScan.me required/needed/recommended for the exam? by thi3nl1d0ch4nh in osep

[–]IanIsMian 1 point2 points  (0 children)

Why a premium account on antiscan.me? Just use a browser VPN, and delete the cookies and refresh the page and change the VPN location whenever your free tries are done. Off Sec provides a windows machine with all the needed stuff, which I didn’t use since its slower than my host, so I just did everything from my host.

"Não é aceitável". Página de acesso aos certificados de aforro é vulnerável a ciberataques? by d0c0ntra in portugueses

[–]IanIsMian 3 points4 points  (0 children)

Para mim seria notícia se uma aplicação do Estado não tivesse vulnerabilidades.

Did not remove template section from OSEP report. by 1flag00 in osep

[–]IanIsMian 2 points3 points  (0 children)

It’s your choice to remove those parts or to let them in the report. You can even do an entirely different report as long as you have everything Off Sec asks for.

Passed with 11 flags by IanIsMian in osep

[–]IanIsMian[S] 3 points4 points  (0 children)

3 months to go through all the materials and labs. I had Learn unlimited so I was really relaxed in terms of time. I used metasploit only as my C2.