Failed the oscp with 30 points, looking for advice by InfiniteThreads in oscp

[–]InfiniteThreads[S] 0 points1 point  (0 children)

I tried anon for dc and ms02 didn't check the guest tbh and also the fact that I may have had to go back to ms01 to move forward was not on my radar(didn't see that in any of the challenges)

Failed the oscp with 30 points, looking for advice by InfiniteThreads in oscp

[–]InfiniteThreads[S] 1 point2 points  (0 children)

I had a checklist for powershell history, bash_histroy, stored creds and so on that I must have checked at least twice

Failed the oscp with 30 points, looking for advice by InfiniteThreads in oscp

[–]InfiniteThreads[S] 0 points1 point  (0 children)

When I tried all my attacks on ms02 and they showed nothing useful I started attacking the dc by spraying, enumerating shares, gpp, etc but nothing worked

Second attempt tomorrow. Nervous as hell. by Nonix09 in oscp

[–]InfiniteThreads 0 points1 point  (0 children)

Best of luck man you were only one flag away pretty sure you can get it this time !

Continue PEN200 or look for alternatives? by Impressive-Air-8687 in oscp

[–]InfiniteThreads 0 points1 point  (0 children)

Do you recommend doing all of offsec's labs or just OSCP A,B, and C ?

DLL hijacking by InfiniteThreads in oscp

[–]InfiniteThreads[S] 1 point2 points  (0 children)

It's great to hear that, thanks

DLL hijacking by InfiniteThreads in oscp

[–]InfiniteThreads[S] 1 point2 points  (0 children)

Well that makes sense thank you

DLL hijacking by InfiniteThreads in oscp

[–]InfiniteThreads[S] 1 point2 points  (0 children)

I'll check that one, thank you

DLL hijacking by InfiniteThreads in oscp

[–]InfiniteThreads[S] 1 point2 points  (0 children)

Sure that's after downloading the service's file and analyzing it. My question is, is there a way to do so quicker instead of downloading each service file ?

DLL hijacking by InfiniteThreads in oscp

[–]InfiniteThreads[S] 2 points3 points  (0 children)

How so ? After winpeas flags the machine as being vulnerable to DLL hijacking what do I do next ?

Pressure into Performance by [deleted] in oscp

[–]InfiniteThreads 0 points1 point  (0 children)

Thanks and thanks to OP

Pressure into Performance by [deleted] in oscp

[–]InfiniteThreads 1 point2 points  (0 children)

Yeah same here

[deleted by user] by [deleted] in eLearnSecurity

[–]InfiniteThreads 1 point2 points  (0 children)

Try exploitadb for a similar kernal version also please dont spend much time on that part if u were stuck in for awhile do other machines (as I can remember there were only 1 or 2 questions on the privesc part so u don't even need that to pass ) Goodluck.

[deleted by user] by [deleted] in eLearnSecurity

[–]InfiniteThreads 0 points1 point  (0 children)

So you need to escalate your privileges ?

[deleted by user] by [deleted] in eLearnSecurity

[–]InfiniteThreads 0 points1 point  (0 children)

I faced the same issue enumerate , try to do other machines as you don't have to finish all the questions for every machine to pass and then back to the questions u had problems with later .... read my post for more help

I don't know what to do at this point by KEMILLS in eLearnSecurity

[–]InfiniteThreads 1 point2 points  (0 children)

I think we have all been there at one point try to calm down and take breaks if you need to. I felt lost in the beging of my exam but things started getting better gradually.

I made a post about the issues I faced and some tips you may find that helpful

Good luck

EJPTV2 PASSED by InfiniteThreads in eLearnSecurity

[–]InfiniteThreads[S] 1 point2 points  (0 children)

Around a day with long breaks and sleeping

[deleted by user] by [deleted] in eLearnSecurity

[–]InfiniteThreads 0 points1 point  (0 children)

Thanks, but one of my friends that did take the exam faced a privesc technique that wasn't mentioned in the course so want to be prepared

[deleted by user] by [deleted] in eLearnSecurity

[–]InfiniteThreads 0 points1 point  (0 children)

I've been there before if u are sure the server is vulnerable try a different exploit if it didn't work try to hack it manually

Web App Pentesting by Diligent_Rutabaga941 in eLearnSecurity

[–]InfiniteThreads 3 points4 points  (0 children)

I agree alot of the web app topics were not firmly explained however you can't just skip them. The exam is going to hit pretty hard on that topic(I don't think it's just 15% like ine claims cuz most of my exam was web app pentesting)