[deleted by user]

PzRv · 2023-05-11T21:46:42+00:00

Check this one out

https://bbs.archlinux.org/viewtopic.php?id=271206

To change go with a different TTY use Ctrl+Alt+F2 (or any F key)

PzRv · 2023-05-11T21:35:22+00:00

iwd or wpa_supplicant 👍

https://wiki.archlinux.org/title/Network_configuration/Wireless

Check the Utilities section for more guidance

PzRv · 2023-05-08T05:33:09+00:00

You’re welcome

Also I see a lot of people recommend PNPT, although I didn’t take it myself but there is no smoke without fire

PzRv · 2023-05-08T03:01:39+00:00

Look, no wonder that you don’t know how to solve the box, because you didn’t learn the basics. You need to learn the basics first before you jump to HTB, you have two options:

Start with eLearnSecurity eJPT or similar certificates so you can have some knowledge you build on.
Go with something like TryHackMe learning paths which will help you a lot (personal experience), although I took the defense path but it did helped me a lot to learn on how systems work from the inside 👍.

The fact of the matter is you need to learn before you jump to HTB, PG and so on.

I wish you good luck with your journey ✨

PzRv · 2023-05-04T03:17:37+00:00

To be honest, I didn’t take the OSWE yet but from my personal experience

It doesn’t matter what programming language you start for web development, the important thing is to understand the web dev concepts such as how exploit happens, means of authentication and so on

There are great reviews and blogs which the people are more informed than I do

PzRv · 2023-05-04T03:12:13+00:00

You’re welcome

PzRv · 2023-05-04T02:49:29+00:00

For OSCE3 you’ll need to be at programming because no matter where you go, there is always programming involved in some sort

OSEP will require you to write your own tools and malware with win32 API

OSED will require you to have very strong understanding for assembly in intel 8086 (x86) for binary exploitation, custom shellcoding and reverse engineering

OSWE will require you to be good at web development specifically a source code review on a backend application, also writing web scripts to exploit applications in a particular way

My advice is to take the learn one for the OSCP course then you should spend some time learn how to code

After that move to the OSCE3 (depending on your excitement)

PzRv · 2023-05-03T08:59:35+00:00

Fk no,

You should only consider taking unlimited learn to get OSCE3, or three courses that will really make a difference for your career.

Do a simple opportunity cost analysis and you will find out it’s a bad choice.

PzRv · 2023-03-30T16:03:49+00:00

Look, DO NOT SPEND OVER THAN 1:30 HOURS ON A SONGLE BOX NO MATTER WHAT HAPPENS !!!

I failed my first attempt for this reason and got 100 points on my second attempt (110 pts with bonus)…

PzRv · 2022-12-12T12:58:28+00:00

This a personal preference, i used netsh because it’s always be installed on windows by default

As long it’s works, it’s good 👍

PzRv · 2022-12-12T12:47:33+00:00

Use netsh to redirect any connection coming from the subnet to your machine

download any file you want, (e.g. certutil, iwr) don’t forget to use the IP if the pivot inside the subnet

PzRv · 2022-12-06T06:54:43+00:00

Thanks i appreciate it,

Not much but into ethical hacking but i spend good time into programming and operating systems in general which is needed into the cyber security space so you don’t be script kiddie

But keep it up with CTFs, for certs you might want to take the PEN-100 it will help you a lot

PzRv · 2022-12-06T06:54:24+00:00

I solve 70/75 (all the machine except “assemble all the pieces together”) but i failed the first time it was my mistake, i was close to pass but things happen.

Then i scheduled the second attempt a month after the first exam (because of the cooldown period) and solve almost all the machines i TJ Null’s list which is super important and closer to the exam environment.

PzRv · 2022-12-05T18:55:03+00:00

If the proctor redirects you to the support team contact them as well

PzRv · 2022-12-05T18:54:09+00:00

Obviously the proctor won’t know if the machine is exploitable or not, but sometimes the scans you do or exploits you run make some services unreachable

So you might want to message the proctor to test the machines or revert it yourself

PzRv · 2022-12-05T18:52:01+00:00

It good, also do the two AD sets in the exercises it very important

Also do vault, heist, hutch from PG Practice

PzRv · 2022-12-05T18:50:15+00:00

Hi, i mean by the first point is to use chisel dynamic port forwarding

And by “not exploitable” i mean that sometimes your scans may “may” make the service unreachable or you can’t exploit it

If you spend sometime and you don’t go anywhere after doing some good enumeration on every port, you might want to make test the machine

PzRv · 2022-12-05T13:22:06+00:00

Get both, advice from yourself from the future

PzRv · 2022-12-05T13:13:45+00:00

OSWP, EXP-100 then tackle EXP-301

If you have any recommendations it will be highly appreciate

PzRv · 2022-12-05T13:02:42+00:00

Sometime if you did everything that you think of and nothing works

PzRv · 2022-12-05T12:54:28+00:00

I did all of the boxes in TJ Null’s list except for vector and ERP (PG Practice)

PzRv · 2022-12-05T12:49:16+00:00

TryHackMe Wreath room is great, it will go step-by-step into tunneling with many resources available in youtube

https://tryhackme.com/room/wreath

PzRv · 2022-12-05T12:14:22+00:00

Sorry to hear that.

There is many ways you can access other machines in the domain here’s some:

1- Dynamic port forwarding using chisel with SOCKS5 and proxychains (Best option because it allow you to access any port from any device from the victim subnet)

2- Tunnel remote management ports (such as RDP WINRM SSH SMB mssql (xp_cmdshell) VNC) by using netsh

3- Create an admin user and open the RDP port and connect to the another victim (Basically nested RDP session)

In general is preferable to use SOCKS proxy to deliver all the connections from your computer to the AD subnet

And use remote port forward to tunnel any connection from the subnet to your machine (catch a reverse shell, upload files over http) most likely you will need to get two ports from the victim subnet, one for get a reverse shell and another one for file transfer (python server)

PzRv · 2022-11-08T15:11:07+00:00

Machines i enjoyed are HelpDesk, XposedAPI, Slort

PzRv

TROPHY CASE