Pentest & OSCP Index
Where do I look?
| I need to… | Go to |
|---|---|
| Know what to run first on a new box | Enum-checklist |
| Get unstuck / out of ideas | When-stuck |
| Turn a dumb shell into a real TTY | Shell-stabilization |
| Scan ports | Nmap |
| Fuzz web dirs / vhosts | Web-enum |
| Enumerate DNS / find subdomains | DNS-subdomain |
| Attack a specific port/service | Services (by port) below |
| Exploit a web app bug | Web attacks below |
| Crack hashes / spray passwords | password-attacks, hash-cracking |
| Build a payload / catch a shell | payloads-shells |
| Move files to/from a target | file-transfer |
| Run an exploit / framework / evade AV | exploitation |
| Escalate privileges | linux (Linux) · windows (Windows) |
| Pivot through a network | pivoting |
| Attack Active Directory | Active Directory below |
| Find a tool/wordlist/link | 99-resources |
01 — Methodology
- Enum-checklist — run-these-first routine
- When-stuck — the “Feeling Stuck” list
- Shell-stabilization — TTY upgrade & listeners
02 — Recon
Services (by port)
- 21-ftp — FTP
- 22-ssh — SSH
- 25-143-smtp-imap — SMTP / IMAP / POP3
- 80-443-http — HTTP / HTTPS
- 139-445-smb — SMB
- 161-snmp — SNMP
- 389-ldap — LDAP
- 3306-mysql — MySQL
- 5432-postgres — PostgreSQL
- Kerberos (88) → see kerberos in AD
Web attacks
- sqli · lfi-traversal · cmd-injection · file-upload
- ssti · jwt · misc-web (XPath, SSRF, XSS, deserialization) · wordpress
05 — Access
- password-attacks · hash-cracking · payloads-shells · file-transfer
- exploitation (public exploits, client-side, AV evasion, Metasploit, BOF) · pivoting
06 — Privilege Escalation
Active Directory
- methodology · kerberos · bloodhound · tools
99 — Resources
- 99-resources — wordlists, links, scratch commands
Structure notes
I added three files beyond your outline so nothing was dropped: misc-web (XPath/SSRF/XSS/deserialization), exploitation (public exploits, client-side, AV evasion, Metasploit, Buffer Overflow archive), and pivoting (socat/SSH/chisel/ligolo/dnscat). The Windows command reference lives at the top of windows.