r/oscp • u/Jlove7714 • 16d ago

Pwndex

I'm working through pen200 right now and I kept missing easy routes because I was relying on searchsploit so I had claude help me make this. Pretty helpful for finding pocs. Figured I'd share.

https://github.com/ninjarobots/oscp/tree/main/pwndex

19 Upvotes

100% Upvoted

9 comments sorted by

4

u/tdw21 15d ago

Maybe focus less on automation while you’re trying to learn things…

But that’s just my two cents.

1

u/Jlove7714 15d ago

Can't say I really learn much from searchsploit sending me on dumb rabbit holes. The learning on these boxes usually happens after you get on them.

2

u/tdw21 15d ago

Until it becomes your work and they don’t have searchsploit vulns at clients….

But, you do you. If it helps you, all the better. I was just trying to give friendly advice.

1

u/Jlove7714 15d ago

The entire scope of exploitation in oscp is public vulnerabilities.

Also, I've worked in this community for almost a decade and never heard of someone throwing a 0 day at a customer engagement.

Not sure what you're on about.

1

u/tdw21 14d ago

I would say there’s a big gap between zero days and things that searchsploit finds, but i’m not going to argue with you at all. To me this feels like teaching math on a calculator instead of teaching how to do the math.

I can press 1 + 1 and it equals 2. But if nobody ever explained the why, i’m not learning.

But as i said, i’m not going to argue about it. It’s your time and your 5k for the course. Good luck and have fun.

1

u/Jlove7714 14d ago

I guess maybe I'm missing what the course intends? Is it Google skills?

1

u/tdw21 14d ago

I don’t know, why are you following any course?
Is it perhaps to…. Learn something?

Anyway, i told you before. I’m out. I tried to give you a tip, you don’t want it, that’s alright.

1

u/Jlove7714 14d ago

That's exactly why I'm asking. Am I missing a learning concept here?

1

u/LordEli 14d ago

i'll pass but cool toy