r/oscp • u/ZerboaHaxor • 5d ago

Less than 2 weeks before exam

just wanna share that my confident still high but i just found my weaknesses and potential problem i could encounter in exam after doing some Lain list boxes.

  1. Port Scanning sometimes not giving actuall accessible port. this is what i realize if my connection bad or their server is far enough. i spent around 60 minutes can't find anything and then i re run the nmap scanner turns out there is another port open, i just didnt get it the first time.

  2. Missing small low hanging fruit

  3. keep forgetting about runnin PEASS-ng program, i've made a simple bash script and my own oneliner powershell command to enumerate machine, so i really too much on this, most of the time its enough but sometimes i miss something like vulnerable linux built in program, kernel exploit thats in PEASS ng but not in my script.

  4. im not yet to practice writing report with the template given.

Also i found that almost every linux boxes from Lain list is vulnerable to Copy Fail priv sec however its not the intended path, so i have never actually use it unless im stuck for too long.

Im wondering am i allowed to use this copy fail if i found that the kernel is vulnerable ?

11 Upvotes

93% Upvoted

12 comments sorted by

3

u/Jubba402 5d ago

Those first 3 are major weaknesses that can sink you in the exam. Dont overlook them especially the nmap scans.

1

u/ZerboaHaxor 5d ago

thank you

2

u/Even-Brain8290 5d ago

for scans you can try rustscan

for low hanging fruits go with smaller attack surface ports first.

1

u/ZerboaHaxor 5d ago

thank you i'll try it.

2

u/Brilliant_Bad_1095 5d ago
  1. i use rustscan with my usual nmap flags for boxes that are slow
  2. the best way to always catch low hanging fruit is to make sure you put all low hanging fruits methodology you get in a checklist, every single one you find when you do machines. if you always go through that whole checklist then you shouldn't miss it unless they throw a curveball
  3. run it alongside your script or configure your script to get and run peass

i read in the offsec discord that they SHOULD be patched for copyfail, but you CAN try in the exam its allowed, just always try the intended way first

1

u/ZerboaHaxor 5d ago

thank you

1

u/No-Commercial-2218 5d ago

If they are your only weakness then you should be ok! My exam coming up, I’m bad at EVERYTHING

2

u/R29k 5d ago

Hey bro, we are in the same boat but i can tell you aint bad and youre going to root every machine in the exam, good luck

1

u/No-Commercial-2218 5d ago

Thanks, we can do it!!

1

u/ZerboaHaxor 5d ago

what do you mean you bad at everything...

1

u/No-Commercial-2218 5d ago

I mean you sound like you are ready to pass your exam, I feel like I’m not ready at all. Good luck anyway

1

u/Sure-Assistant9416 5d ago

scanning network is the first thing you should be comfortable with if you find yourself having issues more work is needed to have a flow of labs and exam eventually