OSCP Documentation Index

Quick Navigation

🌐 Web Exploitation

Complete web attack guides from discovery to exploitation

• SQL Injection (Manual)
• SQL Injection (Code Execution)
• Cross-Site Scripting (XSS)
• Local File Inclusion + Log Poisoning
• Remote File Inclusion
• Command Injection
• Python Command Injection
• Directory Traversal
• File Upload (FileManager)
• File Upload (Non-Executable)
• API Enumeration
• API Pentesting
• API Exploitation
• Grafana Directory Traversal
• WordPress XSS Attack Chain

🪟 Windows Exploitation

Windows-specific techniques and post-exploitation

• Credential Harvesting
• Password Attacks
• Remote Access Methods
• Pivoting Techniques
• Process Injection
• Office Macro Attacks

🐧 Linux Exploitation

Linux privilege escalation and lateral movement

• Privilege Abuse Techniques
• SSH Lateral Movement

🔌 Service Exploitation

Network service enumeration and exploitation

• Nmap Reference
• SMB Enumeration
• SNMP Enumeration
• MSSQL Authentication
• MSSQL Exploitation

🛡️ Evasion Techniques

Bypassing security controls and defenses

• AV Evasion Basics
• AV Evasion Advanced
• AppLocker Fundamentals
• AppLocker Bypasses
• Network Filter Bypasses
• Deep Packet Inspection

⚡ Quick Reference

Cheat sheets and fast lookup guides

• Reverse Shells
• PHP Wrappers
• Phishing Basics
• Phishing & Social Engineering

🏢 Active Directory

Active Directory enumeration and attacks

• AD Enumeration

📝 Lab Notes

Practice machine writeups and exercises

• Exercises
  • Module 9: Web Application Attacks
  • Module 10: SQL Theory and Databases
• Proving Grounds
• HackTheBox
• VulnHub

---

Structure Overview

OSCP/
├── web/                    # All web exploitation (15 files)
├── windows/                # Windows techniques (6 files)
├── linux/                  # Linux techniques (2 files)
├── services/               # Network services (5 files)
├── evasion/                # Defense bypasses (6 files)
├── quick-ref/              # Fast lookups (4 files)
├── active-directory/       # AD attacks (1 file)
├── lab-notes/              # Practice writeups
│   ├── exercises/
│   ├── proving-grounds/
│   ├── hackthebox/
│   └── vulnhub/
├── scans/                  # Scan outputs
├── exploits/               # Custom scripts
└── CLAUDE.md               # Project configuration

---

Quick Access Examples

# Web application testing
cat web/sqli-manual.md
cat web/file-upload-filemanager.md

# Windows post-exploitation
cat windows/credential-harvesting.md
cat windows/lateral-movement.md

# Service enumeration
cat services/nmap.md
cat services/smb.md

# Quick reference during engagement
cat quick-ref/reverse-shells.md
cat quick-ref/php-wrappers.md

# Evasion techniques
cat evasion/av-evasion-advanced.md

---

Usage Workflow

1. Enumeration Phase: Start with services/nmap.md, then specific service guides
2. Web Testing: Check web/ directory for specific vulnerability types
3. Initial Access: Reference quick-ref/reverse-shells.md for payloads
4. Post-Exploitation: Use windows/ or linux/ for privilege escalation
5. Evasion: Check evasion/ if encountering AV/AppLocker/filters
6. Active Directory: Use active-directory/enumeration.md for AD environments

---

Document Standards

Each document contains:

• PURPOSE: What this technique accomplishes
• COMMANDS: Full syntax with flag explanations
• EXPECTED OUTPUT: What success looks like
• TROUBLESHOOTING: Common issues and fixes
• EXAM TIPS: OSCP-specific considerations

All guides are end-to-end: discovery → enumeration → exploitation → completion

---

Contributing

When adding new documentation:

1. Place in appropriate attack vector directory
2. Update this index
3. Include complete command explanations with all flags
4. Add practical examples from labs
5. Include troubleshooting section
6. Focus on OSCP exam applicability