Tuesday, 21 March 2023

OSCP / OSWP Certificate Pentests - Intro

Information

  • OSCP
    • Requires information gathering
    • Web vulnerabilities version checks
    • Bypass specific tweak flawed
    • Knowledge of exploiting flaws
  • OSWP
    • Requires WiFi pentest techniques
    • Tools for WiFi capture traffic
    • Exploiting vulnerabilities in WiFi
    • Tools cracking hashes found

Exploit

  • OWASP Top 10 knowledge
    • SQL inject
    • Cross site script
    • Local file include
    • Remote file include
    • Information gather files
  • OSCP syllabus knowledge
  • OSWP syllabus knowledge
  • Kali Linux tools usage
    • Nikto
    • Dirb
    • Metasploit
    • Burpsuite Free Edition
    • NMap

No comments:

Post a Comment

Friday Fun Pentest Series - 19 - Self Stored XSS - acp2sev7.2.2

Description - It was found that the application had problems around sanitizing and output encoding correctly, leading to Self Stored XSS. Se...