Reporting

Exam Network

1. Enter all individual IPs

2. Enter all AD IPs (3 machines)

3. Enter private interface Ips for AD if applicable

Service Enumeration

1. Port scan results in tabular format in single record (TCP/UDP)

2. Heading for particular service enumeration, from where we found a potential target software

Initial Access

1. Heading for which attack is exploited

2. Vuln explanation

3. Vuln Fix

4. Severity

5. Steps to Reproduce

   1. Nmap command and output (screenshots)

   2. Searchsploit for exploit (ss)

   3. Exploit URL and modification (modified code)

   4. Payload generation

   5. File transfer commands and ss

   6. Shell reception

   7. PoC Code

Priv Esc

1. Heading for issue exploited

2. Explanation

3. Fix

4. Severity

5. Steps to Reproduce

6. Commands and output with ss

Post Exploitation

1. Proof files screenshots

2. If Windows, use PsExec to get SYSTEM

3. Proof screenshot format:

   1. Type proof.txt && whoami && ipconfig

4. If AD,

   1. Mimikatz enum

   2. Groups Enum

   3. RDP screenshots

   4. Pivoting tools and commands

Exam Guide: https://help.offensive-security.com/hc/enus/articles/360040165632-OSCP-Exam-Guide