OSCP学习笔记

关于OSCP

https://www.offsec.com/courses/pen-200/

一些资料

https://falconspy.medium.com/unofficial-oscp-approved-tools-b2b4e889e707

https://github.com/stars/h4m5t/lists/oscp

其他师傅的备考经历

https://blog.werner.wiki/how-did-i-get-oscp/

https://mp.weixin.qq.com/s/Y8d9gZe_-56qcpI3zJ7kMg

http://www.hackdig.com/11/hack-547862.htm

https://icybersec.gitbook.io/cybersecuritynote/an-quan-zheng-shu/oscp/kao-zheng-jing-yan-fen-xiang

https://juejin.cn/post/6844904125734322190

https://www.lshack.cn/849/

https://blog.csdn.net/weixin_43879344/article/details/118768733

环境配置

kali配置

修改主机名：

chmod 644 /etc/hostname
vi /etc/hostname
修改内容为h4m5t
reboot

sudo su 很慢，进行优化：

echo '127.0.0.1 h4m5t.localdomain h4m5t' >> /etc/hosts

安装其他工具：

git clone https://hub.nuaa.cf/maurosoria/dirsearch.git --depth 1

配置终端

终端的提示符有特殊符号，生成报告会报错，进行修改。

cp ~/.zshrc ~/.zshrc.bak
vi ~/.zshrc

对下面部分进行修改。

configure_prompt() {
    prompt_symbol=@
    # Skull emoji for root terminal
    #[ "$EUID" -eq 0 ] && prompt_symbol=💀
    case "$PROMPT_ALTERNATIVE" in
        twoline)
            PROMPT=$'%F{%(#.blue.green)}${debian_chroot:+($debian_chroot)─}${VIRTUAL_ENV:+($(basename $VIRTUAL_ENV))─}(%B%F{%(#.red.blue)}%n'$prompt_symbol$'%m%b%F{%(#.blue.green)})-[%B%F{reset}%(6~.%-1~/…/%4~.%5~)%b%F{%(#.blue.green)}]\n%B%(#.%F{red}#.%F{blue}$)%b%F{reset} '
            # Right-side prompt with exit codes and background processes
            #RPROMPT=$'%(?.. %? %F{red}%B⨯%b%F{reset})%(1j. %j %F{yellow}%B⚙%b%F{reset}.)'
            ;;
        oneline)
            PROMPT=$'${debian_chroot:+($debian_chroot)}${VIRTUAL_ENV:+($(basename $VIRTUAL_ENV))}%B%F{%(#.red.blue)}%n@%m%b%F{reset}:%B%F{%(#.blue.green)}%~%b%F{reset}%(#.#.$) '
            RPROMPT=
            ;;
        backtrack)
            PROMPT=$'${debian_chroot:+($debian_chroot)}${VIRTUAL_ENV:+($(basename $VIRTUAL_ENV))}%B%F{red}%n@%m%b%F{reset}:%B%F{blue}%~%b%F{reset}%(#.#.$) '
            RPROMPT=
            ;;
    esac
    unset prompt_symbol
}

保存重载。

source ~/.zshrc

report

配置报告环境

参考：https://github.com/noraj/OSCP-Exam-Report-Template-Markdown

https://www.youtube.com/watch?v=MQGozZzHUwQ

注意：报告使用英文字母和字符，如果使用中文会报错。

Ubuntu/Kali安装(可能需要换清华源)

apt install texlive-latex-recommended    
apt install texlive-fonts-extra
apt install texlive-latex-extra
apt install pandoc
apt install p7zip-full

下载eisvogel.latex

从https://github.com/Wandmalfarbe/pandoc-latex-template/releases下载

复制到模板目录下
cp '/home/h4m5t/Downloads/Eisvogel/eisvogel.latex' /usr/share/pandoc/data/templates/eisvogel.latex

下载生成脚本：

git clone https://github.com/noraj/OSCP-Exam-Report-Template-Markdown

手动生成报告

手动生成报告：指定模板和输出文件名。

pandoc src/OSCP-exam-report-template_whoisflynn_v3.2.md \
-o output/OSCP-OS-h4m5t-Exam-Report.pdf \
--from markdown+yaml_metadata_block+raw_html \
--template eisvogel \
--table-of-contents \
--toc-depth 6 \
--number-sections \
--top-level-division=chapter \
--highlight-style breezedark \
--resource-path=.:src

参数highlight-style 可以修改语法高亮。参考：https://pandoc.org/MANUAL.html#option--highlight-style

查看支持的高亮主题：pandoc --list-highlight-styles

Specifies the coloring style to be used in highlighted source code. Options are pygments (the default), kate, monochrome, breezeDark, espresso, zenburn, haddock, and tango.

支持的颜色：

titlepage-color	titlepage-text-color	titlepage-rule-color
`DC143C` (Crimson)	`FFFFFF` (White)	`FFFFFF` (White)
`00FF7F` (SpringGreen)	`006400` DarkGreen	`000000` (Black)
`1E90FF` (DodgerBlue)	`FFFAFA` (Snow)	`FFFAFA` (Snow)
`483D8B` (DarkSlateBlue)	`FFFAFA` (Snow)	`FFFAFA` (Snow)
`FFD700` (Gold)	`000000` (Black)	`000000` (Black)
`FFEFD5` (PapayaWhip)	`000000` (Black)	`000000` (Black)
`FF8C00` (DarkOrange)	`000000` (Black)	`000000` (Black)
`FFEF96` (no name)	`50394C` (no name)	`50394C` (no name)

自动生成报告

安装ruby

sudo apt install ruby-full

Choose and copy a template that you will use to write your report:

ruby osert.rb init

Generate your PDF report and 7z archive

ruby osert.rb generate

bash脚本输出报告(推荐)

写脚本generate.sh

chmod +x generate.sh

#!/bin/bash

if [[ $# -ne 2 ]]; then
  echo "请提供两个参数：模板文件<input.md>和输出文件<output.pdf>"
  exit 1
fi

template_file=$1
output_file=$2

pandoc "$template_file" \
-o "$output_file" \
--from markdown+yaml_metadata_block+raw_html \
--template eisvogel \
--table-of-contents \
--toc-depth 6 \
--number-sections \
--top-level-division=chapter \
--highlight-style tango \
--resource-path=.:src

使用示例：

./generate.sh ./src/OSCP-exam-report-template_OS_v1.md ./output/test.pdf

练习进度

已完成：

DC-1

待完成：

Kioptrix

1.0
1.1
1.2
1.3

METASPLOITABLE1

METASPLOITABLE12

VulnOS2

待下载

FristiLeaks 1.3

Mr-Robot: 1

HackLAB

Hack Me

Hack Me Please

Digitalworld