reading list
HackSmarter: OSCP-LK Labs
OSCP-LK is a set of machines in the style of the PEN 200 labs and exam to help you sharpen your enumeration, creative thinking and exploitation techniques. The machines were designed to be truly "OSCP like" even more than some machines in OSCP like lists.
4 articles
HackSmarter: Wordplay
Wordplay is a Linux machine rated Medium that chains an outdated WordPress plugin into a file inclusion, then rides an NFS-writable shell all the way to root through Ansible
HackSmarter: Haystack
Haystack is a Medium Linux machine chaining anonymous FTP and a cracked app.zip to Roundcube RCE, log-based lateral movement, and a git-less escape to root — plus a deep dive on why sudo-rs fails from RCE shells.
HackSmarter: Forensics
Forensics is a Windows lab rated Medium that starts from an assumed breach, turning GenericWrite into a Kerberoasted foothold on WS01, an Access database into new credentials, a misconfigured update service into SYSTEM, and a ticket left on disk into domain admin.
HackSmarter: New Hire
NewHire is a Windows machine rated Easy that covers SMB Guest, HR/IT share enumeration, Password spraying, KeePass KDB cracking, WinRM, Chisel port forwarding, MSSQL impersonation, xp_cmdshell, SeImpersonate, LSA Secrets