SecurityNoob

On my way from SecurityNoob to SecurityPro | OSCP, CRTP, CARTP, eJPT certified | #100DaysOfHacking | Going deeper into Red Teaming right now

[SecurityNoob @SecurityNoob]

Day 20 Round 2
Worked through the Lateral Movement and Pivoting section including the labs. Revised some of my notes and also repeated some of the previous content
#100DaysOfHacking #RTOI #CRTO #LearnInPublic

[SecurityNoob @SecurityNoob]

Day 19 R2
Worked through the User Impersonation section (including the lab). Also worked through the Discovery section and will continue with the lab tomorrow.
#100DaysOfHacking #RTOI #CRTO #LearnInPublic

[SecurityNoob @SecurityNoob]

Day 17-18 R2
Worked through PrivEsc, Elevated Persistence and Credential Access. WMI persistence was especially interesting and Credential Access was a solid refresher. Nice to see how it all works in Cobalt Strike with OPSEC in mind
#100DaysOfHacking #RTO #CRTO #LearnInPublic

[SecurityNoob @SecurityNoob]

Days 14 - 16 - Round Two
Got a bit distracted this week and focused mainly on some Active Directory & Entra Hybrid paths during an ongoing engagement. Also dove deeper into the https://t.co/J7mFQOkXmc project. Now back to RTO.
#100DaysOfHacking #CRTO #RTOI #LearnInPublic

[SecurityNoob @SecurityNoob]

Day 13 - Round Two
Worked through the Post-Exploitation Section and added a few things to my Exam Cheat Sheet. Already skimmed through the PrivEsc section and will continue with this part tomorrow.
#100DaysOfHacking #CRTO #RTO

[SecurityNoob @SecurityNoob]

Day 11-12 - Round Two
Finished the Initial Access lab and worked through the Persistence section including the lab. Also started to work on an OppSec Cheat Sheet.
#100DaysOfHacking #CRTO #RTO

[SecurityNoob @SecurityNoob]

Day 9-10 - Round Two
Finished the Initial Access section. Learned about the concept of DELIVERY(CONTAINER(TRIGGER + PAYLOAD + DECOY)) and finished the individual chapters
#100DaysOfHacking #CRTO #RTO

[SecurityNoob @SecurityNoob]

Days 5-8 - Round Two
Spent the Weekend working on the house and with the family. Repated the evasion material and worked half way through the lab. Also started with the initial access chapter.
#100DaysOfHacking #CRTO #RTO

[SecurityNoob @SecurityNoob]

Day 4 - Round Two
Going deeper into Cobalt Strikes malleable C2, beacon behaviour and OPSEC considerations.
#100DaysOfHacking #CRTO #RTO

[SecurityNoob @SecurityNoob]

Day 3 - Round Two
Diving deeper into Defence Evasion. Specifically how to use Cobalt Strikes Artifact and Resource Kit to remove known Indicators from compiled artifacts or scripts.
#100DaysOfHacking #CRTO #RTOI

[SecurityNoob @SecurityNoob]

Day 2 - Round Two
Startet with RTO I by repeating Malware Essentials and the Cobalt Strike Primer. Will continue with Defence Evasion next
#100DaysOfHacking

[SecurityNoob @SecurityNoob]

Day 1 - Round Two
Well, that was a long break. I want to make learning a daily habit again and will continue to post here. Actually don't care who reads it, but last time it helped me to keep the streak. Next up, #CRTO it's time #100DaysOfHacking

[SecurityNoob @SecurityNoob]

@krell_krypto Well, the thought crossed my mind, won't lie :D But I guess that depends a bit on the willingness of my employer to pay for it. For now I will enjoy some time off and come back to tackle the CRTO as a next step

Thanks!

[SecurityNoob @SecurityNoob]

Day 159
Submitted the report for review after pulling an allnighter to finish it

Day 160 - 162
Anxiously waited for the results, spending my time away from screen

Day 163
Finally got confirmation via mail that I passed!

#100DaysOfHacking #OSCP

[SecurityNoob @SecurityNoob]

@pwnedprivacy Thanks :)

[SecurityNoob @SecurityNoob]

Day 158
Finished the exam and got all the machines this time! Will now polish the report and hopefully pass. Exhausted but happy, was a good challenge!
#100DaysOfHacking #OSCP

[SecurityNoob @SecurityNoob]

@krell_krypto Thank you and good look already! :)

[SecurityNoob @SecurityNoob]

@MayankM0 Thank you! Anxiously waiting for the results, it's not over yet :D

[SecurityNoob @SecurityNoob]

@eMVee_NL Rooted all 6 machines :) Currently preparing my report

[SecurityNoob @SecurityNoob]

Day 155 (update from yesterday)
Prepared my notes, folder and reporting structure as well as my workspace for the upcoming exam. Revised my notes about Windows PrivEsc as well as some Active Directory stuff
#100DaysOfHacking #OSCP

[SecurityNoob @SecurityNoob]

Day 157
Today is the day... I feel calm, awake and focused. Got so close last time so I know it's doable. Looking forward to the challenge
#100DaysOfHacking #OSCP