Vulnerable software and exploits used for OSCP/OSCE preparation

My notebook for OSCE Lab

Some exploits, which I’ve created during my OSCE preparation.

Scripts for OSCE

Personal blog about security, exploitation, CTFs, ...

A few scripts to aid some pentesting tasks. They were useful also for my OSCP (PWK), some HTB machines and other CTFs

OSCE/CTP Old

A collection of OSCE preparation resources.

Examples of simple code patterns causing BOF

Vulnserver exploits

Proof of Concept exploit scripts and fuzzing templates. Companion blog posts located at https://epi052.gitlab.io/notes-to-self/blog/2020-05-13-osce-exam-practice-part-one/

Exploits for Easy Rm to mp3 inspired by corelean tutorials presenting different jump eip options.

At some point, I learned about a method to perform a binary search on a file in order to identify its AV signature and change it to bypass signature-based AV. The tool I used back then is gone, so I wrote this.

Exploits for vulnserver - OSCE practice

Independent implementation of the optimized SUB-Encoder

An alpha-numeric subtraction encoder used for restrictive character set exploits.

Collection of things made during my preparation to take on OSCE

Alphanumeric Shellcode (x86) Encoder

Basic tool to automate backdooring PE files

This is a custom ASCII AND/SUB Encoder developed during my preparation for the legacy OSCE/CTP course