SecurityCipher
Home Blog About Us

Learn Paths, courses, and reference docs

  • 🚀 Start Here Beginner path through the site
  • 🗺️ Penetration Testing Roadmap Structured path to become a pentester
  • 🎓 Free Security Courses Current free Udemy coupon listings
  • 📄 Secure Code Explain Vulnerable vs secure code side by side
  • 🎯 Penetration Testing Tricks Field notes for real engagements
  • 📖 Vulnerability Explain How common vulns actually work

Checklists Interactive reviews and LLM risks

  • ✅ Security Checklists Hub All interactive security checklists
  • 📋 Writeup Checklists Steps derived from real writeups
  • 🧠 LLM AI Security Checklist Controls for LLM apps
  • 🤖 OWASP LLM Top 10 LLM Top 10 risks mapped out
  • 🧰 Burp Suite Guide Step-by-step Burp tutorials
  • 📘 Payload Field Manual Safe-first probes and signals

Practice Browser labs, games, and explorers

  • 🔬 Interactive Labs SQL injection, AI, architecture review
  • 🎮 Security Games Phishing, JWT, WAF, and more
  • 🚗 On-Call Drive Neon-city arcade security missions
  • • Shift Zero SOC desk: phish, OTP, malware, tickets
  • ❓ Application Security Quiz Web, secure coding, and cloud quizzes
  • 🗺️ OWASP Top 10 Explorer Clickable risk map with signals
  • 🔀 Interactive Attack Paths Recon-to-impact chains

Tools & Career Databases, jobs, and community

  • 🛠️ Security Tools Curated recon, SAST, and bounty tools
  • 🔎 CVE Lookup Multi-source CVE intelligence
  • 💰 Bug Bounty Programs Live public scopes to search
  • 💼 Cybersecurity Jobs Roles from company career pages
  • 🧑‍💻 Security Researchers Community profiles and submissions
  • 🎤 Security Conferences Upcoming and past events
Browse all Security resources hub Freelance Security →
My Resume
Freelance SecurityFreelance
New Security Researchers Join the directory - submit your profile for review Submit profile →
← Security Tools View on GitHub

awesome-oscp

Curated list of awesome OSCP resources for exam and lab preparation.

Awesome OSCP

Awesome

A curated list of awesome OSCP resources

Contents

  • Resources
    • OSCP Reviews and Guides
    • Cheatsheets and Scripts
    • Topics
      • Buffer Overflow
      • Privilege Escalation
      • Active Directory
    • Other OSCP Resources
      • Books
  • License

Resources

OSCP Reviews and Guides

  • Official OSCP Certification Exam Guide
  • Luke’s Ultimate OSCP Guide (Part 1, Part 2, Part 3)
  • How to prepare for PWK/OSCP, a noob-friendly guide
  • n3ko1's OSCP Guide
  • Jan's "Path to OSCP" Videos
  • Offensive Security’s PWB and OSCP - My Experience (+ some scripts)
  • OSCP Lab and Exam Review
  • OSCP Preparation Notes
  • A Detailed Guide on OSCP Preparation – From Newbie to OSCP
  • My Fight for OSCP
  • The Ultimate OSCP Preparation Guide
  • The Journey to Try Harder: TJnull’s Preparation Guide for PEN-200 PWK/OSCP 2.0

Cheatsheets and Scripts

  • Luke's Practical hacking tips and tricks
  • Penetration Testing Tools Cheat Sheet
  • How to Pass OSCP
  • Reverse Shell Cheat Sheet
  • Reverse Shell Generator
  • 7 Linux Shells Using Built-in Tools
  • Windows Exploit Suggester
  • Linux Exploit Suggester
  • OSCPRepo
  • Go-for-OSCP
  • Pentest Compilation
  • Collection of OSCP scripts

Topics

Buffer Overflow

  • Corelan's Exploit writing tutorial part 1 : Stack Based Overflows
  • Justin's DoStackBufferOverflowGood
  • Writing Exploits for Win32 Systems from Scratch
  • 32-Bit Windows Buffer Overflows Made Easy
  • Introduction to Buffer Overflow Video
  • OverTheWire's Narnia Wargame

Privilege Escalation

  • Windows Privilege Escalation Fundamentals
  • Common Windows Privilege Escalation Vectors
  • Encyclopaedia Of Windows Privilege Escalation by Brett Moore
  • Level Up! Practical Windows Privilege Escalation by Andrew Smith
  • Basic Linux Privilege Escalation
  • Linux privilege escalation by Jake Williams

Active-Directory

  • Active Directory Methodology
  • Active Directory Exploitation Cheat Sheet
  • PayloadsAllTheThings AD
  • Attacking Active Directory: 0 to 0.9
  • PowerView-3.0 tips and tricks
Hands-On Resources.
  • TryHackMe
    • Active Directory Basics - Easy
    • Post-Exploitation Basics - Easy
    • Vulnnet Roasted - Easy
    • Attacktive Directory - Medium
    • raz0r black - Medium
    • Enterprise - Medium
    • Vulnnet Active - Medium
    • Zero Logon - Hard
    • Holo - Hard
    • Throwback - Easy
  • HackTheBox
    • Forest - Easy
    • Active - Easy
    • Fuse - Medium
    • Cascade - Medium
    • Monteverde - Medium
    • Resolute - Medium
    • Arkham - Medium
    • Mantis - Hard
    • APT - Insane
    • Dante - Beginner
    • Offshore - Intermediate
    • RastaLabs - Intermediate
    • Cybernetics - Advanced
    • APT Labs - Advanced
  • HackTheBox Academy ( PAID )
    • Introduction to Active Directory - Fundamental
    • ActiveDirectory LDAP - Medium
    • ActiveDirectory Powerview - Medium
    • ActiveDirectory BloodHound - Medium
    • ActiveDirectory Enumeration & Attacks - Medium
  • Proving Grounds
    • PG-Practice ( PAID )
      • Hutch
      • Heist
      • Vault

Other OSCP Resources

  • PWK Syllabus
  • OSCP-Prep-Resources
  • Offensive Security Bookmarks
  • The how to get the OSCP certification wiki
  • OSCP Goldmine
  • Penetration Testing Study Notes
  • OSCP-like Vulnhub VMs
  • Metasploit Unleashed
  • Awesome Penetration Testing
  • OSCP Exam Report Template in Markdown

Books

  • Penetration Testing: A Hands-on Introduction to Hacking
  • The Hacker Playbook 3: Practical Guide to Penetration Testing
  • RTFM: Red Team Field Manual
  • RTFM: Red Team Field Manual v2
  • The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws (2nd Edition)

License

CC0

To the extent possible under law, Adel "0x4D31" Karimi has waived all copyright and related or neighboring rights to this work.

Press Escape to close the search panel.

Donate

Buy me a Coffee

Penetration Testing Services

penetration Testing Services

Web Application Security Quiz

Web Application Security Quiz

Daily Bug Bounty Writeups - Twitter

Daily Bug Bounty Writeups

Download our Latest Android Application

Guide for Penetration Testing

Daily Bug Bounty Writeups - Telegram

Daily Bug Bounty Writeups

Author

Piyush
Senior Product Security Engineer

Ethical Hacker || Penetration Tester || Gamer || Blogger || Product Security Engineer || AI Security

READ ARTICLE

Donate

Buy me a Coffee

Recent Posts

  • AI-Generated Code Security Bugs: A Vibe Coding Case Study
    AI-Generated Code Security Bugs: A Vibe Coding Case Study
    October 7, 2026/
    0 Comments
  • Cloud Misconfig Bounty Hunting in 2026: Open Buckets, Firebase, and Secrets
    Cloud Misconfig Bounty Hunting in 2026: Open Buckets, Firebase, and Secrets
    September 8, 2026/
    0 Comments
  • DevSecOps From Laptop to Production: A Practical Security Pipeline Guide
    DevSecOps From Laptop to Production: A Practical Security Pipeline Guide
    August 27, 2026/
    0 Comments

Follow Us

SecurityCipher

Practical security guides, vulnerability deep-dives, and hands-on resources for bug bounty hunters and penetration testers.

Useful Links

  • Security Checklists
  • Cybersecurity Jobs
  • Blogs
  • About
  • Contact
© 2026 Security Cipher. All rights reserved. Privacy Policy · Terms & Conditions