OSCP Offensive Security Certified Professional Practice Test
Gana confianza para OSCP Offensive Security Certified Professional. Practica los conceptos, comprende las respuestas y refuerza tus conocimientos pregunta a pregunta.
Probar una preguntaDescripción y detalles del examen
The Offensive Security Certified Professional (OSCP) certification is the industry's premier, performance-based penetration testing credential. Awarded by Offensive Security, it validates a practitioner's ability to methodically identify, exploit, and document security vulnerabilities in a controlled environment. Unlike multiple-choice exams, the OSCP is a rigorous 24-hour hands-on test where candidates must successfully compromise a series of target machines and produce a comprehensive penetration test report. This certification is globally recognized as a benchmark for practical offensive security skills, covering essential methodologies, tools, and techniques used in real-world penetration testing engagements. Earning the OSCP demonstrates not just theoretical knowledge, but proven competence in performing security assessments, making it one of the most respected and sought-after credentials for security professionals seeking to advance in red teaming, penetration testing, and vulnerability assessment roles.
Preguntas de Muestra
Elige una respuesta y consulta la explicación para ver cómo funciona la práctica.
sudo -l output for the current user shows: "(root) NOPASSWD: /usr/bin/find". You want to escalate to a root shell. Which technique is canonical for this configuration, and which resource catalogs the exact command syntax?
On a low-privileged user's home directory you find an unencrypted ~/.ssh/id_rsa with restrictive permissions plus several public keys in ~/.ssh/authorized_keys for OTHER hosts in scope. Why are these credentials high-value, and what should the operator do next?
An authorized internal Nmap scan of /24 returns 22 hosts. On three of them you find: (Host A) TCP/445 SMB and TCP/3389 RDP, (Host B) TCP/80 HTTP custom application and TCP/22 SSH, (Host C) TCP/389 LDAP, TCP/88 Kerberos, TCP/445 SMB, and TCP/636 LDAPS. Given an OSCP-style time-boxed engagement, which host is the highest-value first enumeration target and why?
You discover that the AD CS Web Enrollment role is installed and reachable over HTTP without channel binding or Extended Protection for Authentication (EPA). Which abuse case (ADCS ESC#) does this enable, and what is the canonical chain to leverage it from a non-privileged operator position?
You identify a Java application accepting serialized objects via HTTP cookies (the cookie value starts with "rO0AB" -- base64 for the Java serialization magic bytes). What attack class does this enable, and what tool generates payloads against common Java gadget-chain libraries?
Oportunidades profesionales y salario
Los rangos son cifras del mercado de EE. UU. salvo que se muestre un rango local.