OSCP Preparation Syllabus
Structured preparation for the OSCP exam, built around the two things that actually fail candidates: Windows privilege escalation and the graded report. Taught by Rudra Pratap Singh.
Before enrolling, read is OSCP worth it. It is an honest assessment including who should not take this exam yet.
Readiness check
This is preparation, not an introduction. Take it if you can already enumerate a Linux host and find a privilege escalation path without a walkthrough. If you cannot, start with the VAPT program and come back.
Module 1: Methodology Under Time Pressure
- Enumeration discipline: what to run, in what order, and when to stop
- Note taking that survives hour eighteen
- Recognising a rabbit hole early
- Time budgeting across the exam machines
Module 2: Linux Privilege Escalation
- Sudo misconfiguration and abuse
- SUID and SGID binaries
- Cron jobs and writable script paths
- PATH manipulation
- Capabilities
- Credentials in configuration, history and backups
- Kernel exploitation and why it is the last option
Module 3: Windows Privilege Escalation
The area that fails more candidates than anything else.
- Token privileges and their abuse
- Unquoted service paths and weak service permissions
- Registry autoruns and AlwaysInstallElevated
- Stored credentials and credential manager
- DLL hijacking
- Scheduled task abuse
Module 4: Buffer Overflow
- Stack fundamentals and memory layout
- Fuzzing and crash identification
- Offset discovery and EIP control
- Bad character identification
- Finding a jump point and generating a payload
- A repeatable process you can execute under pressure
Module 5: Active Directory
- Domain enumeration and attack path mapping
- Kerberoasting and AS-REP roasting
- Credential harvesting and reuse
- Lateral movement techniques
- The full chain from foothold to domain compromise
Module 6: Web Vectors for Initial Access
- File upload to shell
- Local and remote file inclusion
- Command injection
- SQL injection to filesystem or shell
- Default and weak credentials on exposed panels
Module 7: Pivoting and Tunnelling
- Port forwarding
- SOCKS proxying and routing tools through a compromised host
- Working in a network you cannot reach directly
Module 8: The Report
Graded, because candidates fail this exam having compromised enough machines when their documentation was insufficient.
- Exam report format and expectations
- Screenshot and evidence discipline while you are still testing
- Reproduction steps written for a stranger
- Writing the report on no sleep, as a process rather than an effort
Exam strategy
| Topic | Covered |
|---|---|
| Machine selection order | Which to attempt first and why |
| Time boxing | When to abandon a machine and return later |
| Break scheduling | Sleep and food planning across the window |
| Evidence capture | Collecting proof as you go, not at the end |
| Partial credit | Documenting incomplete progress properly |
Practise free
Hacklido has free challenges covering the web vectors and enumeration foundations. Work them unassisted before spending on an exam attempt.
Verify every module against your actual delivered curriculum before publishing.
Frequently asked questions
Is this the official OSCP course?
No. This is independent preparation for the OSCP exam. Course material, lab access and the exam itself are purchased separately from OffSec.
Do I need experience before starting?
Yes. This is preparation, not an introduction. You should be able to enumerate a Linux host and find a privilege escalation path unassisted. If not, start with the VAPT program.
Why is Windows privilege escalation emphasised?
Because it fails more candidates than any other topic. Most self study is Linux heavy and candidates arrive at the exam underprepared on Windows.
Is report writing really graded in the exam?
Yes. Candidates fail having compromised enough machines when their documentation was insufficient. The report module here is graded for that reason.
How long should OSCP preparation take?
Typically four to twelve months depending on starting skill. Candidates with existing Linux, networking and exploitation experience are at the shorter end.
Does OSCP expire?
No. Once earned it requires no renewal, continuing education credits or recurring fees.