What problem does it solve? Preparing for the OSCP/PEN-200 certification requires a repeatable penetration testing methodology, and candidates often fail due to poor enumeration habits, weak time management, or incomplete reporting rather than lack of technical knowledge. ## Core Features & Use Cases - Enumeration Framework: Applies the 3 attack vectors model (vulnerable versions, misconfigurations, sensitive information) with Nmap workflows and per-service checklists for ports 21 through 27017. - Privilege Escalation Playbooks: Covers 7 Linux vectors (sudo, SUID, capabilities, cron, credentials, internal ports, kernel) and 6 Windows vectors (token abuse, service misconfig, AlwaysInstallElevated, credential hunting). - AD Attack Chain & Exam Strategy: Walks through BloodHound enumeration, Kerberoasting, ADCS exploitation, delegation abuse, and DCSync, plus a 23h45m exam time plan and reporting checklist. - Use Case: During a practice lab, you gain a foothold on a Linux machine and feel stuck. Load the linux-privesc reference to systematically check sudo -l, SUID binaries, capabilities, and cron jobs before resorting to kernel exploits. ## Quick Start Ask the agent to walk you through the OSCP enumeration methodology for a target machine with open ports 22, 80, and 445.