He uploaded a simple JSP webshell with a .jsp extension. The server paused. Then, a directory listing. He had a shell. 25 points. 50 total. He let out a breath he didn't know he was holding.
beacon> whoami nt authority\system
Alex had prepared for six months. He’d eaten, slept, and dreamt in Bash scripts. He’d rooted 50 machines on the Proving Grounds, aced the labs, and could explain a buffer overflow in his sleep. But the exam was different. The exam was a fortress, and he was a mouse with a keyboard. oscp certification
He tried every enumeration trick. Nmap scans of every port. Gobuster directory busting. Nikto. He found an odd file upload endpoint that seemed to accept PHP, but every webshell he threw at it was caught by a WAF. He tried encoding, double extensions, case manipulation. Nothing. The server just gave him a polite "500 Internal Server Error." He uploaded a simple JSP webshell with a
His neck was a knot of concrete. His third cup of coffee had gone cold an hour ago. On his main screen, a Kali Linux terminal blinked its green cursor, patient and indifferent. On the other, a notes file sprawled with hundreds of lines: IP addresses, usernames, password fragments, and a graveyard of dead-end commands. He had a shell
The clock on the wall mocked him. 23:47. The exam had started at ten in the morning. For nearly fourteen hours, Alex had been staring into the digital abyss.