https://zacharymorgan.dev/categories/oscp-prep/ Recent content in OSCP Prep on Zachary Morgan Hugo en-us Mon, 25 May 2026 16:00:00 -0600 https://zacharymorgan.dev/posts/day34/ Mon, 25 May 2026 16:00:00 -0600 https://zacharymorgan.dev/posts/day34/ <p>Day 33. Wrapped the entire HTB Academy Footprinting module today.</p> <h2 id="what-the-module-covered">What the module covered</h2> <p>Over the past few sessions I worked through:</p> <ul> <li><strong>File services</strong>: FTP, SMB, NFS</li> <li><strong>Mail protocols</strong>: SMTP, IMAP/POP3</li> <li><strong>Network management</strong>: SNMP, IPMI</li> <li><strong>Databases</strong>: MySQL, MSSQL, Oracle</li> <li><strong>Name resolution</strong>: DNS</li> <li><strong>Remote management</strong>: WinRM, WMI, RDP, SSH, rsync</li> <li><strong>3 skills assessments</strong></li> </ul> <h2 id="what-sucked">What sucked</h2> <p>Honestly the content in this module didn&rsquo;t feel super engaging, just a slog through different types of footprinting until I got to put it to the test at the very end of the module.</p> https://zacharymorgan.dev/posts/day-32-footprinting-and-a-box/ Sun, 24 May 2026 16:00:00 -0600 https://zacharymorgan.dev/posts/day-32-footprinting-and-a-box/ <p>It&rsquo;s May 24th. The last time I touched my OSCP prep was May 8th. Sixteen days lost, first to a brutal exam week, then to whatever virus knocked me flat for a week.</p> <h2 id="what-i-did-today">What I did today</h2> <p>Four HTB Academy Footprinting modules: SMTP, IMAP/POP3, SNMP, and MySQL. Then I rooted Conversor on Hack The Box, an easy retired machine that turned out to be a fun XSLT injection foothold into a needrestart CVE-2024-48990 privesc.</p>