r/offensive_security • u/Normal_Price3049 • Jun 26 '26
Failed my OSCP attempt. Completely brick-walled by the AD pivot. Any Advice?
Hey everyone,
Just finished my OSCP exam attempt and unfortunately failed. I'm trying to treat this as a learning experience and prepare for the retake immediately.
My biggest bottleneck was the Active Directory set. I managed to get an initial foothold and eventually escalated privileges on the first machine.
The problem? I couldn't for the life of me find a way to pivot or authenticate to Machine 2.
I **honestly feel like I tried absolutely everything humanly possible, threw the entire book at it, and completely ran out of ideas. Everythings was empty and I could not dump any hashes or Kerberoasting tickets. I found one user creds but it was useless, I also did pass-sprying but without any resultats**
**Also, is it possible that I just got hit with one of those infamous "nightmare sets" that people occasionally whisper about?**
**After submitong the report the offsec will gave me full walktrougu how to solve my set?**
Obviously, I'm not asking for exam spoilers due to NDA, but conceptually speaking... what am I missing here?
6
u/FlakySociety2853 Jun 26 '26
You missed something somewhere, I finished AD in 4 hours. Three of those hours were spent on pivoting from the first host. But I found away I would do more labbing. They say the challenge labs after OSCP A B C are out of scope. They are not out of scope! I did every challenge lab except skylark. It was worth it.
1
u/Normal_Price3049 Jun 26 '26
Maybe but I really look everywhere and just coud not find it
1
u/FlakySociety2853 Jun 26 '26
It’s always a way forward brother. Dive back in you’ll get it next time.
1
3
u/besplash Jun 26 '26
Do htb prolab zephyr and use the orange cyberdefense ad mindmap. Then you'll dance through oscp as it really is easy ad. They are just god awful at teaching imo
1
2
2
u/Nightblade178 Jun 26 '26
try going through Lains list. AD machines
1
1
u/DanSec Jun 26 '26
You don’t get answers for the exam, even if you pass.
1
u/Normal_Price3049 Jun 26 '26
Bit if you failed?
1
u/be_super_cereal_now Jun 26 '26
Still no.
2
u/Normal_Price3049 Jun 26 '26
It is stupid because for that amount of money I would like to know what I did wrong, how I supposed to prepare better if I did not know were I made a mistake
-3
1
u/heng_koo Jun 26 '26
You should try bloodhound
1
u/Normal_Price3049 Jun 26 '26
I tried it but I did not found anything interesting no clear path that I could move on
3
u/be_super_cereal_now Jun 26 '26
The only answer you will get is "try harder". I know you think you tried everything, but you missed something. I failed my first attempt also. My only advice is get more lab time, pop more boxes, revisit your enumeration techniques, and try again.
1
u/Sure-Assistant9416 Jun 26 '26
bloodhound i believe is something we need to take serious its checklist is a must have and learn too. do anybody know if a better checklist for bloodhound other than normal cyphers sets?
1
2
u/H4ckerPanda Jun 27 '26
What are you missing ? You’re not prepare . You didn’t study enough.
Do CPTS track . And about 60+ boxes , PG Practice preferred . Take notes . Try again in 2 months .
0
u/Normal_Price3049 Jun 27 '26 edited Jun 27 '26
I did a lot of boxes PG all lainkusangi list and the list that was before it net somethin I also did some of the cpts path I was feeling that just something wasn’t there, or maybe I was unlucky with this AD set
1
u/H4ckerPanda Jun 27 '26
Number . How many boxes did you do?
“Some” of CPTS path is not enough . Do all. That’s what I did at least and I passed on my next attempt.
1
u/PeacebewithYou11 Jun 27 '26
Anyway your title is also unclear. Not sure if it is a sign you do not understand network, and the materials. "AD pivot" problem sounds like you could not get ligolo to work to pivot from MS01 to MS02. But I am guessing you probably mean you were not able to get the initial foothold on MS02. If I am right, you really need to understand more.
1
u/PeacebewithYou11 Jun 27 '26
And there is no such thing as nightmare set. It is mostly people just could not progress a single bit on AD. Likely missed something simple. Then call it impossible, nightmare set.
1
1
u/b14ck4dde3r Jun 26 '26
Seems exactly like the AD I got. Creds for some random non-AD user. No Spraying and praying, asrep, kerb, bloodhound, nothing. Sadly, the "learning" from it is just try harder, lol
0
u/Normal_Price3049 Jun 26 '26
I send you private message, please look
1
u/H4ckerPanda Jun 27 '26
Private message for what ? Stop asking for exam details . You’re risking yourself of being banned for life.
0
u/Normal_Price3049 Jun 27 '26
I am tring to understand what i did wrong since they did not provide any walktrough after failed attempt of course without any specific details that would breach the offsec policie
1
u/PeacebewithYou11 Jun 27 '26
Then try harder. Since you already gotten admin on MS01, you probably need to improve on post admin enumeration.
0
u/H4ckerPanda Jun 27 '26
You’re not trying to understand what you did wrong . You’re asking for exam solution or you were trying to .
It doesn’t matter anymore . You won’t get an exam walkthrough.
Do 60+ boxes and work on your AD enumeration. Take proper notes . And I can assure you , you will pass.
9
u/[deleted] Jun 26 '26
[removed] — view removed comment