Gianfranco's Notes

    05 Machine Progress Tracker

    3 min readUpdated Jul 24, 2026

    Created: 2026-07-24 13:50
    #note

    📊 OSCP Machine Progress & Checklist Tracker

    1. PEN-200 Official Labs (OffSec Portal)

    Challenge Networks

    • Medtech - Machine 1 (Foothold / PrivEsc)
    • Medtech - Machine 2 (Foothold / PrivEsc)
    • Medtech - Machine 3 (DC) (Domain Admin)
    • Relia - Machine 1 (Foothold / PrivEsc)
    • Relia - Machine 2 (Foothold / PrivEsc)
    • Relia - Machine 3 (DC) (Domain Admin)
    • Skylark (23 Network Pivoted Machines)

    Official Mock Exams

    • OSCP-A Mock Exam (4 Machines - Full 24-hr Simulation)
    • OSCP-B Mock Exam (4 Machines - Full 24-hr Simulation)
    • OSCP-C Mock Exam (4 Machines - Full 24-hr Simulation)

    2. Proving Grounds (PG) Practice

    Active Directory Sets

    • Hutch (Windows / AD) — 0xdf Writeup
    • Heist (Windows / AD)
    • Vault (Windows / AD)
    • Wumpus (Windows / AD)
    • Resolute (Windows / AD)

    Linux Standalones

    • ClamAV (Easy - Service Vulnerability)
    • Nibbles (Easy - Web Admin & Sudo)
    • Postman (Easy/Medium - Redis & SSH Key Injection)
    • Hotline (Medium - Web Exploitation)
    • Syringe (Easy/Medium - Web & Cron Job)
    • Pebble (Medium - Sudo & Capabilities)
    • PyScript (Medium - Python Privilege Escalation)
    • Sentinel (Medium - Web App & Capabilities)

    Windows Standalones

    • Helpdesk (Easy - Web RCE & Impersonation)
    • Kevin (Easy - Exploit & Service PrivEsc)
    • Hekate (Medium - Web RCE & Token PrivEsc)
    • Craft (Medium - Web App & Unquoted Service Path)
    • Internal (Medium - Services & PrivEsc)

    Active Directory Targets

    • Active (Easy - GPP & Kerberoasting)
    • Forest (Easy - AS-REP Roasting & BloodHound)
    • Sauna (Easy - Account Enum & Kerberoasting)
    • Monteverde (Medium - Azure AD Sync & WinRM)

    Standalone Targets

    • Lame (Linux Easy - Samba RCE)
    • Cap (Linux Easy - IDOR & Capabilities)
    • Sau (Linux Easy - Request Baskets SSRF & Sudo)
    • Precious (Linux Easy - Ruby Command Injection)
    • Blue (Windows Easy - EternalBlue)
    • Devel (Windows Easy - Anonymous FTP & MS11-046)
    • Optimum (Windows Easy - ReOpenFile RCE)

    Tags

    #oscp #machines #tracker #proving_grounds #hackthebox #offsec #checklist

    Local Knowledge Graph