~/offsec-oscc-sec · study ▊

practice sheet · all objectives switch to smart practice →

OffSec CyberCore Certified

0/40 checked

Q_01 domain/d1 · medium single discuss →

You have written a working exploit chain for an OSWE target but it requires the grader to manually paste a token into a second request. According to the exam proof requirements, why will this approach cost you points?

A The PoC script must execute without user interaction and require nothing to be done manually while it runs
B The grader is not permitted to run any PoC scripts at all
C Tokens must always be extracted using a reverse shell, never a script
D You are required to submit a separate script for each vulnerability rather than a single chain

Q_02 domain/d1 · medium single discuss →

An OSWA candidate exploits a web application and obtains the proof.txt value directly through the web UI's administration section rather than through a shell. What evidence must be included in the documentation for this proof?

A A screenshot of the type or cat command output from the file's original location
B Screenshots of Burp Suite (or a web proxy) and the browser showing the web UI on the actual target machine with the proof value visible
C The MD5 hash of the proof value entered into the control panel
D A screenshot proving privilege escalation to root or Administrator was performed

Q_03 domain/d1 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_04 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_05 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_06 domain/d1 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_07 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_08 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_09 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_10 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_11 domain/d2 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_12 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_13 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_14 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_15 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_16 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_17 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_18 domain/d2 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_19 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_20 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_21 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_22 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_23 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_24 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_25 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_26 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_27 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_28 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_29 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_30 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_31 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_32 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_33 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_34 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_35 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_36 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_37 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_38 domain/d3 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_39 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_40 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

38 questions locked

unlock all 38 questions