OSCP

The offensive-security body I built preparing for PEN-200 and the OSCP: a repeatable path from the first scan to Domain Admin, and the technique and tool notes it leans on.

Read the methodology first for the decision workflow, then drop into a technique or tool note as a specific target calls for it. Nothing here walks through a named machine; it is the reusable method, not the answers. The methodology grew from paths that actually worked in the labs, so it favours decisions and workflow over exhaustive documentation.