← Back to Academy

Academy Node

Command Log

A command log records commands, outputs, timestamps, and notes so the exploit path is reproducible.

Intermediate100 XPReporting

Why it matters

PEN-200 report writing focuses on clear reproducible technical details.

How to identify it

  • Start logging before enumeration

Linux commands

mkdir -p ~/oscp/TARGET/{scans,loot,screens,notes}
script -a ~/oscp/TARGET/notes/session.log
history | tail -200 > ~/oscp/TARGET/notes/history.txt

Expected output

  • Session log file
  • Organized target folder

Success looks like

  • Report can be written from notes without guessing

Failure looks like

  • You cannot remember exact exploit steps

Troubleshooting

  • Use tee
  • Use script
  • Use per-target folders

Common mistakes

  • Not saving tool output
  • Overwriting scans

Alternative attacks

  • Screenshots

What to try next

  • Reporting checklist
  • Proof collection

Recommended next lessons

ASREP Roast

ASREP roasting abuses AD users with Kerberos pre-authentication disabled. You can request encrypted ASREP material and attempt to crack it offline.

Kerberoast

Kerberoasting targets domain users with SPNs. You request service tickets and crack them offline.

GenericWrite

GenericWrite means you can modify certain attributes on the target AD object.

GenericAll

GenericAll is effectively full control over the target AD object.