Academy Node
Reporting Checklist
The reporting checklist ensures every compromised host has clear findings, steps, screenshots, proof, and remediation.
Intermediate100 XPReporting
Why it matters
The PEN-200 material includes report writing as a core skill and the OSCP exam requires a submitted report.
How to identify it
- Before ending exam, every host should pass this checklist
Linux commands
ls -R ~/oscp/TARGETgrep -Rni 'proof\|local\|whoami\|hostname' ~/oscp/TARGET/notesExpected output
- Proof present
- Screenshots present
- Commands documented
- Remediation notes
Success looks like
- Every exploited host has reproducible steps and evidence
Failure looks like
- Missing proof, missing screenshot, unclear exploit chain
Troubleshooting
- Re-run commands while lab is still live
- Organize by host
Common mistakes
- Not reserving report time
- Not explaining why exploit worked
Alternative attacks
- Command log review
What to try next
- Finalize report
- Double-check screenshots
- Submit
Recommended next lessons
ASREP Roast
ASREP roasting abuses AD users with Kerberos pre-authentication disabled. You can request encrypted ASREP material and attempt to crack it offline.
Kerberoast
Kerberoasting targets domain users with SPNs. You request service tickets and crack them offline.
GenericWrite
GenericWrite means you can modify certain attributes on the target AD object.
GenericAll
GenericAll is effectively full control over the target AD object.