# 0xsyr0/oscp architecture

> Architecture diagram of the GitHub repository 0xsyr0/oscp, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-27). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/0xsyr0/oscp
- Repository: https://github.com/0xsyr0/oscp

## Overview

This repository is an OSCP study cheat sheet and companion collection of exploit examples and practical resources, not an integrated pentesting application. The principal workflow is a practitioner consulting the README for commands and technique references, then selecting relevant exploit code or resource files for a target and assessment stage. The README documents a broad set of capabilities, including information gathering, web and database analysis, password attacks, exploitation, post-exploitation, and reporting. The tree supports the companion collections; sampled source shows standalone exploit behavior, not a shared execution pipeline.

Main entry points: [`README.md`](https://github.com/0xsyr0/oscp/blob/main/README.md) (OSCP Cheat Sheet), [`exploits`](https://github.com/0xsyr0/oscp/tree/main/exploits) (Exploit Examples), [`resources`](https://github.com/0xsyr0/oscp/tree/main/resources) (Payload Resources), [`exploits/CVE-2014-5301-ManageEngine-ServiceDesk-Plus-7.6.0-Arbitrary-File-Upload/CVE-2014-5301.py`](https://github.com/0xsyr0/oscp/blob/main/exploits/CVE-2014-5301-ManageEngine-ServiceDesk-Plus-7.6.0-Arbitrary-File-Upload/CVE-2014-5301.py) (Web Exploits)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_guide["Reference Guide"]
  node_readme["OSCP Cheat Sheet<br/>[README.md]"]
end

subgraph group_assessment["Assessment Topics"]
  node_basics["Basics &amp; Commands<br/>[README.md]"]
  node_recon["Information Gathering<br/>[README.md]"]
  node_vuln["Vulnerability Analysis<br/>[README.md]"]
  node_web["Web Assessment<br/>[README.md]"]
  node_database["Database Assessment<br/>[README.md]"]
  node_passwords["Password Attacks<br/>[README.md]"]
  node_exploitation["Exploitation Tools<br/>[README.md]"]
  node_post["Post Exploitation<br/>[README.md]"]
  node_reporting["Reporting<br/>[README.md]"]
  node_cves["CVE References<br/>[README.md]"]
end

subgraph group_operations["Exploit Collection"]
  node_exploit_catalog["Exploit Examples"]
  node_web_exploits["Web Exploits<br/>[CVE-2014-5301.py]"]
  node_salt_exploit["Salt Exploit<br/>[exploit.py]"]
  node_linux_exploits["Linux LPE Examples"]
end

subgraph group_resources["Field Resources"]
  node_payloads["Payload Resources"]
  node_linux_resources["Linux Resources"]
  node_windows_resources["Windows Resources"]
end

node_practitioner(("Practitioner"))

node_practitioner -->|"consults"| node_readme
node_readme -->|"references"| node_basics
node_readme -->|"references"| node_recon
node_readme -->|"references"| node_vuln
node_readme -->|"references"| node_web
node_readme -->|"references"| node_database
node_readme -->|"references"| node_passwords
node_readme -->|"references"| node_exploitation
node_readme -->|"references"| node_post
node_readme -->|"references"| node_reporting
node_readme -->|"references"| node_cves
node_practitioner -->|"selects example"| node_exploit_catalog
node_exploit_catalog -->|"includes"| node_web_exploits
node_exploit_catalog -->|"includes"| node_salt_exploit
node_exploit_catalog -->|"includes"| node_linux_exploits
node_practitioner -->|"selects resource"| node_payloads
node_payloads -->|"offers"| node_linux_resources
node_payloads -->|"offers"| node_windows_resources

click node_readme "https://github.com/0xsyr0/oscp/blob/main/README.md"
click node_basics "https://github.com/0xsyr0/oscp/blob/main/README.md"
click node_recon "https://github.com/0xsyr0/oscp/blob/main/README.md"
click node_vuln "https://github.com/0xsyr0/oscp/blob/main/README.md"
click node_web "https://github.com/0xsyr0/oscp/blob/main/README.md"
click node_database "https://github.com/0xsyr0/oscp/blob/main/README.md"
click node_passwords "https://github.com/0xsyr0/oscp/blob/main/README.md"
click node_exploitation "https://github.com/0xsyr0/oscp/blob/main/README.md"
click node_post "https://github.com/0xsyr0/oscp/blob/main/README.md"
click node_reporting "https://github.com/0xsyr0/oscp/blob/main/README.md"
click node_cves "https://github.com/0xsyr0/oscp/blob/main/README.md"
click node_exploit_catalog "https://github.com/0xsyr0/oscp/tree/main/exploits"
click node_web_exploits "https://github.com/0xsyr0/oscp/blob/main/exploits/CVE-2014-5301-ManageEngine-ServiceDesk-Plus-7.6.0-Arbitrary-File-Upload/CVE-2014-5301.py"
click node_salt_exploit "https://github.com/0xsyr0/oscp/blob/main/exploits/CVE-2020-11651-CVE-2020-11652-Saltstack-Authentication-Bypass-and-Directory-Traversal-PoC-RCE/exploit.py"
click node_linux_exploits "https://github.com/0xsyr0/oscp/tree/main/exploits"
click node_payloads "https://github.com/0xsyr0/oscp/tree/main/resources"
click node_linux_resources "https://github.com/0xsyr0/oscp/tree/main/resources/linux"
click node_windows_resources "https://github.com/0xsyr0/oscp/tree/main/resources/windows"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_readme toneBlue
class node_basics,node_recon,node_vuln,node_web,node_database,node_passwords,node_exploitation,node_post,node_reporting,node_cves toneAmber
class node_exploit_catalog,node_web_exploits,node_salt_exploit,node_linux_exploits toneMint
class node_payloads,node_linux_resources,node_windows_resources toneRose
class node_practitioner toneIndigo
```

## Components

### Reference Guide

- [OSCP Cheat Sheet](https://github.com/0xsyr0/oscp/blob/main/README.md): `README.md`

### Assessment Topics

- [Basics & Commands](https://github.com/0xsyr0/oscp/blob/main/README.md): `README.md`
- [Information Gathering](https://github.com/0xsyr0/oscp/blob/main/README.md): `README.md`
- [Vulnerability Analysis](https://github.com/0xsyr0/oscp/blob/main/README.md): `README.md`
- [Web Assessment](https://github.com/0xsyr0/oscp/blob/main/README.md): `README.md`
- [Database Assessment](https://github.com/0xsyr0/oscp/blob/main/README.md): `README.md`
- [Password Attacks](https://github.com/0xsyr0/oscp/blob/main/README.md): `README.md`
- [Exploitation Tools](https://github.com/0xsyr0/oscp/blob/main/README.md): `README.md`
- [Post Exploitation](https://github.com/0xsyr0/oscp/blob/main/README.md): `README.md`
- [Reporting](https://github.com/0xsyr0/oscp/blob/main/README.md): `README.md`
- [CVE References](https://github.com/0xsyr0/oscp/blob/main/README.md): `README.md`

### Exploit Collection

- [Exploit Examples](https://github.com/0xsyr0/oscp/tree/main/exploits): `exploits`
- [Web Exploits](https://github.com/0xsyr0/oscp/blob/main/exploits/CVE-2014-5301-ManageEngine-ServiceDesk-Plus-7.6.0-Arbitrary-File-Upload/CVE-2014-5301.py): `exploits/CVE-2014-5301-ManageEngine-ServiceDesk-Plus-7.6.0-Arbitrary-File-Upload/CVE-2014-5301.py`
- [Salt Exploit](https://github.com/0xsyr0/oscp/blob/main/exploits/CVE-2020-11651-CVE-2020-11652-Saltstack-Authentication-Bypass-and-Directory-Traversal-PoC-RCE/exploit.py): `exploits/CVE-2020-11651-CVE-2020-11652-Saltstack-Authentication-Bypass-and-Directory-Traversal-PoC-RCE/exploit.py`
- [Linux LPE Examples](https://github.com/0xsyr0/oscp/tree/main/exploits): `exploits`

### Field Resources

- [Payload Resources](https://github.com/0xsyr0/oscp/tree/main/resources): `resources`
- [Linux Resources](https://github.com/0xsyr0/oscp/tree/main/resources/linux): `resources/linux`
- [Windows Resources](https://github.com/0xsyr0/oscp/tree/main/resources/windows): `resources/windows`

### Other components

- **Practitioner**

## Connections

- Practitioner → OSCP Cheat Sheet: consults
- OSCP Cheat Sheet → Basics & Commands: references
- OSCP Cheat Sheet → Information Gathering: references
- OSCP Cheat Sheet → Vulnerability Analysis: references
- OSCP Cheat Sheet → Web Assessment: references
- OSCP Cheat Sheet → Database Assessment: references
- OSCP Cheat Sheet → Password Attacks: references
- OSCP Cheat Sheet → Exploitation Tools: references
- OSCP Cheat Sheet → Post Exploitation: references
- OSCP Cheat Sheet → Reporting: references
- OSCP Cheat Sheet → CVE References: references
- Practitioner → Exploit Examples: selects example
- Exploit Examples → Web Exploits: includes
- Exploit Examples → Salt Exploit: includes
- Exploit Examples → Linux LPE Examples: includes
- Practitioner → Payload Resources: selects resource
- Payload Resources → Linux Resources: offers
- Payload Resources → Windows Resources: offers