Free OffSec OSCP Exam Questions

Become OffSec Certified with updated OSCP exam questions and correct answers

Page: 1 / 47

Total 234 Questions | Updated On: Aug 18, 2026

Add To Cart

Question 1

What vulnerability is present in this PHP snippet?

A : Command Injection

B : SQL Injection

C : Local File Inclusion

D : Cross-site scripting

Answer: C

Question 2

You are performing a Post-Exploitation task on a compromised Linux server. Which of the following would help you maintain access on the system? (Select all that apply)

A : Add a cron job to re-establish reverse shell every 5 minutes

B : Modify /etc/sudoers to allow user root privileges

C : Use chattr to lock the reverse shell file

D : Add your public SSH key to ~/.ssh/authorized_keys

Answer: A,C,D

Question 3

Which LDAP attribute is typically used by attackers to identify accounts that never expire?

A : userAccountControl

B : msDS-AllowedToDelegateTo

C : servicePrincipalName

D : lastLogonTimestamp

Answer: A

Question 4

What is the function of the command searchsploit vsftpd 2.3.4?

A : Launches a Metasploit exploit

B : Uploads an exploit to a target

C : Searches local Exploit-DB for relevant vulnerabilities

D : Runs a VSFTP vulnerability scanner

Answer: C

Question 5

After compromising a user workstation via phishing, you discover that Defender is disabled, but the host is joined to an AD domain. You need to move laterally stealthily. Which method avoids detection and leverages built-in tools?

A : WMI lateral movement with Impacket

B : Uploading a backdoor using Netcat

C : PowerShell Remoting using stolen NTLM hashes

D : Creating a rogue GPO

Answer: A

Page: 1 / 47

Total 234 Questions | Updated On: Aug 18, 2026

Add To Cart