gitwtfhub

wtf is oscp?

ninjarobots/oscp — explained in plain English

Analysis updated 2026-05-18

5PowerShellAudience · researcherComplexity · 2/5Setup · moderate

TL;DR

A personal toolbox of scripts for OSCP penetration testing practice: an exploit search TUI, a recon tracking server, and misc tools.

Mindmap

mindmap
  root((repo))
    What it does
      Personal OSCP scripts
      Exploit search tool
      Recon tracking server
    Tech stack
      PowerShell
      Nmap
      Obsidian notes
    Use cases
      Search for exploit PoCs
      Track pentest targets
      Generate final reports
    Audience
      Security students
      OSCP candidates
    Setup
      Minimal docs
      Read source to use

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

Why would anyone build with this?

REASON 1

Search Git and SearchSploit for proof of concept exploits from a terminal interface.

REASON 2

Track OSCP or pentest lab targets, credentials, and flags on a recon server.

REASON 3

Auto-generate Obsidian notes and a final report for each target tested.

What's in the stack?

PowerShellNmapSearchSploitObsidian

How it stacks up

ninjarobots/oscpbjdubb/codex-full-outputgrafikerdem/agent-context-economy
Stars566
LanguagePowerShellPowerShellPowerShell
Setup difficultymoderatemoderateeasy
Complexity2/53/52/5
Audienceresearcherdeveloperdeveloper

Figures from each repo's GitHub metadata at analysis time.

How do you spin it up?

Difficulty · moderate Time to first run · 1h+

README has no install or usage instructions, expect to read the source scripts directly.

Wtf does this do

This repository is a personal collection of scripts the author built while working through OSCP, a well known penetration testing certification. It is not a polished product, more a toolbox the author put together for their own use during security testing exercises. The README describes three parts. The first is called pwndex, a tool that searches for proof of concept exploit code across Git repositories and SearchSploit, a local database of known exploits. It runs as a terminal interface (TUI) and lets the user clone a matching repository directly from that interface instead of searching and copying links by hand. The second part is a recon server. It sets up a server that keeps track of the targets someone is testing, runs nmap network scans against them, and keeps a record of credentials and flags found along the way. It also automatically creates note pages in Obsidian, a note taking app, for each target, and can generate a final report by pulling from those notes. The third part is simply labeled tools, described as a set of scripts the author has found useful, without further detail given in the README. The README itself is short and light on setup instructions, installation steps, or requirements, so anyone wanting to use these scripts would likely need to read the source code directly to understand how each piece works. This looks like a working notebook for one person's penetration testing workflow rather than a general purpose tool meant for a wide audience, and its authors built it for legitimate security training and certification study rather than any other purpose.

Yoink these prompts

Prompt 1
Explain what the pwndex tool in this repo does and how its TUI works.
Prompt 2
Help me set up the recon server from this repo to track nmap scans against a lab target.
Prompt 3
Show me how this repo's notes-to-report generation for Obsidian could work.
Prompt 4
Walk me through the source code since the README doesn't explain setup steps.

Frequently asked questions

wtf is oscp?

A personal toolbox of scripts for OSCP penetration testing practice: an exploit search TUI, a recon tracking server, and misc tools.

What language is oscp written in?

Mainly PowerShell. The stack also includes PowerShell, Nmap, SearchSploit.

How hard is oscp to set up?

Setup difficulty is rated moderate, with roughly 1h+ to a first successful run.

Who is oscp for?

Mainly researcher.

View the repo → Decode another repo

This repo across BitVibe Labs

Don't trust strangers blindly. Verify against the repo.