ABCDEFGHIJKLMNOPQRSTUVWXYZ
1
LainKusanagi list of OSCP like machines
2
>Whoami>What is this list for
3
-Before and while doing PEN 200 course and after failing my first attempt I completed multiple machines in multiple hacking platforms.
-I did all the PEN 200 course along with all the challenge labs that where introduced in the 2023 version of the PEN 200 (including the challenge lab network other people skip).
-I failed my first attempt with 60 points and then passed my second attempt with 90 points. I experienced completely different exam sets in each attempt.
-I also did the challenge labs added on October 2024 before my learn one subscription ended.
-All of this experience gave me a good sense of what is OffSec style of boxes and what is important to know in the exam

Have feedback or suggestions? Let me know here:
https://x.com/unknownseeker99
https://www.reddit.com/user/JosefumiKafka/
https://www.linkedin.com/in/luis-moret-4a42ab246/
-This is a list of machines I consider good for practice before doing the PEN 200 course, challenge labs and OSCP exam however this is not a replacement for the actual course and I recommend you to go through all of the course, exercises and challenges before attempting the exam.
-The machines in this list where selected because either they teach important techniques and concepts found in the course and labs, have similar style to machines made by offsec or where in a way crucial to helping me develop my methodology and help me pass my exam.
-This list overlaps a lot with the famous TJ Null list however it also filters out boxes that may be too outside of the scope of the PEN 200 and OSCP exam and includes boxes from other hacking platforms such as Tryhackme and VirtualHackingLabs, still I added some boxes in this list that may have elements harder than OSCP but I believe are worth doing as they may have some other aspect that is crucial to know and practice


Support me: https://buymeacoffee.com/lainkusanagi
4
Useful forks made by the community (I do not maintain these forks so they may not reflect latest changes):
-List with difficulty ratings made by Jubba402 https://docs.google.com/spreadsheets/d/13YoNQuY6HC5ot-lZiX2tY9pR5mvwnp3xV6lHs78DlqQ/
-Study tracker combining this list and TJ Null list with difficulty ratings made by Obeyeater https://docs.google.com/spreadsheets/d/1nzEN0G6GzneWCfs6qte6Qqv-i8cV_j6po-tFlZAOx1k/
5
HacktheboxTryhackme
6
Start learning to Try harder here. Don’t fully skip hackthebox some boxes have important concepts that are rare even in PG practice like SNMP and Keepass also AD ones are pretty good practice even if harder than OSCP in some ways. At the very least watch ippsec videos and take notesMore guided and friendly approach for some rooms but still great boxes and rooms for prep. Active Directory ones here are very good practice for the OSCP.
7
LinuxWindowsActive Directory and NetworksLinuxWindows
Active Directory and Networks
Other recommended rooms
8
SeaMarkupActiveMr RobotSteel MountainAttacktive DirectorySQL Injection Lab
9
NibblesJerryForestThompsonYear of the OwlAttacking KerberosLinux Privilege Escalation
10
SolidstateNetmonSaunaKenobiRetroWreath NetworkWindows Privilege Escalation
11
PoisonServmonMonteverdeGameZoneAlfredResetGit Happens
12
EditorChatterboxTimelapseSkynetRelevantVulnnet: ActiveNahamStore
13
SundayJeevesFlightDaily bugleBlueprintEnterprise
14
KeeperSniperReturnLazy adminHackparkLedger
15
PilgrimageQuerierBlackfieldTomghostWeaselRecommended paths
16
CozyhostingGiddyCicadaRootmeAllSignsPoint2Pwnage Assumed Breach Scenarios:Cyber Security 101
17
CodifyBountyEscapeCMesSAnthemCorpJr Penetration Tester
18
TartarsauceArticTheFrizz (harder)UltratechHack Smarter Security (harder)Lateral Movement and PivotingOffensive Pentesting
19
JarvisRemoteInternalCyberlensExploiting Active Directory
20
TabbyBuffAssumed Breach Scenarios:Zeno
21
UsageLoveAdministratorBoiler CTF
22
MentorSecnotesEscapeTwoWonderland
23
DevvortexAccessCertified (harder)Silver Platter
24
IrkedMailingPuppy (harder)Year of the Jellyfish
25
PopcornHeist
26
BashedProLabs:Update:
27
BrokerDante
8/2/2025 Editor will replace Knife in htb list
28
AnalyticsZephyr (harder)
9/7/2025 Added BuildingMagic to HackSmarter (new platform) list
29
Networked
9/12/2025 Added ShareThePain to HackSmarter list
30
UpDown
9/19/2025 Added PivotSmarter and BankSmarter to HackSmarter list
31
SwagshopAWS (Not in the exam)
9/26/2025 Added Ascension and Arasaka to HackSmarter list
32
NinevehEpsilon
33
PandoraGobox
34
OpenAdminBucket
35
Precious
36
Busqueda
37
Monitored
38
BoardLight
39
Magic
40
Help
41
Editorial
42
Builder
43
Linkvortex
44
UnderPass
45
Dog
46
47
Proving Grounds PracticeVirtual Hacking Labs
48
The real OSCP like boxes, this is just a list with the ones that are best practice and removing the overly complicated ones that are too out of scope and those that were boxes meant to be mostly for OSEP and OSED (example Kyoto and Nara) that were in TJNull list plus adding some new onesVery under rated platform with very OSCP like machines, people that have used it really recommend it for OSCP including me. It has been very crucial help for those that have failed attempts to be able to pass and they are good practice for standalones.
49
LinuxWindowsActive Directory and NetworksLinuxWindows
50
ClamAVKevinAccessTechblogSteven
51
PelicanInternalResourcedBackupadmin V2Aaron
52
PaydayAlgernonNagoyaWeb01-Dev V2Anthony
53
SnookumsJackoHokkaidoWeb01-Prd V2Jennifer
54
BratarinaCraftHutchForumWinAS01
55
PebblesSquidVaultQuickAS45
56
NibblesNickelTikiTrace
57
HetemitMedJedTreat it like a small networkHelpdesk V2React
58
ZenPhotoBillybossSkillForge (Linux)VPS1723 V2
59
NukemShenziCMS02 V2
60
CockpitAuthByRecords
61
ClueSlortTrails
62
ExtplorerHepetDolphin V2
63
PostfishDVR4Crash
64
HawatMiceAWS (Not in the exam)Natural
65
WallaMonsterPathwayMantis
66
PCFishFed V2
67
ApexCMS01
68
SorcererTracking
69
SybarisJS01
70
PeppoPBX
71
HunitCode V2
72
ReadysTeamspeak
73
AstronautCMS101
74
BullyboxFW01
75
MarketingCore
76
ExfiltratedWebsrv01
77
FanatasticMon02
78
QuackerJackGraphs01
79
WomboPM V2
80
FluTracker
81
Roquefort
82
Levram
83
Mzeeav
84
LaVita
85
Xposedapi
86
Zipper
87
Workaholic
88
Fired
89
Scrutiny
90
SPX
91
Vmdak
92
Mantis
93
BitForge
94
WallpaperHub
95
Zab
96
SpiderSociety
97
98
HackSmarterVulnLab / Hackthebox
99
New platform made by the Hack Smarter communityVunLab is an amazing platform focused on red teaming, the platform recently joined hackthebox and vulnlab boxes will become available in hackthebox. For simplicity sake VulnLab and Hackthebox will keep being separate lists
100
LinuxWindowsActive Directory and NetworksLinuxWindows
Active Directory and Networks