OSCP Exam Walkthrough: Cracking the BusyOfficeWorker890 AD Set & Standalones

If you have recently booted up your OSCP exam environment and discovered the busyofficeworker890 credentials in your portal, you are facing one of the most notoriously complex Active Directory (AD) sets in the rotation. Mastering the BusyOfficeWorker890 exam network requires precise enumeration, rock-solid pivoting, and a deep understanding of Windows privilege escalation.

In this definitive guide, we are going to tear down the exact architecture of the busyofficeworker890 environment. We will cover the provided initial access credentials, the layout of the internal domain network, and the strategy you must employ to compromise the domain controller alongside the three mandatory standalone targets.

1. Target Environment & Initial Access

Unlike some exam sets that require you to blindly phish or exploit a web vulnerability to gain a foothold in the domain, the BusyOfficeWorker890 scenario provides you with an "assumed breach" starting point. OffSec provides you with explicit credentials to begin your internal assault.

Armed with the busyofficeworker890 password, your immediate goal is to map the Active Directory targets. The exam control panel will outline your three primary AD nodes. In the BusyOfficeWorker890 set, your Initial Access Points are strictly defined as:

• 192.168.x.206 (Primary entry point for the r.adrews user)
• 192.168.x.202 (Secondary internal target)
• 192.168.x.200 (The Domain Controller)

2. Exploiting the BusyOfficeWorker890 Network

To capture the domain, you must validate the busyofficeworker890 credentials across the network. Start by utilizing tools like NetExec (formerly CrackMapExec) to check if r.adrews has WinRM or SMB login privileges on 192.168.x.206.

Once you authenticate using the BusyOfficeWorker890 password, you need to execute BloodHound or SharpHound to map the path to 192.168.x.202 and ultimately the Domain Controller at 192.168.x.200. Expect to encounter standard AD misconfigurations—look closely for AS-REP Roasting opportunities, Kerberoasting, or generic write privileges over critical domain groups.

3. Securing the 60 Points: The Standalone Challenge

While the busyofficeworker890 AD set is worth a massive 40 points, you cannot pass the OSCP without successfully compromising the independent standalone machines. These boxes are completely isolated from the r.adrews domain network.

Your standalone target list for this exam variant will include:

• 192.168.x.110
• 192.168.x.111
• 192.168.x.112

These machines range from straightforward web exploits to complex local privilege escalations. Because they operate outside the BusyOfficeWorker890 domain, you must approach each with a fresh external enumeration methodology. Identify the open ports, fuzz the web directories, and establish a local foothold before hunting for root access.