CheatSheets

CURL DNS File Transfer Hydra Impacket JohnTheRipper NCAT NMAP Online Resources Reverse Shell Wordlists

Active Directory

Mindmap Attacking AD Linux AD

Cloud

AWS Azure Google Terraform

Container

Docker Kubernetes

Linux

Penetration Testing Checklist Enumeration Privilege Escalation Post Exploitation Services Tools

Network

Data Exfiltration Port Scanning Reconnaissance Pivoting Services Traffic Analysis

Tech Stack

CMS Databases DevOps Enterprise Apps IAM Monitoring Open-Source Utilities Web Servers

Windows

AV/EDR Evasion Enumeration Privilege Escalation Post Exploitation

Web Application

Reconnaissance Common Vulnerabilities Authentication Bypass API Testing

List of Useful Resources

This page lists useful online tools and resources for pentesting

Resource	Description
Segfault	Disposable Root Servers. Segfault offers free unlimited Root Servers. A new server is created for every SSH connection.
Splotify	Sploitify is an interactive cheat sheet, containing a curated list of public server-side exploits
WADComs	WADComs is an interactive cheat sheet with a curated list of offensive security tools and commands for Windows/AD environments.
GTFOBins	GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems.
LOLBAS	Living Off The Land Binaries, Scripts and Libraries. The goal of the LOLBAS project is to document every binary, script, and library that can be used for Living Off The Land techniques.
LOLDrivers	Living Off The Land Drivers is a community-driven project that provides a curated list of all Windows drivers that have been found abused by adversaries to bypass security controls and execute malicious code.
HackTricks	A comprehensive pentesting resource.
HackTricks Cloud	A comprehensive pentesting resource with detailed guides on Clouds.
PayloadsAllTheThings	A list of useful payloads and bypasses for Web Application Security.
The Book of Secret Knowledge	A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools, and more.
IT Tools	Handy tools for developers. Like OTP/QR Generator, Converters, Encryption/Decryption and many more.
CyberChef	A simple, intuitive web app for analysing and decoding data without having to deal with complex tools or programming languages.
OSCP Cheat Sheet.	Comprehensive OSCP Preparation Cheat Sheet.
Mindmaps	Many mindmaps for cyber security technologies, methodologies, courses, and certifications.
Explpoit Notes	Sticky notes for pentesting. Search hacking techniques and tools for penetration testings, bug bounty, CTFs.
Offensive Security Cheat Sheet	Offensive Security Cheatsheet.
Hacker Recipes	This project is aimed at providing technical guides on various hacking topics.