Awesome Lists

awesome-pentest-cheat-sheets

by ByteSnipers

awesome listpushed over 2 years ago

Collection of cheat sheets useful for pentesting

AI summary

Pentest resource

A collection of cheat sheets and check lists useful for security testing and penetration

stars
373
forks
21
watching
4
awesome lists
2
entries
166
View on GitHubbytesnipers.com

Embed the badge

Show how many awesome lists link to your project. The count updates automatically.

Awesome Lists badge
Markdown
[![Awesome Lists Badge](https://awesome.facts.dev/shield/ByteSnipers/awesome-pentest-cheat-sheets/links.svg)](https://awesome.facts.dev/awesome/ByteSnipers/awesome-pentest-cheat-sheets)
HTML
<a href="https://awesome.facts.dev/awesome/ByteSnipers/awesome-pentest-cheat-sheets"><img src="https://awesome.facts.dev/shield/ByteSnipers/awesome-pentest-cheat-sheets/links.svg" alt="Awesome Lists Badge" /></a>
Image URL
https://awesome.facts.dev/shield/ByteSnipers/awesome-pentest-cheat-sheets/links.svg

What's in the list

166 links in 24 sections, with live GitHub stats.activeno commit in 2y

Security Talks and Videos

General cheat sheets

Mobile Pentesting

  • Mobile App Pentest Cheat Sheet

    Collection of resources on Apple & iOS Penetration Testing

    4.6Kover 2 years
  • Mobexler

    Customised virtual machine, designed to help in penetration testing of Android & iOS applications

Mobile Pentesting / Android

Mobile Pentesting / Apple

Cloud Pentesting / Kubernetes

Cloud Pentesting / Azure

Active Directory

Pentest Methodology / Discovery

  • Google Dorks

    Google Dorks Hacking Database (Exploit-DB)

  • Shodan

    Shodan is a search engine for finding specific devices, and device types, that exist online

    373over 2 years
  • ZoomEye

    Zoomeye is a Cyberspace Search Engine recording information of devices, websites, services and components etc

  • Amass

    OWASP Network mapping of attack surfaces and external asset discovery using open source information

    12.2Kalmost 2 years
  • Censys

    Similar to shodan, search engine for specific devices including IoT

Pentest Methodology / Enumeration

Pentest Methodology / Exploitation

Pentest Methodology / Post-Exploitation

Pentest Methodology / Privilege Escalation

  • Windows / Linux Local Privilege Escalation Workshop

    The Privilege Escalation Workshop covers all known (at the time) attack vectors of local user privilege escalation on both Linux and Windows operating systems and includes slides, videos, test VMs.

    1.9K4 years
  • Basic Linux Privilege Escalation

    Linux Privilege Escalation by

  • linux-exploit-suggester.sh

    Linux privilege escalation auditing tool written in bash (updated)

    5.7Kover 2 years
  • Linux_Exploit_Suggester.pl

    Linux Exploit Suggester written in Perl (last update 3 years ago)

    1.8Kover 12 years
  • Linux_Exploit_Suggester.pl v2

    Next-generation exploit suggester based on Linux_Exploit_Suggester (updated)

    1.9Kover 3 years
  • Linux Soft Exploit Suggester

    Linux-soft-exploit-suggester finds exploits for all vulnerable software in a system helping with the privilege escalation. It focuses on software packages instead of Kernel vulnerabilities

    222over 3 years
  • checksec.sh

    Bash script to check the properties of executables (like PIE, RELRO, PaX, Canaries, ASLR, Fortify Source)

    2.1Kalmost 2 years
  • linuxprivchecker.py

    This script is intended to be executed locally on a Linux box to enumerate basic system info and search for common privilege escalation vectors such as world writable files, misconfigurations, clear-text passwords and applicable exploits (@SecuritySift)

  • LinEnum

    This tool is great at running through a heap of things you should check on a Linux system in the post exploit process. This include file permissions, cron jobs if visible, weak credentials etc.(@Rebootuser)

    7.1K3 years
  • linPEAS

    LinPEAS - Linux Privilege Escalation Awesome Script. Check the Local Linux Privilege Escalation checklist from

    16.4Kalmost 2 years
  • MimiPenguin

    A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz.

    3.8Kover 3 years
  • PowerUp

    Excellent powershell script for checking of common Windows privilege escalation vectors. Written by

    12K6 years
  • PowerUp Cheat Sheet
    1Kalmost 9 years
  • Windows Exploit Suggester

    Tool for detection of missing security patches on the windows operating system and mapping with the public available exploits

    4Kover 3 years
  • Sherlock

    PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities

    1.9K8 years
  • Watson

    Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

    1.6Kalmost 6 years
  • Precompiled Windows Exploits

    Collection of precompiled Windows exploits

    1.8K6 years
  • Metasploit Modules
    34.4Kalmost 2 years

Web Pentesting

Binary Exploitation

Learning Platforms

Bug Bounty

Bug Bounty / Tools

Bug Bounty / Tools Online

  • revshells.com

    Reverse shell payload generator ( )

  • Segfault

    Segfault: Free disposable root servers (by )

  • suip.biz

    Various free online pentesting tools like nmap, wpscan, sqlmap

  • XSS'OR Encoder/Decoder

    Online Decoder/Encoder for testing purposes (@evilcos)

  • WebGun

    WebGun, XSS Payload Creator (@brutelogic)

  • Hackvertor

    Tool to convert various encodings and generate attack vectors (@garethheyes)

  • JSFiddle

    Test and share XSS payloads,

Bug Bounty / Payloads

  • Fuzzdb

    Dictionary of attack patterns and primitives for black-box application testing Polyglot Challenge with submitted solutions

    8.3Kalmost 3 years
  • SecList

    A collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more

    59.2Kalmost 2 years

Bug Bounty / Write-Ups

Bug Bounty / Wireless Hacking

  • wifite2

    Full automated WiFi security testing script

    30almost 10 years

Bug Bounty / Defence Topics

Bug Bounty / Programming

More related projects

Add a GitHub project

Missing a project or an awesome list? Paste its GitHub URL and we fetch it right away.