awesome-pentest-cheat-sheets

SANS PowerShell Cheat Sheet from SEC560 Course

An open-source inventory of tools, resources, CTF platforms and Operating Systems about CyberSecurity. ( )

Security Cheat Sheets

A collection of security cheat sheets

Google Dorks Hacking Database (Exploit-DB)

Shodan is a search engine for finding specific devices, and device types, that exist online

Zoomeye is a Cyberspace Search Engine recording information of devices, websites, services and components etc

Amass

OWASP Network mapping of attack surfaces and external asset discovery using open source information

enum4linux-ng

Python tool for enumerating information from Windows/Samba systems

Empire Cheat Sheet

is a PowerShell and Python post-exploitation framework

's exploit development in one picture

Java Deserialization Cheat Sheet

A cheat sheet for pentesters about Java Native Binary Deserialization vulnerabilities

Arr0way's LFI Cheat Sheet

Aptive's LFI Cheat Sheet

The ultimate guide to the Metasploit Framework

A quick reference guide

PowerSploit Cheat Sheet

is a powershell post-exploitation framework

PHP htaccess Injection Cheat Sheet

htaccess Injection Cheat Sheet by PHP Secure Configuration Checker

Pentestmonkey Reverse Shell Cheat Sheet

Arr0way's Reverse Shell Cheat Sheet

Netsparker's SQL Injection Cheat Sheet

Windows / Linux Local Privilege Escalation Workshop

The Privilege Escalation Workshop covers all known (at the time) attack vectors of local user privilege escalation on both Linux and Windows operating systems and includes slides, videos, test VMs

Linux Privilege Escalation by

linux-exploit-suggester.sh

Linux privilege escalation auditing tool written in bash (updated)

Linux_Exploit_Suggester.pl

Linux Exploit Suggester written in Perl (last update 3 years ago)

Linux_Exploit_Suggester.pl v2

Next-generation exploit suggester based on Linux_Exploit_Suggester (updated)

Linux Soft Exploit Suggester

linux-soft-exploit-suggester finds exploits for all vulnerable software in a system helping with the privilege escalation. It focuses on software packages instead of Kernel vulnerabilities

checksec.sh

bash script to check the properties of executables (like PIE, RELRO, PaX, Canaries, ASLR, Fortify Source)

This script is intended to be executed locally on a Linux box to enumerate basic system info and search for common privilege escalation vectors such as world writable files, misconfigurations, clear-text passwords and applicable exploits (@SecuritySift)

LinEnum

This tool is great at running through a heap of things you should check on a Linux system in the post exploit process. This include file permissions, cron jobs if visible, weak credentials etc.(@Rebootuser)

linPEAS

LinPEAS - Linux Privilege Escalation Awesome Script. Check the Local Linux Privilege Escalation checklist from

MimiPenguin

A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz

PowerUp

Excellent powershell script for checking of common Windows privilege escalation vectors. Written by

Windows Exploit Suggester

Tool for detection of missing security patches on the windows operating system and mapping with the public available exploits

Sherlock

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities

Watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

Precompiled Windows Exploits

Collection of precompiled Windows exploits

SQLmap Tamper Scripts General/MSSQL/MySQL

Filters for the best sniffing tool

Online Decoder/Encoder for testing purposes (@evilcos)

WebGun, XSS Payload Creator (@brutelogic)

Tool to convert various encodings and generate attack vectors (@garethheyes)

Test and share XSS payloads,

Fuzzdb

Dictionary of attack patterns and primitives for black-box application testing Polyglot Challenge with submitted solutions

SecList

A collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more

XSS Polyglot Payloads #1

Unleashing an Ultimate XSS Polyglot list by 0xsobky

's XSS

Browser's-XSS-Filter-Bypass-Cheat-Sheet

Excellent List of working XSS bypasses running on the latest version of Chrome / Safari, IE 11 / Edge created by Masato Kinugawa

Bug Bounty Reference

huge list of bug bounty write-up that is categorized by the bug type (SQLi, XSS, IDOR, etc.)

Categorized Facebook Bug Bounties write-ups

List of online available vulnerable applications for learning purposes

Hands-on Pentesting Labs (OSCP style)

Hundreds of challenges are available to train yourself in different and not simulated environments

Vulnerable By Design VMs for practical 'hands-on' experience in digital security

Damn Vulnerable Xebia Training Environment

Docker Container including several vurnerable web applications (DVWA,DVWServices, DVWSockets, WebGoat, Juiceshop, Railsgoat, django.NV, Buggy Bank, Mutilidae II and more)

List of offline available vulnerable applications for learning purposes

a vulnerable SOAP web service lab environment

vulnerable Flask Web App lab environment

wifite2

Full automated WiFi security testing script

The following tips should help you to secure a container based system

Windows Domain Hardening

A curated list of awesome Security Hardening techniques for Windows

JavaScript Cheat Sheet

Learn javascript in one picture

Python Cheat Sheet #1

Learn python3 in one picture

Python Cheat Sheet #2

Learn python3 in one picture

List of helpful re-usable code snippets in Python