Skip to content

mimicbox/cheatsheets

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

63 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

cheatsheets TODO: Organize this thing

All of my cheatsheets for pentest/ctf

Sourced from around the web, or compiled by myself

Payloads

https://github.com/swisskyrepo/PayloadsAllTheThings Hugely helpful repo of pretty much everything payload

Reverse Shells

https://highon.coffee/blog/reverse-shell-cheat-sheet/

Upgrading a Shell to tty (including ctrl+c and tab complete)

python3 -c 'import pty; pty.spawn("/bin/bash")'
ctrl + z
stty -a <--- take note of rows and columns
stty raw -echo; fg
stty rows <x> columns <y>

Further info: https://blog.ropnop.com/upgrading-simple-shells-to-fully-interactive-ttys/

Session Hijacking

https://resources.infosecinstitute.com/topic/session-hijacking-cheat-sheet/

GTFOBINS(exploiting UNIX binaries)

https://gtfobins.github.io/

OWASP Cheatsheet series

https://github.com/OWASP/CheatSheetSeries

Active Directory Exploitation

https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet

REGEX (Because who remembers regex)

https://cheatography.com/davechild/cheat-sheets/regular-expressions/

https://pythex.org <--- great tool to test REGEX for python

Python

https://www.pythoncheatsheet.org/

CTF Resources (Including links to CTFs themselves)

https://github.com/apsdehal/awesome-ctf

Linux Priv Escalation

https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/

Windows Priv Escalation

https://infosecwriteups.com/privilege-escalation-in-windows-380bee3a2842

HTTP Headers

https://kapeli.com/cheat_sheets/HTTP_Header_Fields.docset/Contents/Resources/Documents/index

OSINT Framework

https://osintframework.com/

DNS Enumeration (Helpful for subdomains)

https://medium.com/@klockw3rk/back-to-basics-dns-enumeration-446017957aa3

Google Dorking

https://www.sans.org/security-resources/GoogleCheatSheet.pdf

More powershell commands

https://book.hacktricks.xyz/windows/basic-powershell-for-pentesters/powerview

INFOSEC Infographics

https://medium.com/malware-buddy/security-infographics-9c4d3bd891ef#18dd

THC Cheat Sheet (Hacking Tricks and Tips)

https://github.com/hackerschoice/thc-tips-tricks-hacks-cheat-sheet

About

All of my cheatsheets for pentest/ctf/infosec

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published