Skip to content

Cheatsheet

Wordlist Sources

Initializing search

trojand/cheatsheet

Cheatsheet

trojand/cheatsheet

OSINT
OSINT
- Useful Tools & Online Services
- Backlinks Checker
Network
Network
- Network Reconnaissance
- Password Spraying
- Connections
  Connections
  - Plink with RDP
  - SSH Tunneling + SSHuttle and Chisel
- ARP Poisoning
  ARP Poisoning
  - Bettercap
- Sniffing
  Sniffing
  - Passive Mode in Kali
- Data Exfiltration
  Data Exfiltration
Infrastructure Setup
Infrastructure Setup
Linux
Linux
- Download and install apt, pip3 packages and dependencies offline
Web
Web
- Web Reconnaissance
- Burp Suite
  Burp Suite
- Node.js
- Deserialization
- SSTI
- XXE Injection
- XSS
- SQL Injection
- Whitebox
Windows
Windows
- Initial Foothold
- Post-Exploitation
- Misc
  Misc
  - Domain User Tracking
  - Pop calc and alike
- Shells
- Evasion
Password Cracking
Password Cracking
- Hashcat Cheatsheet
- Hashcat Practical Ruleset
OSCP
OSCP
- General OSCP Cheatsheet
- Buffer_Overflow
  Buffer_Overflow
  - General Methodology
  - Egghunting - Basic
  - Skeleton Script
  - Fuzzing_Scripts
    Fuzzing_Scripts
    
    Simple Fuzz
    
    Vuln Fuzzer
  - Completed_Scripts
    Completed_Scripts
    
    Brainpan
- Custom_Scripts
  Custom_Scripts
  - Autorecon Mods
Useful commands
Useful commands
Methodologies
Methodologies
- Pentesting Sharepoint
Wordlists
Wordlists
- Wordlist Sources
Woah I'm Blue!
Woah I'm Blue!

Wordlists #

Good wordlists

General sources
- Seclists
- Assetnote
Subdomains
- Seclists
  - /Discovery/dns/*
Sharepoint

Last update: January 22, 2021

Previous Pentesting Sharepoint

Next Ransomware

Made with Material for MkDocs