Resources

Cheatsheets and tools to keep at hand while you work on a box. Type your IP and port once and every command fills itself in.

Shells and post-exploitation

Cheatsheet Reverse shell generator Reverse shells in bash, nc, Python, PHP, Perl, PowerShell and more, with your IP and port already filled in. Includes listeners and msfvenom payloads. 35 commands Open → Cheatsheet Upgrade your shell to a full TTY Turn a reverse shell into an interactive terminal with Ctrl+C, arrow keys, tab completion and the right size. Step by step, with script, Python or socat. 19 commands Open → Cheatsheet File transfer Move tools to the target and pull files back, on Linux and Windows - HTTP, SMB, netcat, base64, /dev/tcp, certutil and more. 27 commands Open → Cheatsheet Port forwarding and pivoting Reach internal services and other networks from the compromised host with SSH, chisel, ligolo-ng, socat and proxychains. 17 commands Open →

Web

Cheatsheet SQL injection payloads SQLi payloads per engine (MySQL, PostgreSQL, MSSQL, Oracle and SQLite) to detect, enumerate, extract data, go blind, read files and run commands. Plus sqlmap. 77 commands Open → Cheatsheet LFI, SSTI, command injection and XXE Payloads for path traversal and LFI (PHP wrappers, log poisoning), SSTI per template engine, command injection with filter evasion, and XXE. 37 commands Open → Cheatsheet Web enumeration Fuzzing directories, files, subdomains, vhosts and parameters with ffuf and gobuster, plus fingerprinting, exposed .git, CMS and login brute force. 21 commands Open → Tool JWT analyser Decode a JSON Web Token, spot common flaws (alg none, weak secret, kid, jku) and build tampered tokens. 11 commands Open →

Privilege escalation

Cheatsheet Exploitable Linux binaries How to get a shell or read and write files with common binaries when you can run them with sudo, they are SUID or they have capabilities. 113 commands Open → Cheatsheet Linux privilege escalation Checklist with commands to get root - sudo, SUID, capabilities, cron, internal services, credentials, groups, PATH, libraries and kernel. 40 commands Open → Cheatsheet Windows and Active Directory privilege escalation Commands to enumerate Windows and get SYSTEM (SeImpersonate, services, AlwaysInstallElevated, credentials) and Active Directory basics (Kerberoasting, AS-REP, BloodHound, DCSync). 35 commands Open →

Active Directory and red team

Cheatsheet Active Directory in depth BloodHound with handy Cypher queries, ADCS from ESC1 to ESC16, NTLM relay, delegation attacks and Impacket command by command. 43 commands Open → Cheatsheet C2 and post-exploitation Cheat sheets for Sliver, Havoc and Mythic, Windows and Linux persistence, and lateral movement with PsExec, WMI, WinRM and DCOM. 34 commands Open → Cheatsheet Evasion explained: AMSI, ETW and AppLocker What AMSI, ETW, AppLocker and Constrained Language Mode are, how they stop you and how they are practised on HTB machines. Teaching-focused. 14 commands Open → Cheatsheet Phishing explained: macros, HTA and LNK How an Office macro, an HTA and a shortcut fire, and —above all— how they are detected and blocked today. A teaching reference, not an attack kit. 13 commands Open →

Cloud

Cheatsheet Cloud: AWS, Azure/Entra ID and GCP Enumeration, IAM privilege escalation and tooling (Pacu, ROADtools, ScoutSuite) for the three big providers. 20 commands Open →

Recon and networking

Cheatsheet Nmap and service enumeration Fast and thorough port scanning with nmap, alternatives without nmap and commands to enumerate SMB, FTP, SNMP, NFS, DNS and more. 28 commands Open → Tool Subnet calculator Network, broadcast, netmask, wildcard, host range and binary view from an IP and its mask. 4 commands Open →

Hashes and encoding

Tool Hash identifier Paste a hash to see what type it may be, with the hashcat mode, the john format and ready-to-run cracking commands. 8 commands Open → Tool Encoder and decoder Base64, URL, hex, HTML, ROT13, binary and PowerShell -enc, chainable. Computes MD5, SHA-1, SHA-256, SHA-512 and NTLM on the fly. 10 commands Open →

Generators

Tool msfvenom generator Pick a payload and format and get the msfvenom command, the right listener (netcat or multi/handler) and how to deliver and run it. Open → Tool PowerShell one-liner (-enc) Builds a powershell -enc command (Base64 UTF-16LE): reverse shell, download-and-run or your own code, with the listener and the decoder. Open → Tool Impacket / NetExec builder Set the domain, user and a password, hash or Kerberos ticket and generate the Impacket and NetExec commands to validate, enumerate, kerberoast, execute and dump. Open →

The tools run in your browser: whatever you paste (tokens, hashes...) is not sent anywhere.