โ Home
Cheat sheets
259 plain-text offensive-security command references โ recon, exploitation, Active Directory, cloud, web and post-exploitation. Each opens as its own page you can read, search or print.
Authorized use only. These are offensive references for testing systems you own or are explicitly permitted to test. You are responsible for staying within the law.
259 results
- 403-BYPASS
- AD-EXPLOITATION
- ADCS-ATTACKS
- AIRCRACK-NG
- AMASS
- ANONYMIZATION
- API-SECURITY
- ARJUN
- AWS-IAM-PRIVESC
- AZURE-AD-SECURITY
- BBQSQL
- BED
- BETTERCAP
- BITSADMIN
- BLOCKCHAIN-SECURITY
- BLOODHOUND
- BLOODYAD
- BURPSUITE-ADVANCED
- BURPSUITE
- C2-FRAMEWORKS
- CAIDO
- CENSYS
- CERTIPY
- CERTSYNC
- CERTUTIL
- CHISEL
- CISCO-AUDITING-TOOL
- CISCO-OCS
- CISCO-TORCH
- COERCER
- COMMAND-INJECTION
- COPY-ROUTER-CONFIG
- COVENANT
- CRACKMAPEXEC
- CYBERCHEF
- DALFOX
- DIG
- DMITRY
- DNSENUM
- DNSRECON
- DNSTRACER
- DNSWALK
- DOCKER-SECURITY
- DONUT
- DOONA
- DSQUERY
- EDR-EVASION
- ENTRA-ID-ATTACKS
- ENUM4LINUX
- ETTERCAP
- EVASION-TECHNIQUES
- EVIL-DCOM
- EVILGINX2
- EVILWINRM
- FEROXBUSTER
- FFUF
- FIERCE
- FIREWALK
- FOCA
- Forensics
- FORFILES
- FRAGROUTE
- FRAGROUTER
- FRIDA
- GCP-SECURITY
- GDPR-CHECKLIST
- GHIDRA
- GHOST-PHISHER
- GITLEAKS
- GO-SECURITY
- GOBUSTER
- GOOFILE
- GoogleDork
- GOPHISH
- GRAPHQL-SECURITY
- GRAVWELL
- HASHCAT
- HAVOC-C2
- HAYABUSA
- HOLEHE
- HOSTAPD-WPE
- HPING3
- HTTP-SMUGGLING
- HTTPX
- HYDRA
- IAC-SECURITY
- IDENT-USER-ENUM
- IMPACKET
- INSECURE-DESERIALIZATION
- INTRACE
- IOT-SECURITY
- IPTABLES
- IRC
- IRONPORT_ESA
- JOHN
- JSQL
- JWT-ATTACKS
- KATANA
- KERBEROASTING
- KERBRUTE
- KISMET
- KUBERNETES-PENTEST
- LATERAL-MOVEMENT
- latex
- LBD
- LDAP-ENUM
- LFI-RFI
- LIGOLO-NG
- LINPEAS
- LinuxPrivilegeEsc
- LLM-SECURITY
- LOCKPICKING
- LOLBAS
- LSASSY
- LYNIS
- MALTEGO
- MALWARE-ANALYSIS
- MASSCAN
- METAGOOFIL
- METASPLOIT
- MICROBURST
- MIMIKATZ
- MISP
- MITM6
- MITRE-REDTEAM
- MOBILE-PENTESTING
- MOBILE-REVERSE-ENG
- MSFVENOM
- NAABU
- NESSUS-ADVANCED
- NETCAT
- NETEXEC
- NIST-CSF2
- NLTEST
- NMAP
- NTLM-RELAY
- NUCLEI
- OAUTH2-ATTACKS
- OHWURM
- OPENVAS
- OSCANNER
- OSCP-METHODOLOGY
- OSINT-TECHNIQUES
- OWASP-MOBILE-TOP10
- OWASP-TOP10
- P0F
- PACU
- PARSERO
- PASSWORD-SPRAYING
- PENTEST-REPORTING
- PGP
- PhishingAnalysis
- PHYSICAL-PENTEST
- PIA-TEMPLATE
- POWERFUZZER
- POWERVIEW
- PROTOTYPE-POLLUTION
- PROWLER
- PROXYCHAINS
- PS
- PWNTOOLS
- PYPYKATZ
- PYTHON-SECURITY
- QRADAR-AQL
- RECON-NG
- REDLINE
- REDTEAM-COMMS
- REG
- REGULAR EXPRESSIONS
- RESPONDER
- REVERSE SHELL
- RISK-ASSESSMENT
- ROBOCOPY
- ROPGADGET-PWNDBG
- Rsync
- RUBEUS
- RUST-SECURITY
- RUSTSCAN
- SAST-DAST-TOOLS
- SC
- SCAPY
- SCHTASKS
- SCOUTSUITE
- scp
- SECURE-CODING
- Sed
- SEMGREP
- SET
- SFUZZ
- SHARPHOUND
- SHERLOCK
- SHODAN
- SIDGUESSER
- SIPARMYKNIFE
- SLIVER
- SMBMAP
- SMTP-USER-ENUM
- SNMPCHECK
- SNTOP
- SOCIAL-ENGINEERING
- SOCIAL-MEDIA-OSINT
- SPARTA
- SPIDERFOOT
- SQLDICT
- SQLInjection
- SQLMAP
- SQLNINJA
- SQLSUS
- SSLCAUDIT
- SSLSCAN
- SSLYZE
- SSRF-BYPASS
- STRACE
- SUBDOMAIN-TAKEOVER
- SUBFINDER
- SYSINTERNALS
- SYSTEMCTL
- TAKEOWN
- tcpdump
- TERRAFORM-SECURITY
- THC-IPV6
- THEHARVESTER
- THEHIVE
- THREAT-INTEL-PLATFORMS
- TIBER-EU
- TLSSLED
- TNSCMD10G
- TPRM
- TRUFFLEHOG
- TWOFI
- UNISCAN
- URLCRAZY
- UsefulLinuxTools
- VILLAIN
- WAFW00F
- WAPITI
- WEB-CACHE-POISONING
- WEBSCARAB
- WEBSOCKET-SECURITY
- WEBSPLOIT
- WEVTUTIL
- WHATWEB
- WINDOWS-EVENTS
- WINDOWS-IR-EVENTS
- WINPEAS
- WINRM-PSEXEC
- WIREGUARD
- WIRESHARK
- WMIC
- WPSCAN
- XARGS
- XPLICO
- XSS-MODERN
- XSS
- XSSER
- XXE
- YARA-X
- ZAPROXY
- ZEROTIER-TAILSCALE
No cheat sheet matches that.