My Pentesting Cheatsheet

Home
Commands Only Summary
- Some other cool websites
Preparation
Information Gathering
Vulnerability Assessment
Pentesting Machine
Enumeration
- NMAP Scan types explained
- Firewall and IDS/IPS Evasion
Footprinting
Web Information Gathering
Vulnerability Assessment
File Transfers
Shells & Payloads
- Reverse Shells + Bind + Web
Password Attacks
Attacking Common Services
Pivoting, Tunneling, and Port Forwarding
Active Directory Enumeration & Attacks
Using Web Proxies
Login Brute Forcing
SQL Injection Fundamentals
- Mitigating SQL Injection
SQLMap Essentials
Cross-Site Scripting (XSS)
- Prevention
File Inclusion
File Upload Attacks
Command Injections
- Exploitation
- Filter Evasion
Web Attacks
Attacking Common Applications
Privilege Escalation
Documentation & Reporting
- Preparation
- Reporting
Attacking Enterprise Networks
Deobfuscation
Metasploit
- msfvenom
Custom compiled files
XSS
Azure AD (Entra ID)

Powered by GitBook

On this page

Vulnerability Assessment

Disclosed Vulnerabilities descriptions

CVEdetails
Exploit DB
Vulners
Packet Storm Security
NIST

PreviousInformation Gathering NextPentesting Machine

Last updated 9 months ago