My Pentesting Cheatsheet

Home
Commands Only Summary
- Some other cool websites
Preparation
Information Gathering
Vulnerability Assessment
Pentesting Machine
Enumeration
- NMAP Scan types explained
- Firewall and IDS/IPS Evasion
Footprinting
Web Information Gathering
Vulnerability Assessment
File Transfers
Shells & Payloads
- Reverse Shells + Bind + Web
Password Attacks
Attacking Common Services
Pivoting, Tunneling, and Port Forwarding
Active Directory Enumeration & Attacks
Using Web Proxies
Login Brute Forcing
SQL Injection Fundamentals
- Mitigating SQL Injection
SQLMap Essentials
Cross-Site Scripting (XSS)
- Prevention
File Inclusion
File Upload Attacks
Command Injections
- Exploitation
- Filter Evasion
Web Attacks
Attacking Common Applications
- Application Discovery & Enumeration
- Content Management Systems (CMS)
Linux Privilege Escalation
Privilege Escalation
- Windows
- Linux Privilege Escalation
Documentation & Reporting
Attacking Enterprise Networks
Deobfuscation
Metasploit
- msfvenom
Custom compiled files
XSS

Powered by GitBook

On this page

Vulnerability Assessment

Disclosed Vulnerabilities descriptions

CVEdetails
Exploit DB
Vulners
Packet Storm Security
NIST

PreviousInformation Gathering NextPentesting Machine

Last updated 6 months ago