th3xace / cheatsheet-god

Penetration Testing Biggest Reference Bank - OSCP / PTP & PTX Cheatsheet

📂 Cheatsheet-God 📂

+ HUGE 4000+ Line Update Comming ETD end of Late October 4 real this time!!!

Do you have a million bookmarks saved? Do all of those bookmarks contain unique information? Github repos starred for later?

Well this is a compilation of all of these resources into a single repo known as Cheatsheet-God. No more need for bookmarked links. No need to open a web browser. Its all here for you.

This is a collection of resources, scripts and easy to follow how-to's. I have been gathering (and continuing to gather) in preparation for the OSCP as well as for general pentesting. Feel free to use however you want!

All contributions are welcomed! If you feel like you can contribute and make these documents more complete, please do! I'll acknowledge you.

If you would like to improve anything, and add to this repo, PLEASE DO!

Here's what you do:

1. Create Issue Request describing your enhancement
2. Fork this repository
3. Push some code to your fork
4. Come back to this repository and open a PR
5. After some review, get that PR merged to master
6. Make sure to update Issue Request so that I can credit you! You ROCK!

Feel free to also open an issue with any questions, help wanted, or requests!

Acknowledgments

• Inspiration: Making a cheatsheet god would be proud of using.
• Hat tip to anyone who ever contributed

  -> Much thanks to MrTsRex for Cheatsheet_Windows.txt enumerating Windows version vulnerabilities  

  -> Much thanks to susmithaaa for his contribution to Cheatsheet_PenTesting.txt password attacks section  

Essentials / Articles I'd Reccomend You Check Out

• Amazing Blog http://hackingandsecurity.blogspot.com

• OSCP Journey https://scriptkidd1e.wordpress.com/oscp-journey/

• Offensive Security PWB and OSCP My Experience http://www.securitysift.com/offsec-pwb-oscp/

• Down with OSCP http://ch3rn0byl.com/down-with-oscp-yea-you-know-me/

• Jolly Frogs - Tech Exams (Very thorough) http://www.techexams.net/forums/security-certifications/110760-oscp-jollyfrogs-tale.html

• Exploit-db https://www.exploit-db.com/

• SecurityFocus - Vulnerability database http://www.securityfocus.com/

• Vuln Hub - Vulnerable by design https://www.vulnhub.com/

• Exploit Exercises https://exploit-exercises.com/

• SecLists - collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads https://github.com/danielmiessler/SecLists

• Security Tube http://www.securitytube.net/

• Metasploit Unleashed - free course on how to use Metasploit https://www.offensive-security.com/metasploit-unleashed/

• 0Day Security Enumeration Guide http://www.0daysecurity.com/penetration-testing/enumeration.html

Get Some Practice

Hack The Box
Attack Defense 1000+ Labs!
VulnHub
Root.me
Penetration Testing Practice Lab / Vulnerable Apps/Systems
Vulhub
Vulapps
Vulnspy
Upload-Labs