{"id":395,"date":"2020-11-26T16:34:34","date_gmt":"2020-11-26T15:34:34","guid":{"rendered":"https:\/\/mikadmin.fr\/blog\/?page_id=395"},"modified":"2023-09-10T12:22:32","modified_gmt":"2023-09-10T10:22:32","slug":"pentest-cheatsheet","status":"publish","type":"page","link":"https:\/\/mikadmin.fr\/blog\/pentest-cheatsheet\/","title":{"rendered":"Pentest CheatSheet"},"content":{"rendered":"<\/span> 2<\/span> min read<\/span><\/span>

Views: 4838<\/p>\n

Pentest Tips & Tricks :<\/strong><\/p>\n\n\n\n

https:\/\/jivoi.github.io\/2015\/07\/01\/pentest-tips-and-tricks\/<\/a>
https:\/\/github.com\/Voorivex\/pentest-guide<\/a>
https:\/\/github.com\/coreb1t\/awesome-pentest-cheat-sheets<\/a>
https:\/\/github.com\/ahmetgurel\/Pentest-Hints<\/a><\/p>\n\n\n\n

\n\n\n\n

Reverse shell generator :<\/strong><\/h2>\n\n\n\n

https:\/\/www.revshells.com\/<\/a><\/p>\n\n\n\n

\n\n\n\n

Name That Hash :<\/strong><\/p>\n\n\n\n

\n

The Modern Hash Identification System<\/p>\n<\/blockquote>\n\n\n\n

https:\/\/nth.skerritt.blog\/<\/a><\/p>\n\n\n\n

\n\n\n\n

Web Application Penetration Testing Checklist :<\/h2>\n\n\n\n

https:\/\/alike-lantern-72d.notion.site\/Web-Application-Penetration-Testing-Checklist-4792d95add7d4ffd85dd50a5f50659c6<\/a><\/p>\n\n\n\n

https:\/\/r3surr3c7.gitbook.io\/notes\/web-pentesting-checklist<\/a><\/p>\n\n\n\n

https:\/\/pentestbook.six2dez.com\/others\/web-checklist<\/a><\/p>\n\n\n\n

https:\/\/thackamura.github.io\/web-checklist\/<\/a><\/p>\n\n\n\n

\n\n\n\n

API-Security-Checklist :<\/h2>\n\n\n\n

https:\/\/github.com\/shieldfy\/API-Security-Checklist<\/a><\/p>\n\n\n\n

\n\n\n\n

WADComs :<\/h2>\n\n\n\n

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows\/AD environments.<\/em><\/p>\n\n\n\n

https:\/\/wadcoms.github.io\/<\/a><\/p>\n\n\n\n

\n\n\n\n

XSS Cheat Sheet :<\/h2>\n\n\n\n

https:\/\/portswigger.net\/web-security\/cross-site-scripting\/cheat-sheet<\/a><\/p>\n\n\n\n

https:\/\/hackersonlineclub.com\/cross-site-scripting-xss\/<\/a><\/p>\n\n\n\n

https:\/\/0xhorizon.eu\/cheat-sheet\/xss\/<\/a><\/p>\n\n\n\n

https:\/\/kipalog.com\/posts\/Some-XSS-payload<\/a><\/p>\n\n\n\n

https:\/\/chawdamrunal.medium.com\/xss-cheat-sheet-e8b8261963c9<\/a><\/p>\n\n\n\n

https:\/\/book.hacktricks.xyz\/pentesting-web\/xss-cross-site-scripting<\/a><\/p>\n\n\n\n

https:\/\/snoopysecurity.github.io\/web-application-security\/2019\/08\/02\/08_common_xss_payloads_i_use.html<\/a><\/p>\n\n\n\n

https:\/\/netsec.expert\/posts\/xss-in-2021\/<\/a><\/p>\n\n\n\n

https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/XSS_Filter_Evasion_Cheat_Sheet.html<\/a><\/p>\n\n\n\n

\n\n\n\n

SQL Injection CheatSheet :<\/h2>\n\n\n\n

https:\/\/www.hackingloops.com\/sql-injection-cheat-sheet\/<\/a><\/p>\n\n\n\n

https:\/\/github.com\/kleiton0x00\/Advanced-SQL-Injection-Cheatsheet<\/a><\/p>\n\n\n\n

https:\/\/admiralgaust.github.io\/SQL-Injection-cheat-sheet\/<\/a><\/p>\n\n\n\n

https:\/\/cybr.com\/ethical-hacking-archives\/sqlmap-cheat-sheets-to-help-you-find-sql-injections\/<\/a><\/p>\n\n\n\n

https:\/\/www.interviewbit.com\/sql-injection-cheat-sheet\/<\/a><\/p>\n\n\n\n

https:\/\/brightsec.com\/blog\/sql-injection-payloads\/<\/a><\/p>\n\n\n\n

https:\/\/owasp.org\/www-community\/attacks\/SQL_Injection_Bypassing_WAF<\/a><\/p>\n\n\n\n

\n\n\n\n

OFFENSIVE SECURITY CHEATSHEET :<\/h2>\n\n\n\n

https:\/\/cheatsheet.haax.fr\/<\/a><\/p>\n\n\n\n

\n\n\n\n

Useful one liners :<\/h1>\n\n\n\n

https:\/\/gist.github.com\/johnnypea\/b0cd77e5734d65691fa21d93274b305b<\/a><\/p>\n\n\n\n

\n\n\n\n

Explainshell : <\/strong><\/p>\n\n\n\n

write down a command-line to see the help text that matches each argument.<\/em><\/p>\n\n\n\n

https:\/\/explainshell.com\/<\/a><\/p>\n\n\n\n

\n\n\n\n

CTF Cheatsheet :<\/strong><\/p>\n\n\n\n

https:\/\/github.com\/Rajchowdhury420\/CTF-CheatSheet<\/a><\/p>\n\n\n\n

https:\/\/github.com\/sl4x0\/Web-CTF-Cheatsheet<\/a><\/p>\n\n\n\n

\n\n\n\n

All About OSCP :<\/strong><\/p>\n\n\n\n

https:\/\/oscp.infosecsanyam.in\/<\/a><\/p>\n\n\n\n

\n\n\n\n

OWASP Cheatsheet :<\/strong><\/p>\n\n\n\n

https:\/\/cheatsheetseries.owasp.org\/<\/a><\/p>\n\n\n\n

\n\n\n\n

Security Knowledge Base :<\/strong><\/p>\n\n\n\n

http:\/\/github.sofianehamlaoui.fr\/Security-Cheatsheets\/<\/a><\/p>\n\n\n\n

\n\n\n\n

Privilege Escalation Windows :<\/h1>\n\n\n\n

https:\/\/sushant747.gitbooks.io\/total-oscp-guide\/content\/privilege_escalation_windows.html<\/a><\/p>\n\n\n\n

https:\/\/lolbas-project.github.io\/<\/a><\/p>\n\n\n\n

https:\/\/github.com\/swisskyrepo\/PayloadsAllTheThings\/blob\/master\/Methodology%20and%20Resources\/Windows%20-%20Privilege%20Escalation.md<\/a><\/p>\n\n\n\n

https:\/\/book.hacktricks.xyz\/windows\/windows-local-privilege-escalation<\/a><\/p>\n\n\n\n

\n\n\n\n

CyberChef :<\/strong><\/p>\n\n\n\n

The Cyber Swiss Army Knife – a web app for encryption, encoding, compression and data analysis.<\/em><\/p>\n\n\n\n

https:\/\/gchq.github.io\/CyberChef\/<\/a><\/p>\n\n\n\n

\n\n\n\n

Aperi’Solve :<\/strong><\/p>\n\n\n\n

Aperi’Solve is an online platform which performs layer analysis on image.<\/em><\/p>\n\n\n\n

https:\/\/aperisolve.fr\/<\/a><\/p>\n\n\n\n

\n\n\n\n

XOR Calculator<\/strong> :<\/p>\n\n\n\n

Calculate the exclusive or (XOR) with a simple web-based calculator. Input and output in binary, decimal, hexadecimal or ASCII.<\/em><\/p>\n\n\n\n

http:\/\/xor.pw\/<\/a><\/p>\n\n\n\n

\n\n\n\n

Hackitude<\/strong> :<\/p>\n\n\n\n

https:\/\/www.hackitude.in\/<\/a><\/p>\n\n\n\n

\n\n\n\n

GTFOBINS<\/strong> :<\/p>\n\n\n\n

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems.<\/em><\/p>\n\n\n\n

https:\/\/gtfobins.github.io\/<\/a><\/p>\n\n\n\n

\n\n\n\n

OSCP-CHEATSHEET<\/strong> :<\/p>\n\n\n\n

https:\/\/github.com\/Swafox\/OSCP\/blob\/master\/oscp-cheatsheet.md<\/a><\/p>\n\n\n\n

\n\n\n\n

HackTricks<\/strong> :<\/p>\n\n\n\n

https:\/\/book.hacktricks.xyz\/<\/a><\/p>\n\n\n\n

\n\n\n\n

Bug Bounty Cheatsheet\/Tools\/Templates<\/strong> :<\/p>\n\n\n\n

https:\/\/m0chan.github.io\/2019\/12\/17\/Bug-Bounty-Cheetsheet.html<\/a><\/p>\n\n\n\n

https:\/\/github.com\/EdOverflow\/bugbounty-cheatsheet<\/a>
https:\/\/taksec.github.io\/google-dorks-bug-bounty\/<\/a>
https:\/\/github.com\/topscoder\/nuclei-wordfence-cve<\/a>
https:\/\/github.com\/daffainfo\/AllAboutBugBounty<\/a>
<\/p>\n\n\n\n

\n\n\n\n

Payloads All The Things<\/strong> :<\/p>\n\n\n\n

A list of useful payloads and bypass for Web Application Security and Pentest\/CTF<\/a><\/em>.<\/p>\n\n\n\n

https:\/\/github.com\/swisskyrepo\/PayloadsAllTheThings<\/a><\/p>\n\n\n\n

\n\n\n\n

Active Directory attack cheat sheet :<\/strong><\/p>\n\n\n\n

https:\/\/casvancooten.com\/posts\/2020\/11\/windows-active-directory-exploitation-cheat-sheet-and-command-reference\/<\/a><\/p>\n\n\n\n

https:\/\/github.com\/S1ckB0y1337\/Active-Directory-Exploitation-Cheat-Sheet<\/a><\/p>\n\n\n\n

\n\n\n\n

Active Directory Enumeration :<\/strong><\/p>\n\n\n\n

https:\/\/www.hackingarticles.in\/active-directory-enumeration-powerview\/<\/a><\/p>\n\n\n\n

\n\n\n\n

Red Teaming Experiments<\/strong> :<\/p>\n\n\n\n

https:\/\/www.ired.team\/<\/a><\/p>\n\n\n\n

\n\n\n\n

OSINT-FR | Tools to begin in Open Source Intelligence :<\/strong><\/p>\n\n\n\n

https:\/\/osintfr.com\/en\/tools\/<\/a><\/p>\n\n\n\n

\n\n\n\n

Windows Enumeration :<\/h2>\n\n\n\n

https:\/\/nored0x.github.io\/red-teaming\/windows-enumeration\/<\/a><\/p>\n\n\n\n

\n\n\n\n

Hacking Tools Cheat Sheet <\/strong>:<\/p>\n\n\n\n

\"pentest\"\/<\/figure>\n\n\n\n
\"\"\/<\/figure>\n\n\n\n
\n","protected":false},"excerpt":{"rendered":"

<\/span> 2<\/span> min read<\/span><\/span>Views: 4838 Pentest Tips & Tricks : https:\/\/jivoi.github.io\/2015\/07\/01\/pentest-tips-and-tricks\/https:\/\/github.com\/Voorivex\/pentest-guidehttps:\/\/github.com\/coreb1t\/awesome-pentest-cheat-sheetshttps:\/\/github.com\/ahmetgurel\/Pentest-Hints Reverse shell generator : https:\/\/www.revshells.com\/ Name That Hash : The Modern Hash Identification System https:\/\/nth.skerritt.blog\/ Web Application Penetration Testing Checklist : https:\/\/alike-lantern-72d.notion.site\/Web-Application-Penetration-Testing-Checklist-4792d95add7d4ffd85dd50a5f50659c6 https:\/\/r3surr3c7.gitbook.io\/notes\/web-pentesting-checklist https:\/\/pentestbook.six2dez.com\/others\/web-checklist https:\/\/thackamura.github.io\/web-checklist\/ API-Security-Checklist : https:\/\/github.com\/shieldfy\/API-Security-Checklist WADComs : WADComs is… Continuer la lecture →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1516,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"class_list":["post-395","page","type-page","status-publish","has-post-thumbnail","hentry"],"aioseo_notices":[],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/pages\/395","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/comments?post=395"}],"version-history":[{"count":1,"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/pages\/395\/revisions"}],"predecessor-version":[{"id":2959,"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/pages\/395\/revisions\/2959"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/media\/1516"}],"wp:attachment":[{"href":"https:\/\/mikadmin.fr\/blog\/wp-json\/wp\/v2\/media?parent=395"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}