InfoCon - Hacking Conference Archive

Curated list of Security Talks and Videos

A collected list of awesome security talks.

Docker Cheat Sheet

Docker commands and workflows.

Mobile App Pentest Cheat Sheet

OSX Command Line Cheat Sheet

Use your macOS terminal shell to do awesome things.

PowerShell Cheat Sheet

SANS PowerShell Cheat Sheet from SEC560 Course (PDF version)

Rawsec's CyberSecurity Inventory

An open-source inventory of tools, resources, CTF platforms and Operating Systems about CyberSecurity. (Source)

Regexp Security Cheat Sheet

Security Cheat Sheets

A collection of security cheat sheets

Unix / Linux Cheat Sheet

Google Dorks

Google Dorks Hacking Database (Exploit-DB)

ZoomEye

Zoomeye is a Cyberspace Search Engine recording information of devices, websites, services and components etc.

Amass

OWASP Network mapping of attack surfaces and external asset discovery using open source information

enum4linux-ng

Python tool for enumerating information from Windows/Samba systems

Empire Cheat Sheet

Empire is a PowerShell and Python post-exploitation framework

Java Deserialization Cheat Sheet

A cheat sheet for pentesters about Java Native Binary Deserialization vulnerabilities

Local File Inclusion (LFI) Cheat Sheet #1

Arr0way's LFI Cheat Sheet

Local File Inclusion (LFI) Cheat Sheet #2

Aptive's LFI Cheat Sheet

Metasploit Unleashed

The ultimate guide to the Metasploit Framework

Metasploit Cheat Sheet

A quick reference guide (PNG version)(PDF version)

PowerView 2.0 Tricks

PowerView 3.0 Tricks

PHP htaccess Injection Cheat Sheet

htaccess Injection Cheat Sheet by PHP Secure Configuration Checker

Reverse Shell Cheat Sheet #1

Pentestmonkey Reverse Shell Cheat Sheet

Reverse Shell Cheat Sheet #2

Arr0way's Reverse Shell Cheat Sheet

SQL Injection Cheat Sheet

Netsparker's SQL Injection Cheat Sheet

SQLite3 Injection Cheat Sheet

Windows / Linux Local Privilege Escalation Workshop

The Privilege Escalation Workshop covers all known (at the time) attack vectors of local user privilege escalation on both Linux and Windows operating systems and includes slides, videos, test VMs.

Basic Linux Privilege Escalation

Linux Privilege Escalation by @g0tmi1k

linux-exploit-suggester.sh

Linux privilege escalation auditing tool written in bash (updated)

Linux_Exploit_Suggester.pl

Linux Exploit Suggester written in Perl (last update 3 years ago)

Linux_Exploit_Suggester.pl v2

Next-generation exploit suggester based on Linux_Exploit_Suggester (updated)

Linux Soft Exploit Suggester

linux-soft-exploit-suggester finds exploits for all vulnerable software in a system helping with the privilege escalation. It focuses on software packages instead of Kernel vulnerabilities

checksec.sh

bash script to check the properties of executables (like PIE, RELRO, PaX, Canaries, ASLR, Fortify Source)

linuxprivchecker.py

This script is intended to be executed locally on a Linux box to enumerate basic system info and search for common privilege escalation vectors such as world writable files, misconfigurations, clear-text passwords and applicable exploits (@SecuritySift)

LinEnum

This tool is great at running through a heap of things you should check on a Linux system in the post exploit process. This include file permissions, cron jobs if visible, weak credentials etc.(@Rebootuser)

linPEAS

LinPEAS - Linux Privilege Escalation Awesome Script. Check the Local Linux Privilege Escalation checklist from book.hacktricks.xyz

MimiPenguin

A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz.

PowerUp

Excellent powershell script for checking of common Windows privilege escalation vectors. Written by harmj0y (direct link)

Empire Cheat Sheet

Empire is a PowerShell and Python post-exploitation framework

Windows Exploit Suggester

Tool for detection of missing security patches on the windows operating system and mapping with the public available exploits

Sherlock

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities

Watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

Precompiled Windows Exploits

Collection of precompiled Windows exploits

Metasploit Modules

post/multi/recon/local_exploit_suggester - suggests local meterpreter exploits that can be used; post/windows/gather/enum_patches - helps to identify any missing patches

SQLmap Tamper Scripts

SQLmap Tamper Scripts General/MSSQL/MySQL

VIM Cheatsheet

XSS'OR Encoder/Decoder

Online Decoder/Encoder for testing purposes (@evilcos)

WebGun

WebGun, XSS Payload Creator (@brutelogic)

Hackvertor

Tool to convert various encodings and generate attack vectors (@garethheyes)

JSFiddle

Test and share XSS payloads, Example PoC

Fuzzdb

Dictionary of attack patterns and primitives for black-box application testing Polyglot Challenge with submitted solutions

SecList

A collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more

XSS Polyglot Payloads #1

Unleashing an Ultimate XSS Polyglot list by 0xsobky

XSS Polyglot Payloads #2

@filedescriptor's XSS

Browser's-XSS-Filter-Bypass-Cheat-Sheet

Excellent List of working XSS bypasses running on the latest version of Chrome / Safari, IE 11 / Edge created by Masato Kinugawa

Bug Bounty Reference

huge list of bug bounty write-up that is categorized by the bug type (SQLi, XSS, IDOR, etc.)

Write-Ups for CTF challenges

Facebook Bug Bounties

Categorized Facebook Bug Bounties write-ups

Hack The Box :: Penetration Testing Labs

An online platform to test and advance your skills in penetration testing and cyber security. Join today and start training in our online labs.

OWASP Vulnerable Web Applications Directory Project (Online)

List of online available vulnerable applications for learning purposes

Pentestit labs

Hands-on Pentesting Labs (OSCP style)

Root-me.org

Hundreds of challenges are available to train yourself in different and not simulated environments

Vulnhub.com

Vulnerable By Design VMs for practical 'hands-on' experience in digital security

Damn Vulnerable Xebia Training Environment

Docker Container including several vurnerable web applications (DVWA,DVWServices, DVWSockets, WebGoat, Juiceshop, Railsgoat, django.NV, Buggy Bank, Mutilidae II and more)

OWASP Vulnerable Web Applications Directory Project (Online)

List of online available vulnerable applications for learning purposes

Vulnerable SOAP Web Service

a vulnerable SOAP web service lab environment

Vulnerable Flask Web App

vulnerable Flask Web App lab environment

wifite2

Full automated WiFi security testing script

Docker Security Cheat Sheet

The following tips should help you to secure a container based system (PDF version)

Windows Domain Hardening

A curated list of awesome Security Hardening techniques for Windows

JavaScript Cheat Sheet

Learn javascript in one picture (Online version) (PNG version)

Python Cheat Sheet #1

Learn python3 in one picture (PNG version)

Python Cheat Sheet #2

Learn python3 in one picture (Online version) (PNG version)