
A comprehensive collection of penetration testing cheatsheets, guides, and tools.
โโโ โโโ โโโโโโ โโโโโโโโโโ โโโโโโโโโโ โโโ โโโโโโโ
โโโ โโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโ โโโโโโโโโโโ
โโโโโโโโโโโโโโโโโโโ โโโโโโโ โโโโโโโโโ โโโโโโ โโโโ
โโโโโโโโโโโโโโโโโโโ โโโโโโโ โโโโโโโโโโโโโโโโ โโโ
โโโ โโโโโโ โโโโโโโโโโโโโโ โโโโโโโโโ โโโโโโโโโโโโโโโ
โโโ โโโโโโ โโโ โโโโโโโโโโ โโโโโโโโโ โโโโโ โโโโโโโ
โโโโโโโโโโ โโโโโโโโโโโ โโโโโโ โโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โโโ โโโโโโโโโโโโโโ โโโโโโโโ โโโ โโโโโโโโโโโโโโโโโโโโโโ โโโโโโ โโโ โโโโโโโโ
โโโ โโโโโโโโโโโโโโ โโโโโโโโ โโโ โโโโโโโโโโโโโโโโโโโโโโ โโโโโโ โโโ โโโโโโโโ
โโโโโโโโโโโ โโโโโโโโโโโโโโ โโโ โโโ โโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโ โโโ โโโโโโโโ
โโโโโโโโโโ โโโโโโโโโโโโโโ โโโ โโโ โโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโ โโโ โโโโโโโโ
๐ A comprehensive collection of penetration testing cheatsheets for security professionals
Cheatsheets โข Quick Start โข Contributing โข License
Hacking Cheatsheets is a curated collection of quick reference guides for penetration testing and ethical hacking tools. Each cheatsheet provides:
NEW! Complete step-by-step guide for penetration testing based on MITRE ATT&CK framework.
| Phase | Description | Guide |
|---|---|---|
| 1. Initial Access | Exploits, phishing, credentials | ๐ View |
| 2. Enumeration | System & network discovery | ๐ View |
| 3. Privilege Escalation | Get root/SYSTEM access | ๐ View |
| 4. Lateral Movement | Move across the network | ๐ View |
| 5. Persistence | Maintain access | ๐ View |
| 6. Defense Evasion | Bypass AV/EDR/AMSI | ๐ View |
| 7. Actions on Objectives | Data exfiltration & impact | ๐ View |
NEW! Complete defensive security guides for SOC analysts and incident responders.
| Topic | Description | Guide |
|---|---|---|
| Incident Response | IR lifecycle, containment, procedures | ๐ View |
| Log Analysis | Windows/Linux log analysis & Event IDs | ๐ View |
| SIEM Detection | Splunk/ELK queries & dashboards | ๐ View |
| Threat Hunting | Proactive hunting techniques | ๐ View |
| Hardening | Windows/Linux hardening checklists | ๐ View |
| Sigma Rules | Platform-agnostic detection rules | ๐ View |
| YARA Rules | Malware & IOC detection patterns | ๐ View |
NEW! Cloud pentesting guides for AWS, Azure, and GCP.
| Provider | Description | Guide |
|---|---|---|
| AWS | S3, IAM, Lambda, EC2, IMDS | ๐ View |
| Azure | Azure AD, Blob Storage, VMs, Key Vault | ๐ View |
| GCP | GCS, IAM, Compute, Cloud Functions | ๐ View |
๐ Full Cloud Security Overview
NEW! Mobile app pentesting guides for Android and iOS.
| Platform | Description | Guide |
|---|---|---|
| Android | APK analysis, Frida, root detection bypass | ๐ View |
| iOS | IPA analysis, jailbreak, Objection, keychain | ๐ View |
๐ Full Mobile Security Overview
NEW! Docker & Kubernetes pentesting guides.
| Platform | Description | Guide |
|---|---|---|
| Docker | Container escape, image analysis, daemon exploitation | ๐ View |
| Kubernetes | RBAC bypass, pod escape, secrets extraction | ๐ View |
๐ Full Container Security Overview
NEW! Social engineering techniques, phishing campaigns, and pretexting guides.
| Topic | Description | Guide |
|---|---|---|
| Phishing | Email phishing, GoPhish, Evilginx2, vishing, smishing | ๐ View |
| Pretexting | Personas, scenarios, psychological manipulation | ๐ View |
๐ Full Social Engineering Overview
NEW! Professional report templates for pentesters and bug bounty hunters.