Hacking-Cheatsheets - A comprehensive collection of penetration testing

项目说明

🔴 Hacking Cheatsheets

🇮🇹 Italiana

<p align="center">
<img src=" alt="Penetration Testing">
<img src=" alt="Ethical Hacking">
<img src=" alt="Cybersecurity">
<img src=" alt="License">
</p>

<p align="center">
<b>📚 A comprehensi of penetration testing cheatsheets for security professionals</b>
</p>

<p align="center">
<a href="#-cheatsheets">Cheatsheets</a> •
<a href="#-quick-start">Quick Start</a> •
<a href="#-contributing">Contributing</a> •
<a href="#-license">License</a>
</p>

---

🎯 About

Hacking Cheatsheets is a curated collection of quick reference guides for penetration testing and ethical hacking tools. Each cheatsheet provides:

---

🎯 Attack Methodology (Kill Chain)

> NEW! Complete step-by-step guide for penetration testing based on MITRE ATT&CK framework.

| Phase | Description | Guide |
|-------|-------------|-------|
| 1. Initial Access | Exploits, phishing, credentials | 📄 View |
| 2. Enumeration | System & network discovery | 📄 View |
| 3. Pri Escalation | Get root/SYSTEM access | 📄 View |
| 4. Lateral Mo | Mo the network | 📄 View |
| 5. Persistence | Maintain access | 📄 View |
| 6. Defense E | Bypass AV/EDR/AMSI | 📄 View |
| 7. Actions on Objectives | Data exfiltration & impact | 📄 View |

👉 Full Kill Chain O

---

🛡️ Blue Team (Defensi)

> NEW! Complete defensi guides for SOC analysts and incident responders.

| Topic | Description | Guide |
|-------|-------------|-------|
| Incident Response | IR lifecycle, containment, procedures | 📄 View |
| Log Analysis | Windows/Linux log analysis & Event IDs | 📄 View |
| SIEM Detection | Splunk/ELK queries & dashboards | 📄 View |
| Threat Hunting | Proacti techniques | 📄 View |
| Hardening | Windows/Linux hardening checklists | 📄 View |
| Sigma Rules | Platform-agnostic detection rules | 📄 View |
| YARA Rules | Malware & IOC detection patterns | 📄 View |

👉 Full Blue Team O

---

☁️ Cloud Security

> NEW! Cloud pentesting guides for AWS, Azure, and GCP.

| Provider | Description | Guide |
|----------|-------------|-------|
| AWS | S3, IAM, Lambda, EC2, IMDS | 📄 View |
| Azure | Azure AD, Blob Storage, VMs, Key Vault | 📄 View |
| GCP | GCS, IAM, Compute, Cloud Functions | 📄 View |

👉 Full Cloud Security O

---

📱 Mobile Security

> NEW! Mobile app pentesting guides for Android and iOS.

| Platform | Description | Guide |
|----------|-------------|-------|
| Android | APK analysis, Frida, root detection bypass | 📄 View |
| iOS | IPA analysis, jailbreak, Objection, keychain | 📄 View |

👉 Full Mobile Security O

---

🐳 Container Security

> NEW! Docker & Kubernetes pentesting guides.

| Platform | Description | Guide |
|----------|-------------|-------|
| Docker | Container escape, image analysis, daemon exploitation | 📄 View |
| Kubernetes | RBAC bypass, pod escape, secrets extraction | 📄 View |

👉 Full Container Security O

---

🎭 Social Engineering

> NEW! Social engineering techniques, phishing campaigns, and pretexting guides.

| Topic | Description | Guide |
|-------|-------------|-------|
| Phishing | Email phishing, GoPhish, E, , smishing | 📄 View |
| Pretexting | Personas, scenarios, psychological manipulation | 📄 View |

👉 Full Social Engineering O

---

📝 Reporting Templates

> NEW! Professional report templates for pentesters and bug bounty hunters.

| Template | Description | Guide |
|----------|-------------|-------|
| Pentest Report | Full penetration test report structure | 📄 View |
| Bug Bounty Report | HackerOne/Bugcrowd submission template | 📄 View |
| Executi | Non-technical summary for C-level | 📄 View |

---

🔍 OSINT (Open Source Intelligence)

> NEW! Complete OSINT methodology and tool guides.

| Topic | Description | Guide |
|-------|-------------|-------|
| People Search | Find indi online, phone/address lookup | 📄 View |
| Email OSINT | Email discovery, breach checking, | 📄 View |
| Social Media | Username search, platform-specific OSINT | 📄 View |
| Domain & IP | WHOIS, DNS, subdomain, IP reconnaissance | 📄 View |
| Image OSINT | Reverse image search, EXIF metadata | 📄 View |

👉 Full OSINT O

---

🌐 Network Pentesting

> NEW! Complete network penetration testing guides.

| Topic | Description | Guide |
|-------|-------------|-------|
| Port Scanning | Nmap, Masscan, RustScan | 📄 View |
| Network Enumeration | SMB, SNMP, NFS, LDAP, DNS | 📄 View |
| MITM Attacks | ARP spoofing, DNS spoofing, SSL strip | 📄 View |
| Service Exploitation | FTP, SSH, SMB, RDP, databases | 📄 View |

👉 Full Network Pentesting O

---

🏁 CTF Cheatsheets

> NEW! Complete CTF competition guides for HackTheBox, TryHackMe, PicoCTF.

| Category | Description | Guide |
|----------|-------------|-------|
| Web | SQLi, XSS, SSTI, LFI, Auth bypass | 📄 View |
| Crypto | RSA, AES, hashes, encoding, XOR | 📄 View |
| Reverse Engineering | Ghidra, IDA, GDB, patching | 📄 View |
| Forensics | Steganography, memory, disk, PCAP | 📄 View |
| Pwn/Binary | Buffer o, ROP, shellcode | 📄 View |

👉 Full CTF O

---

📡 IoT Hacking

> NEW! IoT device hacking, firmware analysis, and hardware hacking guides.

| Topic | Description | Guide |
|-------|-------------|-------|
| Firmware Analysis | Binwalk, extraction, RE, secrets | 📄 View |
| Hardware Hacking | UART, JTAG, SPI, I2C, debug ports | 📄 View |

👉 Full IoT Hacking O

---

📖 Cheatsheets

🔴 Exploitation Framework

| Tool | Description | Cheatsheet |
|------|-------------|------------|
| Metasploit Framework | The world's most used penetration testing framework | 📄 View |
| Meterpreter | Ad post-exploitation payload | 📄 View |
| Mimikatz | Windows credential extraction tool | 📄 View |
| PowerShell | Windows scripting for pentesting | 📄 View |
| Linux Commands | Linux & Bash for pentesting | 📄 View |

🔍 Reconnaissance & Scanning

| Tool | Description | Cheatsheet |
|------|-------------|------------|
| Nmap | Network discovery and security auditing | 📄 View |
| Gobuster | Directory/DNS/VHost brute-forcing | 📄 View |
| Nikto | Web ser | 📄 View |

🌐 Web Application Testing

| Tool | Description | Cheatsheet |
|------|-------------|------------|
| SQLMap | SQL injection automation tool | 📄 View |
| Burp Suite | Web application security testing platform | 📄 View |
| OWASP ZAP | Free web app security scanner | 📄 View |

🔓 Password Cracking

| Tool | Description | Cheatsheet |
|------|-------------|------------|
| Hydra | Fast network login cracker | 📄 View |
| John the Ripper | Legendary password cracker | 📄 View |
| Hashcat | World's fastest GPU password cracker | 📄 View |

📡 Network Analysis

| Tool | Description | Cheatsheet |
|------|-------------|------------|
| Wireshark | Network protocol analyzer | 📄 View |
| tcpdump | Command-line packet analyzer | 📄 View |

🐛 Bug Bounty

| Tool | Description | Cheatsheet |
|------|-------------|------------|
| ⭐ BB Methodology | Complete bug bounty hunting guide | 📄 View |
| Nuclei | Template-based scanner | 📄 View |
| ffuf | Fast web fuzzer | 📄 View |
| Subfinder | Subdomain discovery | 📄 View |
| httpx | HTTP probe & toolkit | 📄 View |
| Amass | In-depth attack surface mapping | 📄 View |
| GAU | Get All URLs from archives | 📄 View |
| Katana | Next-gen web crawler | 📄 View |
| Arjun | Hidden parameter discovery | 📄 View |
| Dalfox | XSS scanner | 📄 View |

💉 Payloads Collection

| | Description | Cheatsheet |
|---------------|-------------|------------|
| XSS | Cross-Site Scripting payloads | 📄 View |
| SQLi | SQL Injection payloads | 📄 View |
| LFI | Local File Inclusion payloads | 📄 View |
| SSTI | Ser Template Injection | 📄 View |
| Command Injection | OS command injection payloads | 📄 View |
| NoSQL Injection | MongoDB, CouchDB, Redis payloads | 📄 View |
| Deserialization | Java, PHP, Python, .NET payloads | 📄 View |
| WebSocket Attacks | CSWSH, injection, hijacking | 📄 View |
| GraphQL Injection | Introspection, IDOR, injection | 📄 View |

🔴 Web

| | Description | Cheatsheet |
|---------------|-------------|------------|
| API Security | REST/GraphQL/JWT testing guide | 📄 View |
| IDOR | Insecure Direct Object Reference | 📄 View |
| SSRF | Ser Request Forgery | 📄 View |
| XXE | XML External Entity Injection | 📄 View |
| Race Conditions | Timing & concurrency attacks | 📄 View |
| Auth Bypass | Authentication bypass techniques | 📄 View |
| CORS | Cross-Origin misconfigurations | 📄 View |
| Open Redirect | URL redirect | 📄 View |

🛡️ Ad Attack Techniques

| Topic | Description | Cheatsheet |
|-------|-------------|------------|
| WAF Bypass | Origin IP discovery & WAF e | 📄 View |
| Cloudflare Bypass | Find origin IP behind Cloudflare | 📄 View |
| Subdomain Takeover | Dangling CNAME exploitation | 📄 View |
| Cache Poisoning | Web cache poisoning & deception | 📄 View |
| HTTP Smuggling | Request smuggling (CL.TE/TE.CL) | 📄 View |
| Prototype Pollution | Ja prototype attacks | 📄 View |

🔎 Dorking & OSINT

| Tool | Description | Cheatsheet |
|------|-------------|------------|
| Google Dorking | Ad Google search techniques | 📄 View |
| Shodan | IoT & device search engine | 📄 View |
| GitHub Dorking | Secret hunting in repositories | 📄 View |

🔝 Pri Escalation

| Topic | Description | Cheatsheet |
|-------|-------------|------------|
| Linux PrivEsc | Linux pri escalation techniques | 📄 View |
| Windows PrivEsc | Windows pri escalation techniques | 📄 View |

🔬 Digital Forensics

| Tool | Description | Cheatsheet |
|------|-------------|------------|
| | Memory forensics framework | 📄 View |
| Autopsy | Digital forensics platform (GUI) | 📄 View |
| ExifTool | Metadata extraction & analysis | 📄 View |
| Binwalk | Firmware analysis & extraction | 📄 View |

🔄 Reverse Engineering

| Tool | Description | Cheatsheet |
|------|-------------|------------|
| Ghidra | NSA reverse engineering suite | 📄 View |
| GDB | GNU Debugger (Linux debugging) | 📄 View |
| x64dbg | Windows x64/x32 debugger | 📄 View |

📶 WiFi Hacking

| Tool | Description | Cheatsheet |
|------|-------------|------------|
| Aircrack-ng | WiFi hacking suite (WPA/WPA2) | 📄 View |
| Wifite | Automated WiFi auditor | 📄 View |
| Bettercap | Network attack framework (MITM/WiFi) | 📄 View |

🏢 Acti

| Tool | Description | Cheatsheet |
|------|-------------|------------|
| ⭐ AD Methodology | Step-by-step attack guide | 📄 View |
| BloodHound | AD attack path | 📄 View |
| Impacket | Python AD attack toolkit | 📄 View |
| CrackMapExec | AD Swiss Army knife | 📄 View |
| Rubeus | Kerberos abuse toolkit | 📄 View |
| PowerView | PowerShell AD enumeration | 📄 View |
| Responder | LLMNR/NBT-NS poisoning | 📄 View |
| E | WinRM shell for pentesters | 📄 View |
| Kerbrute | Kerberos user enum & spray | 📄 View |

📚 Resources

| Resource | Description | Cheatsheet |
|----------|-------------|------------|
| Wordlists | Complete wordlist reference guide | 📄 View |
| Kali Linux Tools | 600+ tools by category | 📄 View |

---

🚀 Quick Start

Clone the Repository

Browse Cheatsheets

Na to any tool folder and open the README.md file:

Offline Access

All cheatsheets are in Markdown format, making them:

---

📂 Repository Structure

---

🤝 Contributing

Contributions are welcome! Please read our Contributing Guidelines before submitting a pull request.

Ways to Contribute

---

⚠️ Legal Disclaimer

> IMPORTANT: These cheatsheets are intended for educational purposes and authorized security testing only.
>
> - ✅ Use on systems you own
> - ✅ Use with explicit written permission
> - ✅ Use in legal penetration testing engagements
> - ❌ Never use for unauthorized access
> - ❌ Never use for malicious purposes
>
> Unauthorized access to computer systems is illegal. The authors are not responsible for any misuse of this information.

---

📜 License

This project is licensed under the MIT License - see the LICENSE file for details.

---

🌟 Show Your Support

If you find these cheatsheets useful, please consider:

---

📬 Contact

---

<p align="center">
<b>Happy Hacking! 🔴</b><br>
<i>Remember: Hack responsibly, hack ethically!</i>
</p>

---

<p align="center">
Made with ❤️ for the cybersecurity community
</p>

项目信息

开发语言：未知

Star 数：562

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A comprehensive collection of penetration testing cheatsheets, guides, and tools.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。