Categories
Browse cheat sheets by domain.
Reconnaissance & OSINT
Discovery before exploitation: hosts, DNS, subdomains, and open-source intelligence.
15 tools
Scanning & Enumeration
Active probing: ports, services, vulnerability templates, and directory discovery.
15 tools
Web Application Security
HTTP-specific testing: injection, authentication, and application flaws.
23 tools
Network & Protocol
Packets, MITM, SMB/LDAP, and classic network interaction tools.
14 tools
Exploitation & Payloads
Shells, frameworks, exploit development, and pivoting utilities.
18 tools
Passwords & Cracking
Offline and online cracking, wordlists, and hash identification.
11 tools
Active Directory & Windows
AD attacks, Kerberos, WinRM, and Windows post-exploitation.
10 tools
Cloud & Containers
AWS, Azure, GCP, Kubernetes, Docker, and cloud audit tooling.
9 tools
Wireless
Wi-Fi capture, analysis, and cracking workflows.
2 tools
Forensics & IR
Memory, disk, hunting artifacts, and incident response.
8 tools
Utilities & Shells
Cross-cutting CLI: curl, netcat, tunnels, and shell one-liners.
17 tools