Cheatsheets

KO | EN

gitlite — search

#typescript #llm #golang #go #machine-learning #deep-learning #docker #macos #windows #kubernetes #pytorch #mcp #ios #openai

(★ 345)

A collection of all my personal cheat sheets and guides as I progress through my career in offensive security.

File Explorer

Download Latest Version (.zip)

Cyber Range Network Diagram.png
OPSEC Reference Manual - Techniques & Tools.md
OPSEC Reference Manual - Techniques Only.md
Parsing Command Output.md
README.md
Red Team Operations (RTO) I.md
Red Team Operations (RTO) II.md
Services Testing.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Security Cheat Sheets, Resources, and Guides
Originally a collection of all my personal cheat sheets and certification exam guides as I progress through my career in offensive security.
Now expanded to include all the resources I regularly consult and recommend.  
\* → resources I created (unique to this repo)

Also check out my [ohmykali terminal plugin](https://github.com/RedefiningReality/ohmykali) for Kali Linux.

## Cheat Sheets
### General
- *[Intro to Cybersecurity PowerPoint](https://docs.google.com/presentation/d/1MITxEHjWHYbJX7xSxgpbQQ88uRbacB5pDVnJqqWqobw/)
- *[Windows Commands Cheat Sheet](https://docs.google.com/document/d/1CGgADAOZQuMXAyzXVeXRNhQ_PPBYliMXCy-4RNE0UMw/)
- *[Linux Commands Cheat Sheet](https://docs.google.com/document/d/1vJxoHrjW607NJDLC1Zln1llrEIqrS6Ea3j9ihJTdblg/)
- *[Parsing Command Output](Parsing%20Command%20Output.md) (Linux terminal and Windows PowerShell)

### Network Penetration Testing
- *[Red Team Manual (Old)](https://docs.google.com/document/d/17W30A0wpB7lVTDb7SCjWs0lb9bMAjVR4B7Dp_c2rU2g/)

#### Services Attacks
- [Services Enumeraton (by Mohamed Trigui)](https://medtrigui.github.io/service-enumeration/) - common services, commands, vulnerabilites
- *[Services Testing](Services%20Testing.md) - pen test ready copy-and-pasteables
- [HackTricks → Network Servces Pentesting](https://book.hacktricks.wiki/en/index.html) - most comprehensive by far, sometimes messy
#### Host Privilege Escalation
- [Linux Privilege Escalation (HackTricks)](https://book.hacktricks.wiki/en/linux-hardening/linux-privilege-escalation-checklist.html)
- [Windows Privilege Escalation (HackTricks)](https://book.hacktricks.wiki/en/windows-hardening/checklist-windows-privilege-escalation.html)
#### Host Credential Access
- *[AMSI Evasion for Pen Testing](https://medium.com/@redefiningreality/an-investigation-of-amsi-evasion-5ccacb217e06)
- *[Credential Access & Lateral Movement](https://docs.google.com/document/d/1zD0Eo6J4YPnfUc1BKICQ-TujiD3wAbnLts4jpPcwpKo/)
#### Active Directory
[The Hacker Recipes](https://www.thehacker.recipes)
##### NTLM Attacks
- [NTLM Authentication](https://thievi.sh/blog/ntlm-fully-explained-for-security-professionals/)
- *[NTLM Relay](https://docs.google.com/document/d/17St0tqsi3cKse0eymsz-nOHw8wVAlYJ8sZg21ZDWjJ0/)
##### Kerberos Attacks
- [Kerberos Authentication](https://www.tarlogic.com/blog/how-kerberos-works/)
- John will add his video on delegation here
- [Kerberos Attacks (Hacker Recipes)](https://www.thehacker.recipes/ad/movement/kerberos/)
##### Misc
- [ACL Abuse Flowchart (Hacker Recipes)](https://www.thehacker.recipes/ad/movement/dacl/)
### Red Teaming
#### OPSEC Reference Manual
- *[Techniques Only](OPSEC%20Reference%20Manual%20-%20Techniques%20Only.md)
- *[Techniques and Tools](OPSEC%20Reference%20Manual%20-%20Techniques%20%26%20Tools.md)
#### Notes
- *[Zero-Point RTO I (Cobalt Strike)](Red%20Team%20Operations%20(RTO)%20I.md)
- *[Zero-Point RTO II (C2 Infrastructure & Defence Evasion)](Red%20Team%20Operations%20(RTO)%20II.md)
- *[Defence Evasion PowerPoint](https://docs.google.com/presentation/d/1FATzBCzp1nPhXFKdcj9M96Pl1fUjoxNGep6sQr6c-As/)

## Resources
### Learning
#### Network Penetration Testing
- [TCM Security Academy PEH](https://academy.tcm-sec.com/p/practical-ethical-hacking-the-complete-course) - videos, introductory
- [HackTheBox Academy](https://academy.hackthebox.com/catalogue) - guided, hands-on
- [TryHackMe Offensive Pentesting](https://tryhackme.com/path/outline/pentesting) - throws you in the deep end, hands-on
#### Web App Penetration Testing
- [Taggart Institute PWST](https://taggartinstitute.org/courses/enrolled/2116543) - videos, introductory
- [PortSwigger Academy](https://portswigger.net/web-security) - comprehensive, hands-on
#### Red Teaming
- Zero-Point Security
  - [RTO I](https://www.zeropointsecurity.co.uk/course/red-team-ops)
  - [RTO II](https://training.zeropointsecurity.co.uk/courses/red-team-ops-ii)
  - [BOF Development](https://www.zeropointsecurity.co.uk/course/bof-dev)
- [Maldev Academy](https://maldevacademy.com/maldev-course)
- [SEKTOR7 Institute](https://institute.sektor7.net/consumer)
#### Application Penetration Testing
- [Pwn College → Core Material](https://pwn.college/dojos)
- [Exploit Education](https://exploit.education)
#### Cloud Penetration Testing
- [Pwned Labs](https://pwnedlabs.io)
- [Antisyphon Breaching the Cloud](https://www.antisyphontraining.com/product/breaching-the-cloud-with-beau-bullock/)
- [CloudGoat](https://github.com/RhinoSecurityLabs/cloudgoat)

### Watching
- [IppSec](https://ippsec.rocks) - pwning boxes, search any topic!
- [xct](https://www.youtube.com/@xct_de) - VulnLab walkthroughs
- [Tyler Ramsbey](https://www.youtube.com/@TylerRamsbey/playlists) - cloud playlists and more

### Practice
#### Cloud Platforms
- [VulnLab](https://www.vulnlab.com)
- [HackTheBox Labs](https://app.hackthebox.com)
- [Proving Grounds Play and Practice](https://www.offsec.com/products/proving-grounds/)
#### Self-Hosted
- *[Cyber Range Network Diagram](Cyber%20Range%20Network%20Diagram.png)
- *[Attacker VM Setup](https://github.com/CyberHawks-IIT/AttackerVMs)

## Exam Guides
- OSCP: *[Your BS-less Guide to Acing OSCP](https://medium.com/@redefiningreality/your-bs-less-guide-to-acing-oscp-4eccaf497410)
- CRTO: *[Your To the Point Guide on Pwning Zero-Point RTO](https://medium.com/@redefiningreality/your-to-the-point-guide-on-pwning-zero-point-rto-303c67b4d621)
- CRTL: *check out my [Cobalt Strike repo](https://github.com/RedefiningReality/Cobalt-Strike)

Cheatsheets

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

Cheatsheets

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

Download README