# Cheat Sheet Hacking

## Cheat Sheet - Hacking

- [File Transfer](https://lanzt.gitbook.io/cheatsheet-pentest/generic-ideas/file-transfer.md): How to transfer files with Linux and Windows
- [Reverse Shell](https://lanzt.gitbook.io/cheatsheet-pentest/generic-ideas/reverse-shell.md)
- [Cracking Tricks](https://lanzt.gitbook.io/cheatsheet-pentest/generic-ideas/cracking-tricks.md)
- [Tunneling and Port Forwarding](https://lanzt.gitbook.io/cheatsheet-pentest/generic-ideas/tunneling-and-port-forwarding.md)
- [Reversing](https://lanzt.gitbook.io/cheatsheet-pentest/generic-ideas/reversing.md)
- [OSINT](https://lanzt.gitbook.io/cheatsheet-pentest/generic-ideas/osint.md)
- [Phishing](https://lanzt.gitbook.io/cheatsheet-pentest/generic-ideas/phishing.md)
- [Reconnaissance](https://lanzt.gitbook.io/cheatsheet-pentest/port-enumeration/reconnaissance.md)
- [53 - DNS](https://lanzt.gitbook.io/cheatsheet-pentest/port-enumeration/53-dns.md)
- [80,443 - Web](https://lanzt.gitbook.io/cheatsheet-pentest/port-enumeration/80-443-web.md)
- [Identify php.ini file used](https://lanzt.gitbook.io/cheatsheet-pentest/port-enumeration/80-443-web/identify-php.ini-file-used.md)
- [Exploitation](https://lanzt.gitbook.io/cheatsheet-pentest/port-enumeration/80-443-web/exploitation.md)
- [File Upload](https://lanzt.gitbook.io/cheatsheet-pentest/port-enumeration/80-443-web/exploitation/file-upload.md)
- [XXS](https://lanzt.gitbook.io/cheatsheet-pentest/port-enumeration/80-443-web/exploitation/xxs.md): Check this lines in an input text to verify if web is vulnerable to XSS
- [445 - SMB](https://lanzt.gitbook.io/cheatsheet-pentest/port-enumeration/445-smb.md)
- [389, 636, 3268 - LDAP(S)](https://lanzt.gitbook.io/cheatsheet-pentest/port-enumeration/389-636-3268-ldap-s.md)
- [Enumeration](https://lanzt.gitbook.io/cheatsheet-pentest/linux-things/enumeration.md)
- [Privilege Escalation](https://lanzt.gitbook.io/cheatsheet-pentest/linux-things/privilege-escalation.md)
- [Writable $PATH](https://lanzt.gitbook.io/cheatsheet-pentest/linux-things/privilege-escalation/writable-usdpath.md)
- [Enumeration](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/enumeration.md)
- [Privilege Escalation](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/privilege-escalation.md)
- [Useful Commands](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/useful-commands.md)
- [Active Directory Methodology](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology.md)
- [Commands to create AD environment](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/commands-to-create-ad-environment.md)
- [Attacks](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks.md)
- [Kerberos](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos.md)
- [User enumeration](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/user-enumeration.md)
- [ASREP-Roast](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/asrep-roast.md)
- [Kerberoasting](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/kerberoasting.md)
- [ASREP-Roast VS Kerberoasting](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/asrep-roast-vs-kerberoasting.md)
- [Golden Ticket](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/golden-ticket.md)
- [Resource Based Constrained Delegation](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/kerberos/resource-based-constrained-delegation.md)
- [Secrets dump](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/secrets-dump.md)
- [Pass The Hash](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/pass-the-hash.md)
- [Dump NTDS](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/dump-ntds.md)
- [Tickets](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/tickets.md)
- [TGT](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/tickets/tgt.md)
- [NTML Password Spray](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/ntml-password-spray.md)
- [LDAP Authentication](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/ldap-authentication.md)
- [LDAP Pass-back](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/ldap-authentication/ldap-pass-back.md)
- [Rogue LDAP Server](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/ldap-authentication/rogue-ldap-server.md)
- [SMB Relay (LLNMR, NTB-NS & WPAD)](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/smb-relay-llnmr-ntb-ns-and-wpad.md)
- [NTLM Relay](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/ntlm-relay.md)
- [Tools to exploit AD things](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/tools-to-exploit-ad-things.md)
- [SCF Files](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/attacks/scf-files.md)
- [Kerberos](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/kerberos.md)
- [SAM & LSA secrets](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/sam-and-lsa-secrets.md)
- [Enumeration](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/enumeration.md)
- [BloodHound](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/enumeration/bloodhound.md)
- [PowerView](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/enumeration/powerview.md)
- [CheatSheet of Commands](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/enumeration/powerview/cheatsheet-of-commands.md)
- [Set DNS & DOMAIN](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/enumeration/set-dns-and-domain.md)
- [Resources](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/resources.md)
- [RunAs](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/runas.md)
- [Post Explotation](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/post-explotation.md)
- [Persistence](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/post-explotation/persistence.md)
- [Mimikatz](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/post-explotation/mimikatz.md)
- [Common used tools](https://lanzt.gitbook.io/cheatsheet-pentest/windows-things/active-directory-methodology/common-used-tools.md)
- [Port Forwarding](https://lanzt.gitbook.io/cheatsheet-pentest/pivoting/port-forwarding.md)
- [Socks Forwarding](https://lanzt.gitbook.io/cheatsheet-pentest/pivoting/socks-forwarding.md)
- [Routing](https://lanzt.gitbook.io/cheatsheet-pentest/pivoting/routing.md)
- [Web Fuzzing](https://lanzt.gitbook.io/cheatsheet-pentest/pivoting/web-fuzzing.md)
- [Transfer files](https://lanzt.gitbook.io/cheatsheet-pentest/pivoting/transfer-files.md)
- [Metasploit](https://lanzt.gitbook.io/cheatsheet-pentest/pivoting/metasploit.md)
- [Single Pivot](https://lanzt.gitbook.io/cheatsheet-pentest/pivoting/metasploit/single-pivot.md)
- [Double Pivot](https://lanzt.gitbook.io/cheatsheet-pentest/pivoting/metasploit/double-pivot.md)
- [Burp Suite](https://lanzt.gitbook.io/cheatsheet-pentest/pivoting/burp-suite.md)
- [Physical attacks](https://lanzt.gitbook.io/cheatsheet-pentest/hardware/physical-attacks.md)
- [Introduction](https://lanzt.gitbook.io/cheatsheet-pentest/buffer-overflow/introduction.md)
- [Stack-Based](https://lanzt.gitbook.io/cheatsheet-pentest/buffer-overflow/stack-based.md)
- [Introduction](https://lanzt.gitbook.io/cheatsheet-pentest/buffer-overflow/stack-based/introduction.md)
- [Spiking](https://lanzt.gitbook.io/cheatsheet-pentest/buffer-overflow/stack-based/introduction/spiking.md)
- [Fuzzing](https://lanzt.gitbook.io/cheatsheet-pentest/buffer-overflow/stack-based/introduction/fuzzing.md)
- [Find Offset](https://lanzt.gitbook.io/cheatsheet-pentest/buffer-overflow/stack-based/introduction/find-offset.md)
- [Overwrite EIP](https://lanzt.gitbook.io/cheatsheet-pentest/buffer-overflow/stack-based/introduction/overwrite-eip.md)
- [Find module](https://lanzt.gitbook.io/cheatsheet-pentest/buffer-overflow/stack-based/introduction/find-module.md)
- [Find Badchars](https://lanzt.gitbook.io/cheatsheet-pentest/buffer-overflow/stack-based/introduction/find-badchars.md)
- [Shellcode](https://lanzt.gitbook.io/cheatsheet-pentest/buffer-overflow/stack-based/introduction/shellcode.md)
- [Commands](https://lanzt.gitbook.io/cheatsheet-pentest/docker/commands.md)
- [Practical examples](https://lanzt.gitbook.io/cheatsheet-pentest/docker/practical-examples.md)
- [Tools](https://lanzt.gitbook.io/cheatsheet-pentest/android/tools.md)
- [Burp Suite](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/burp-suite.md)
- [Proxy Activation](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/burp-suite/proxy-activation.md)
- [Linux Commands](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/linux-commands.md)
- [Recreate multipart/form-data request](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/programming.md)
- [Python](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/programming/python.md)
- [HTML & netcat](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/programming/html-and-netcat.md)
- [TTY](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/tty.md): To generate a fully TTY, we can execute CTRL+C, have command history and move between them.
- [Templates for reports (exams)](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/templates-for-reports-exams.md)
- [Tmux](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/tmux.md)
- [Other cheat sheets](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/other-cheat-sheets.md)
- [SAP](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/sap.md)
- [Python Scripting](https://lanzt.gitbook.io/cheatsheet-pentest/useful-things/python-scripting.md)