Reverse Shell Cheat Sheet

Reverse shell one-liners for Bash, Python, PHP, Perl, Ruby, Netcat, PowerShell, and more.

Command Injection Cheat Sheet

OS command injection payloads for testing command separators, blind injection, and filter bypasses.

Insecure Deserialization Cheat Sheet

Insecure deserialization payloads for Java, PHP, Python, and .NET with gadget chains and tool commands.

Linux Privilege Escalation Cheat Sheet

Linux privilege escalation techniques: SUID, sudo misconfigs, cron jobs, capabilities, writable files, path hijacking, kernel exploits, and container escapes.

Windows Privilege Escalation Cheat Sheet

Windows privilege escalation techniques: unquoted service paths, weak permissions, DLL hijacking, token impersonation, AlwaysInstallElevated, UAC bypass, and credential access.

Post-Exploitation Cheat Sheet

Post-exploitation commands for shell stabilization, persistence, file transfer, data exfiltration, network pivoting, and covering tracks on Linux and Windows.

Cloud Attacks Cheat Sheet

Cloud attack payloads for AWS, GCP, Azure, and Kubernetes. SSRF-to-metadata exploitation, IAM credential theft, S3/Cloud Storage misconfigs, container escape, and Kubernetes service account abuse.

Hydra Brute Force Cheatsheet

Complete hydra reference for brute-forcing SSH, FTP, HTTP forms, SMB, RDP, and other protocols.

Metasploit Framework Cheatsheet

Complete Metasploit reference for msfconsole, Meterpreter, session management, privilege escalation, and post-exploitation.