BookMarks

00. Anonymous

• https://unsee.cc/

• https://paste.offsec.com/

01. Notebooks

• https://book.hacktricks.xyz/

• https://gtfobins.github.io/

• https://wadcoms.github.io/

• https://lolbas-project.github.io/

• https://www.explainshell.com/

• https://www.ired.team/

• https://0xrick.github.io/

• https://howto.thec2matrix.com/

• https://ptestmethod.readthedocs.io/

• https://gitbook.seguranca-informatica.pt/

• https://vk9-sec.com/

• https://butter0verflow.github.io/

• https://blueteamdope.gitbook.io/penetration-testing-playbook/

• https://hunter2.gitbook.io/darthsidious/

• https://guyinatuxedo.github.io/

• https://notes.offsec-journey.com/

• https://pentestbook.six2dez.com/

• https://persistence-info.github.io/

02. OSCP Notes

• https://sushant747.gitbooks.io/total-oscp-guide/content/
• https://github.com/rkhal101/Hack-the-Box-OSCP-Preparation
• https://refabr1k.gitbook.io/oscp/
• https://oscpnotes.infosecsanyam.in/
• https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html
• https://infosecwriteups.com/how-i-passed-oscp-with-100-points-in-12-hours-without-metasploit-in-my-first-attempt-dc8d03366f33
• https://rana-khalil.gitbook.io/hack-the-box-oscp-preparation/
• https://cd6629.gitbook.io/ctfwriteups/oscp-cheatsheet-unfinished
• https://casvancooten.com/posts/2021/03/getting-the-osep-certification-evasion-techniques-and-breaching-defenses-pen-300-course-review/
• https://fareedfauzi.gitbook.io/oscp-notes/
• https://www.tarlogic.com/en/blog/how-to-attack-kerberos/

03. Awesome Cheatsheet 📜

• Bash
• Curl
• VIM
• LFI
• MSF
• mysql
• Docker
• cronatb
• MacOS
• Regexp
• Python3
• msfvenom
• MobApps
• PowerView-2.0
• PowerView-3.0
• Deserialization
• PHP htaccess injection
• Reverse Shell Cheat Sheet
• WebHackersWeapons

04. Windows Privilege Escalation

• Sherlock
• Watson
• PowerSploit
• WindowsExploits
• Windows-Exploit-Suggester
• Microsoft Wont-Fix-List

05. Linux Privilege Escalation

• LinEnum
• LinPEAS
• SharpCollection
• Linux Exploit Suggester
• Linux Exploit Suggester 2
• Linux Soft Exploit Suggester
• Basic Linux Privilege Escalation
• Linux privilege escalation auditing tool

06. Other

06.1 Binary Exp

• https://tc.gts3.org/cs6265/2019/tut/tut01-warmup1.html
• https://guyinatuxedo.github.io/index.html
• https://github.com/Gallopsled/pwntools-tutorial
• https://butter0verflow.github.io/

06.2 File Upload

• https://infosecwriteups.com/all-about-unrestricted-file-upload-a4ecf243b86b

06.3 Bug Bounty

• https://kathan19.gitbook.io/howtohunt/

06.4 Malware analysis

• Decompiled Pegasus Spyware

06.5 Other

• https://github.com/juanjoSanz/aws-pentesting-lab
• https://github.com/andrew-d/static-binaries/
• https://medium.com/mii-cybersec/how-to-dealing-with-flutterapp-penetration-testing-another-way-bypass-ssl-pinning-ed6755217c85
• https://github.com/streaak/keyhacks
• https://missing.csail.mit.edu/2020/editors/
• https://www.eicar.org/?page_id=3950
• https://lelinhtinh.github.io/de4js/

06.6 Active Directory

• https://blog.xpnsec.com/
• https://yingshaoxo.gitbook.io/university-notes/