# BookMarks

## 00. Anonymous

* [https://unsee.cc/](https://unsee.cc/)
* [https://paste.offsec.com/](https://paste.offsec.com/)

## 01. Notebooks

* [https://book.hacktricks.xyz/](https://book.hacktricks.xyz)
* [https://gtfobins.github.io/](https://gtfobins.github.io)
* [https://wadcoms.github.io/](https://wadcoms.github.io)
* [https://lolbas-project.github.io/](https://lolbas-project.github.io)
* [https://www.explainshell.com/](https://www.explainshell.com)
* [https://www.ired.team/](https://www.ired.team)
* [https://0xrick.github.io/](https://0xrick.github.io)
* [https://howto.thec2matrix.com/](https://howto.thec2matrix.com/)
* [https://ptestmethod.readthedocs.io/](https://ptestmethod.readthedocs.io/en/latest/index.html)
* [https://gitbook.seguranca-informatica.pt/](https://gitbook.seguranca-informatica.pt)
* [https://vk9-sec.com/](https://vk9-sec.com)
* [https://butter0verflow.github.io/](https://butter0verflow.github.io)
* [https://blueteamdope.gitbook.io/penetration-testing-playbook/](https://blueteamdope.gitbook.io/penetration-testing-playbook/)
* [https://hunter2.gitbook.io/darthsidious/](https://hunter2.gitbook.io/darthsidious/)
* [https://guyinatuxedo.github.io/](https://guyinatuxedo.github.io/)
* [https://notes.offsec-journey.com/](https://notes.offsec-journey.com/)
* [https://pentestbook.six2dez.com/](https://pentestbook.six2dez.com/)
* [https://persistence-info.github.io/](https://persistence-info.github.io/)

## 02. OSCP Notes

* [https://sushant747.gitbooks.io/total-oscp-guide/content/](https://sushant747.gitbooks.io/total-oscp-guide/content/)
* [https://github.com/rkhal101/Hack-the-Box-OSCP-Preparation](https://github.com/rkhal101/Hack-the-Box-OSCP-Preparation)
* [https://refabr1k.gitbook.io/oscp/](https://refabr1k.gitbook.io/oscp/)
* [https://oscpnotes.infosecsanyam.in/](https://oscpnotes.infosecsanyam.in/)
* [https://www.netsecfocus.com/oscp/2021/05/06/The\_Journey\_to\_Try\_Harder-\_TJnull-s\_Preparation\_Guide\_for\_PEN-200\_PWK\_OSCP\_2.0.html](https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html)
* [https://infosecwriteups.com/how-i-passed-oscp-with-100-points-in-12-hours-without-metasploit-in-my-first-attempt-dc8d03366f33](https://infosecwriteups.com/how-i-passed-oscp-with-100-points-in-12-hours-without-metasploit-in-my-first-attempt-dc8d03366f33)
* [https://rana-khalil.gitbook.io/hack-the-box-oscp-preparation/](https://rana-khalil.gitbook.io/hack-the-box-oscp-preparation/)
* [https://cd6629.gitbook.io/ctfwriteups/oscp-cheatsheet-unfinished](https://cd6629.gitbook.io/ctfwriteups/oscp-cheatsheet-unfinished)
* [https://casvancooten.com/posts/2021/03/getting-the-osep-certification-evasion-techniques-and-breaching-defenses-pen-300-course-review/](https://casvancooten.com/posts/2021/03/getting-the-osep-certification-evasion-techniques-and-breaching-defenses-pen-300-course-review/)
* [https://fareedfauzi.gitbook.io/oscp-notes/](https://fareedfauzi.gitbook.io/oscp-notes/)
* [https://www.tarlogic.com/en/blog/how-to-attack-kerberos/](https://www.tarlogic.com/en/blog/how-to-attack-kerberos/)

## 03. Awesome Cheatsheet 📜

* [Bash](https://github.com/LeCoupa/awesome-cheatsheets/blob/master/languages/bash.sh)
* [Curl](https://github.com/LeCoupa/awesome-cheatsheets/blob/master/tools/curl.sh)
* [VIM](https://raw.githubusercontent.com/LeCoupa/awesome-cheatsheets/master/tools/vim.txt)
* [LFI](https://highon.coffee/blog/lfi-cheat-sheet/)
* [MSF](https://www.offensive-security.com/metasploit-unleashed/)
* [mysql](https://devhints.io/mysql)
* [Docker](https://raw.githubusercontent.com/LeCoupa/awesome-cheatsheets/master/tools/docker.sh)
* [cronatb](https://crontab.guru/)
* [MacOS](https://github.com/herrbischoff/awesome-macos-command-line)
* [Regexp](https://github.com/attackercan/regexp-security-cheatsheet)
* [Python3](https://github.com/siyuanzhao/python3-in-one-pic)
* [msfvenom](https://netsec.ws/?p=331)
* [MobApps](https://github.com/tanprathan/MobileApp-Pentest-Cheatsheet#all-in-one-mobile-security-frameworks)
* [PowerView-2.0](https://gist.github.com/HarmJ0y/3328d954607d71362e3c)
* [PowerView-3.0](https://gist.github.com/HarmJ0y/184f9822b195c52dd50c379ed3117993)
* [Deserialization](https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet)
* [PHP htaccess injection](https://github.com/sektioneins/pcc/wiki/PHP-htaccess-injection-cheat-sheet)
* [Reverse Shell Cheat Sheet](http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet)
* [WebHackersWeapons](https://github.com/hahwul/WebHackersWeapons)

## 04. Windows Privilege Escalation

* [Sherlock](https://github.com/rasta-mouse/Sherlock)
* [Watson](https://github.com/rasta-mouse/Watson)
* [PowerSploit](https://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc)
* [WindowsExploits](https://github.com/abatchy17/WindowsExploits)
* [Windows-Exploit-Suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester)
* [Microsoft Wont-Fix-List](https://github.com/cfalta/MicrosoftWontFixList/blob/main/README.md)

## 05. Linux Privilege Escalation

* [LinEnum](https://github.com/rebootuser/LinEnum)
* L[inPEAS](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/linPEAS)
* [SharpCollection](https://github.com/Flangvik/SharpCollection)
* [Linux Exploit Suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester)
* [Linux Exploit Suggester 2](https://github.com/jondonas/linux-exploit-suggester-2)
* [Linux Soft Exploit Suggester](https://github.com/belane/linux-soft-exploit-suggester)
* [Basic Linux Privilege Escalation](https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/)
* [Linux privilege escalation auditing tool](https://github.com/mzet-/linux-exploit-suggester)

## 06. Other

### 06.1 Binary Exp

* [https://tc.gts3.org/cs6265/2019/tut/tut01-warmup1.html](https://tc.gts3.org/cs6265/2019/tut/tut01-warmup1.html)
* [https://guyinatuxedo.github.io/index.html](https://guyinatuxedo.github.io/index.html)
* [https://github.com/Gallopsled/pwntools-tutorial](https://github.com/Gallopsled/pwntools-tutorial)
* [https://butter0verflow.github.io/](https://butter0verflow.github.io)

### 06.2 File Upload

* [https://infosecwriteups.com/all-about-unrestricted-file-upload-a4ecf243b86b](https://infosecwriteups.com/all-about-unrestricted-file-upload-a4ecf243b86b)

### 06.3 Bug Bounty

* [https://kathan19.gitbook.io/howtohunt/](https://kathan19.gitbook.io/howtohunt/)

### 06.4 Malware analysis

* [Decompiled Pegasus Spyware](https://github.com/jonathandata1/pegasus_spyware)

### 06.5 Other

* [https://github.com/juanjoSanz/aws-pentesting-lab](https://github.com/juanjoSanz/aws-pentesting-lab)
* [https://github.com/andrew-d/static-binaries/](https://github.com/andrew-d/static-binaries/)
* [https://medium.com/mii-cybersec/how-to-dealing-with-flutterapp-penetration-testing-another-way-bypass-ssl-pinning-ed6755217c85](https://medium.com/mii-cybersec/how-to-dealing-with-flutterapp-penetration-testing-another-way-bypass-ssl-pinning-ed6755217c85)
* [https://github.com/streaak/keyhacks](https://github.com/streaak/keyhacks)
* [https://missing.csail.mit.edu/2020/editors/](https://missing.csail.mit.edu/2020/editors/)
* [https://www.eicar.org/?page\_id=3950](https://www.eicar.org/?page_id=3950)
* [https://lelinhtinh.github.io/de4js/](https://lelinhtinh.github.io/de4js/)

### 06.6 Active Directory

* [https://blog.xpnsec.com/](https://blog.xpnsec.com)
* [https://yingshaoxo.gitbook.io/university-notes/](https://yingshaoxo.gitbook.io/university-notes/)
