A structured knowledge base for penetration testers.

Browse by service or platform, navigate through attack phases — Reconnaissance, Enumeration, Exploitation, Privilege Escalation — and find the exact cheatsheet or technique you need.

690+

Cheatsheets, blogs & guides

61+

Services & platforms

49+

CTF writeups

31+

CVEs PoC's

Services & Platforms

Each service contains attack phases and individual technique cheatsheets. This is a horizontally scrolling list of services. You can tab through items.

View all

Hosts

HTTP/HTTPS

FTP

SSH

DNS

Telnet

Finger

TFTP

Kerberos

NTP

SMB

MSRPC

SNMP

LDAP

NFS

CGMS

RDP

VNC

WinRM

Redis

Elasticsearch

MSSQL

MySQL

PostgreSQL

MongoDB

SMTP

POP3

IMAP

IIS

RPCBind / Portmapper

NetBIOS

Rsync

r-services

Tomcat / AJP

Oracle

Java RMI / JMX

AMQP

Memcached

MQTT

IPP / CUPS

Git daemon

IKE

Docker API

Jenkins

CouchDB

etcd

Consul

Prometheus

Grafana

Hadoop HDFS

Zabbix

IRC

X11

Cassandra

Hosts HTTP/HTTPS FTP SSH DNS Telnet Finger TFTP Kerberos NTP SMB MSRPC SNMP LDAP NFS CGMS RDP VNC WinRM Redis Elasticsearch MSSQL MySQL PostgreSQL MongoDB SMTP POP3 IMAP IIS RPCBind / Portmapper NetBIOS Rsync r-services Tomcat / AJP Oracle Java RMI / JMX AMQP Memcached MQTT IPP / CUPS Git daemon IKE Docker API Jenkins CouchDB etcd Consul Prometheus Grafana Hadoop HDFS Zabbix IRC X11 Cassandra

HTTP/HTTPS

Web services serving sites and APIs

Reconnaissance Enumeration Vulnerability Discovery +5 more

Linux

Practical command-first pentest notes for targets running Linux, grouped by technique.

Privilege Escalation Post-Exploitation Exploitation +4 more

Windows

Practical command-first pentest notes for Windows targets and AD-adjacent operations, grouped by technique.

Privilege Escalation Post-Exploitation Lateral Movement +5 more

Wireless

Setup and Hardware Reconnaissance Enumeration +3 more

AI Platforms

Reconnaissance Threat Modeling Vulnerability Discovery +3 more

Active Directory

Active Directory is Microsoft's directory service for managing users, computers, and policies in Windows networks. It is the central authentication and authorization backbone of most enterprise environments.

Enumeration Vulnerability Discovery Exploitation +4 more