██╗ ██╗ █████╗ ██████╗██╗ ██╗██╗███╗ ██╗ ██████╗
██║ ██║██╔══██╗██╔════╝██║ ██╔╝██║████╗ ██║██╔════╝
███████║███████║██║ █████╔╝ ██║██╔██╗ ██║██║ ███╗
██╔══██║██╔══██║██║ ██╔═██╗ ██║██║╚██╗██║██║ ██║
██║ ██║██║ ██║╚██████╗██║ ██╗██║██║ ╚████║╚██████╔╝
╚═╝ ╚═╝╚═╝ ╚═╝ ╚═════╝╚═╝ ╚═╝╚═╝╚═╝ ╚═══╝ ╚═════╝
██████╗██╗ ██╗███████╗ █████╗ ████████╗███████╗██╗ ██╗███████╗███████╗████████╗███████╗
██╔════╝██║ ██║██╔════╝██╔══██╗╚══██╔══╝██╔════╝██║ ██║██╔════╝██╔════╝╚══██╔══╝██╔════╝
██║ ███████║█████╗ ███████║ ██║ ███████╗███████║█████╗ █████╗ ██║ ███████╗
██║ ██╔══██║██╔══╝ ██╔══██║ ██║ ╚════██║██╔══██║██╔══╝ ██╔══╝ ██║ ╚════██║
╚██████╗██║ ██║███████╗██║ ██║ ██║ ███████║██║ ██║███████╗███████╗ ██║ ███████║
╚═════╝╚═╝ ╚═╝╚══════╝╚═╝ ╚═╝ ╚═╝ ╚══════╝╚═╝ ╚═╝╚══════╝╚══════╝ ╚═╝ ╚══════╝
📚 A comprehensive collection of penetration testing cheatsheets for security professionals
Cheatsheets • Quick Start • Contributing • License
Hacking Cheatsheets is a curated collection of quick reference guides for penetration testing and ethical hacking tools. Each cheatsheet provides:
- ✅ Clear explanations of tool functionality
- ✅ Command syntax with practical examples
- ✅ Real-world scenarios and use cases
- ✅ Quick reference tables for rapid lookup
- ✅ Tips & best practices from experienced pentesters
| Tool | Description | Cheatsheet |
|---|---|---|
| Metasploit Framework | The world's most used penetration testing framework | 📄 View |
| Meterpreter | Advanced post-exploitation payload | 📄 View |
| Mimikatz | Windows credential extraction tool | 📄 View |
| PowerShell | Windows scripting for pentesting | 📄 View |
| Linux Commands | Linux & Bash for pentesting | 📄 View |
| Tool | Description | Cheatsheet |
|---|---|---|
| Nmap | Network discovery and security auditing | 📄 View |
| Gobuster | Directory/DNS/VHost brute-forcing | 📄 View |
| Nikto | Web server scanner | 📄 View |
| Tool | Description | Cheatsheet |
|---|---|---|
| SQLMap | SQL injection automation tool | 📄 View |
| Burp Suite | Web application security testing platform | 📄 View |
| OWASP ZAP | Free web app security scanner | 📄 View |
| Tool | Description | Cheatsheet |
|---|---|---|
| Hydra | Fast network login cracker | 📄 View |
| John the Ripper | Legendary password cracker | 📄 View |
| Hashcat | World's fastest GPU password cracker | 📄 View |
| Tool | Description | Cheatsheet |
|---|---|---|
| Wireshark | Network protocol analyzer | 📄 View |
| tcpdump | Command-line packet analyzer | 📄 View |
| Tool | Description | Cheatsheet |
|---|---|---|
| Nuclei | Template-based vulnerability scanner | 📄 View |
| ffuf | Fast web fuzzer | 📄 View |
| Subfinder | Subdomain discovery | 📄 View |
| httpx | HTTP probe & toolkit | 📄 View |
| Tool | Description | Cheatsheet |
|---|---|---|
| Google Dorking | Advanced Google search techniques | 📄 View |
| Shodan | IoT & device search engine | 📄 View |
| GitHub Dorking | Secret hunting in repositories | 📄 View |
| Topic | Description | Cheatsheet |
|---|---|---|
| Linux PrivEsc | Linux privilege escalation techniques | 📄 View |
| Windows PrivEsc | Windows privilege escalation techniques | 📄 View |
| Tool | Description | Cheatsheet |
|---|---|---|
| Volatility | Memory forensics framework | 📄 View |
| Autopsy | Digital forensics platform (GUI) | 📄 View |
| ExifTool | Metadata extraction & analysis | 📄 View |
| Binwalk | Firmware analysis & extraction | 📄 View |
| Tool | Description | Cheatsheet |
|---|---|---|
| Ghidra | NSA reverse engineering suite | 📄 View |
| GDB | GNU Debugger (Linux debugging) | 📄 View |
| x64dbg | Windows x64/x32 debugger | 📄 View |
| Tool | Description | Cheatsheet |
|---|---|---|
| Aircrack-ng | WiFi hacking suite (WPA/WPA2) | 📄 View |
| Wifite | Automated WiFi auditor | 📄 View |
| Bettercap | Network attack framework (MITM/WiFi) | 📄 View |
| Tool | Description | Cheatsheet |
|---|---|---|
| ⭐ AD Methodology | Step-by-step attack guide | 📄 View |
| BloodHound | AD attack path visualization | 📄 View |
| Impacket | Python AD attack toolkit | 📄 View |
| CrackMapExec | AD Swiss Army knife | 📄 View |
| Rubeus | Kerberos abuse toolkit | 📄 View |
| PowerView | PowerShell AD enumeration | 📄 View |
| Responder | LLMNR/NBT-NS poisoning | 📄 View |
| Evil-WinRM | WinRM shell for pentesters | 📄 View |
| Kerbrute | Kerberos user enum & spray | 📄 View |
| Resource | Description | Cheatsheet |
|---|---|---|
| Wordlists | Complete wordlist reference guide | 📄 View |
| Kali Linux Tools | 600+ tools by category | 📄 View |
git clone https://github.com/YOUR_USERNAME/Hacking-Cheatsheets.git
cd Hacking-CheatsheetsNavigate to any tool folder and open the README.md file:
# View Metasploit cheatsheet
cat Metasploit/README.md
# Or open in your favorite editor
code Metasploit/All cheatsheets are in Markdown format, making them:
- 📱 Mobile-friendly - Read on any device
- 🔌 Offline accessible - No internet required
- 🖨️ Printable - Create physical copies
- 🔍 Searchable - Use grep or your editor's search
Hacking-Cheatsheets/
│
├── README.md # This file - Main index
├── LICENSE # MIT License
├── CONTRIBUTING.md # Contribution guidelines
├── .gitignore # Git ignore rules
│
├── Metasploit/ # Metasploit Framework
│ ├── README.md # Complete msfconsole guide
│ └── Meterpreter.md # Meterpreter cheatsheet
│
├── Nmap/ # Network Scanner
│ └── README.md # Complete Nmap guide
│
├── Gobuster/ # Directory/DNS Enumeration
│ └── README.md # Complete Gobuster guide
│
├── Nikto/ # Web Server Scanner
│ └── README.md # Complete Nikto guide
│
├── SQLMap/ # SQL Injection Tool
│ └── README.md # Complete SQLMap guide
│
├── Burp-Suite/ # Web Application Testing
│ └── README.md # Complete Burp Suite guide
│
├── OWASP-ZAP/ # OWASP Zed Attack Proxy
│ └── README.md # Complete ZAP guide
│
├── Hydra/ # Network Login Cracker
│ └── README.md # Complete Hydra guide
│
├── John-The-Ripper/ # Password Cracker
│ └── README.md # Complete John guide
│
├── Hashcat/ # GPU Password Cracker
│ └── README.md # Complete Hashcat guide
│
├── Wireshark/ # Network Protocol Analyzer
│ └── README.md # Complete Wireshark guide
│
├── tcpdump/ # Command-Line Packet Analyzer
│ └── README.md # Complete tcpdump guide
│
├── Nuclei/ # Bug Bounty Scanner
│ └── README.md # Complete Nuclei guide
│
├── ffuf/ # Web Fuzzer
│ └── README.md # Complete ffuf guide
│
├── Subfinder/ # Subdomain Discovery
│ └── README.md # Complete Subfinder guide
│
├── httpx/ # HTTP Probe & Toolkit
│ └── README.md # Complete httpx guide
│
├── Google-Dorking/ # Google Search Hacking
│ └── README.md # Complete Google Dorking guide
│
├── Shodan/ # IoT Search Engine
│ └── README.md # Complete Shodan guide
│
├── GitHub-Dorking/ # Secret Hunting
│ └── README.md # Complete GitHub Dorking guide
│
└── ...
Contributions are welcome! Please read our Contributing Guidelines before submitting a pull request.
- 📝 Add new cheatsheets for tools not yet covered
- 🔧 Improve existing cheatsheets with better examples
- 🐛 Report issues or suggest improvements
- 🌐 Translate cheatsheets to other languages
- ⭐ Star this repo to show your support!
IMPORTANT: These cheatsheets are intended for educational purposes and authorized security testing only.
- ✅ Use on systems you own
- ✅ Use with explicit written permission
- ✅ Use in legal penetration testing engagements
- ❌ Never use for unauthorized access
- ❌ Never use for malicious purposes
Unauthorized access to computer systems is illegal. The authors are not responsible for any misuse of this information.
This project is licensed under the MIT License - see the LICENSE file for details.
If you find these cheatsheets useful, please consider:
- ⭐ Starring this repository
- 🍴 Forking to contribute
- 📢 Sharing with fellow security professionals
- 💬 Providing feedback for improvements
- GitHub Issues - For bug reports and feature requests
- Pull Requests - For contributions
Happy Hacking! 🔴
Remember: Hack responsibly, hack ethically!
Made with ❤️ for the cybersecurity community