🔴 Hacking Cheatsheets

🇬🇧 English • 🇬🇷 Ελληνικά • 🇹🇷 Türkçe • 🇮🇹 Italiano • 🇩🇪 Deutsch • 🇷🇺 Русский • 🇫🇷 Français • 🇪🇸 Español • 🇵🇹 Português (Portugal) • 🌐 العربية • 🇨🇳 简体中文 • 🇳🇴 Norsk (Bokmål)

    ██╗  ██╗ █████╗  ██████╗██╗  ██╗██╗███╗   ██╗ ██████╗ 
    ██║  ██║██╔══██╗██╔════╝██║ ██╔╝██║████╗  ██║██╔════╝ 
    ███████║███████║██║     █████╔╝ ██║██╔██╗ ██║██║  ███╗
    ██╔══██║██╔══██║██║     ██╔═██╗ ██║██║╚██╗██║██║   ██║
    ██║  ██║██║  ██║╚██████╗██║  ██╗██║██║ ╚████║╚██████╔╝
    ╚═╝  ╚═╝╚═╝  ╚═╝ ╚═════╝╚═╝  ╚═╝╚═╝╚═╝  ╚═══╝ ╚═════╝ 
     ██████╗██╗  ██╗███████╗ █████╗ ████████╗███████╗██╗  ██╗███████╗███████╗████████╗███████╗
    ██╔════╝██║  ██║██╔════╝██╔══██╗╚══██╔══╝██╔════╝██║  ██║██╔════╝██╔════╝╚══██╔══╝██╔════╝
    ██║     ███████║█████╗  ███████║   ██║   ███████╗███████║█████╗  █████╗     ██║   ███████╗
    ██║     ██╔══██║██╔══╝  ██╔══██║   ██║   ╚════██║██╔══██║██╔══╝  ██╔══╝     ██║   ╚════██║
    ╚██████╗██║  ██║███████╗██║  ██║   ██║   ███████║██║  ██║███████╗███████╗   ██║   ███████║
     ╚═════╝╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝   ╚═╝   ╚══════╝╚═╝  ╚═╝╚══════╝╚══════╝   ╚═╝   ╚══════╝

📚 A comprehensive collection of penetration testing cheatsheets for security professionals

Cheatsheets • Quick Start • Contributing • License

🌍 Available Languages

Hacking Cheatsheets is available in 12 languages: English, Greek, Turkish, Italian, German, Russian, French, Spanish, Portuguese (Portugal), Arabic, Simplified Chinese, and Norwegian Bokmål. Each language has its own homepage and links to the translated guides.

English remains the primary version. The translations cover all 127 guides across 77 topic folders linked from this homepage. Tool names, command syntax, paths, and necessary technical terms retain their original form. If a translation differs from the English source, please report it through an issue or pull request.

Language	Homepage
🇬🇧 English	English
🇬🇷 Ελληνικά	Ελληνικά
🇹🇷 Türkçe	Türkçe
🇮🇹 Italiano	Italiano
🇩🇪 Deutsch	Deutsch
🇷🇺 Русский	Русский
🇫🇷 Français	Français
🇪🇸 Español	Español
🇵🇹 Português (Portugal)	Português (Portugal)
🌐 العربية	العربية
🇨🇳 简体中文	简体中文
🇳🇴 Norsk (Bokmål)	Norsk (Bokmål)

🎯 About

Hacking Cheatsheets is a curated collection of quick reference guides for penetration testing and ethical hacking tools. Each cheatsheet provides:

✅ Clear explanations of tool functionality
✅ Command syntax with practical examples
✅ Real-world scenarios and use cases
✅ Quick reference tables for rapid lookup
✅ Tips & best practices from experienced pentesters

🎯 Attack Methodology (Kill Chain)

NEW! Complete step-by-step guide for penetration testing based on MITRE ATT&CK framework.

Phase	Description	Guide
1. Initial Access	Exploits, phishing, credentials	📄 View
2. Enumeration	System & network discovery	📄 View
3. Privilege Escalation	Get root/SYSTEM access	📄 View
4. Lateral Movement	Move across the network	📄 View
5. Persistence	Maintain access	📄 View
6. Defense Evasion	Bypass AV/EDR/AMSI	📄 View
7. Actions on Objectives	Data exfiltration & impact	📄 View

👉 Full Kill Chain Overview

🛡️ Blue Team (Defensive Security)

NEW! Complete defensive security guides for SOC analysts and incident responders.

Topic	Description	Guide
Incident Response	IR lifecycle, containment, procedures	📄 View
Log Analysis	Windows/Linux log analysis & Event IDs	📄 View
SIEM Detection	Splunk/ELK queries & dashboards	📄 View
Threat Hunting	Proactive hunting techniques	📄 View
Hardening	Windows/Linux hardening checklists	📄 View
Sigma Rules	Platform-agnostic detection rules	📄 View
YARA Rules	Malware & IOC detection patterns	📄 View

👉 Full Blue Team Overview

☁️ Cloud Security

NEW! Cloud pentesting guides for AWS, Azure, and GCP.

Provider	Description	Guide
AWS	S3, IAM, Lambda, EC2, IMDS	📄 View
Azure	Azure AD, Blob Storage, VMs, Key Vault	📄 View
GCP	GCS, IAM, Compute, Cloud Functions	📄 View

👉 Full Cloud Security Overview

📱 Mobile Security

NEW! Mobile app pentesting guides for Android and iOS.

Platform	Description	Guide
Android	APK analysis, Frida, root detection bypass	📄 View
iOS	IPA analysis, jailbreak, Objection, keychain	📄 View

👉 Full Mobile Security Overview

🐳 Container Security

NEW! Docker & Kubernetes pentesting guides.

Platform	Description	Guide
Docker	Container escape, image analysis, daemon exploitation	📄 View
Kubernetes	RBAC bypass, pod escape, secrets extraction	📄 View

👉 Full Container Security Overview

🎭 Social Engineering

NEW! Social engineering techniques, phishing campaigns, and pretexting guides.

Topic	Description	Guide
Phishing	Email phishing, GoPhish, Evilginx2, vishing, smishing	📄 View
Pretexting	Personas, scenarios, psychological manipulation	📄 View

👉 Full Social Engineering Overview

📝 Reporting Templates

NEW! Professional report templates for pentesters and bug bounty hunters.

Template	Description	Guide
Pentest Report	Full penetration test report structure	📄 View
Bug Bounty Report	HackerOne/Bugcrowd submission template	📄 View
Executive Summary	Non-technical summary for C-level	📄 View

🔍 OSINT (Open Source Intelligence)

NEW! Complete OSINT methodology and tool guides.

Topic	Description	Guide
People Search	Find individuals online, phone/address lookup	📄 View
Email OSINT	Email discovery, breach checking, verification	📄 View
Social Media	Username search, platform-specific OSINT	📄 View
Domain & IP	WHOIS, DNS, subdomain, IP reconnaissance	📄 View
Image OSINT	Reverse image search, EXIF metadata	📄 View

👉 Full OSINT Overview

🌐 Network Pentesting

NEW! Complete network penetration testing guides.

Topic	Description	Guide
Port Scanning	Nmap, Masscan, RustScan	📄 View
Network Enumeration	SMB, SNMP, NFS, LDAP, DNS	📄 View
MITM Attacks	ARP spoofing, DNS spoofing, SSL strip	📄 View
Service Exploitation	FTP, SSH, SMB, RDP, databases	📄 View

👉 Full Network Pentesting Overview

🏁 CTF Cheatsheets

NEW! Complete CTF competition guides for HackTheBox, TryHackMe, PicoCTF.

Category	Description	Guide
Web	SQLi, XSS, SSTI, LFI, Auth bypass	📄 View
Crypto	RSA, AES, hashes, encoding, XOR	📄 View
Reverse Engineering	Ghidra, IDA, GDB, patching	📄 View
Forensics	Steganography, memory, disk, PCAP	📄 View
Pwn/Binary	Buffer overflow, ROP, shellcode	📄 View

👉 Full CTF Overview

📡 IoT Hacking

NEW! IoT device hacking, firmware analysis, and hardware hacking guides.

Topic	Description	Guide
Firmware Analysis	Binwalk, extraction, RE, secrets	📄 View
Hardware Hacking	UART, JTAG, SPI, I2C, debug ports	📄 View

👉 Full IoT Hacking Overview

📖 Cheatsheets

🔴 Exploitation Framework

Tool	Description	Cheatsheet
Metasploit Framework	The world's most used penetration testing framework	📄 View
Meterpreter	Advanced post-exploitation payload	📄 View
Mimikatz	Windows credential extraction tool	📄 View
PowerShell	Windows scripting for pentesting	📄 View
Linux Commands	Linux & Bash for pentesting	📄 View

🔍 Reconnaissance & Scanning

Tool	Description	Cheatsheet
Nmap	Network discovery and security auditing	📄 View
Gobuster	Directory/DNS/VHost brute-forcing	📄 View
Nikto	Web server scanner	📄 View

🌐 Web Application Testing

Tool	Description	Cheatsheet
SQLMap	SQL injection automation tool	📄 View
Burp Suite	Web application security testing platform	📄 View
OWASP ZAP	Free web app security scanner	📄 View

🔓 Password Cracking

Tool	Description	Cheatsheet
Hydra	Fast network login cracker	📄 View
John the Ripper	Legendary password cracker	📄 View
Hashcat	World's fastest GPU password cracker	📄 View

📡 Network Analysis

Tool	Description	Cheatsheet
Wireshark	Network protocol analyzer	📄 View
tcpdump	Command-line packet analyzer	📄 View

🐛 Bug Bounty

Tool	Description	Cheatsheet
⭐ BB Methodology	Complete bug bounty hunting guide	📄 View
Nuclei	Template-based vulnerability scanner	📄 View
ffuf	Fast web fuzzer	📄 View
Subfinder	Subdomain discovery	📄 View
httpx	HTTP probe & toolkit	📄 View
Amass	In-depth attack surface mapping	📄 View
GAU	Get All URLs from archives	📄 View
Katana	Next-gen web crawler	📄 View
Arjun	Hidden parameter discovery	📄 View
Dalfox	XSS vulnerability scanner	📄 View

💉 Payloads Collection

Vulnerability	Description	Cheatsheet
XSS	Cross-Site Scripting payloads	📄 View
SQLi	SQL Injection payloads	📄 View
LFI	Local File Inclusion payloads	📄 View
SSTI	Server-Side Template Injection	📄 View
Command Injection	OS command injection payloads	📄 View
NoSQL Injection	MongoDB, CouchDB, Redis payloads	📄 View
Deserialization	Java, PHP, Python, .NET payloads	📄 View
WebSocket Attacks	CSWSH, injection, hijacking	📄 View
GraphQL Injection	Introspection, IDOR, injection	📄 View

🔴 Web Vulnerabilities

Vulnerability	Description	Cheatsheet
API Security	REST/GraphQL/JWT testing guide	📄 View
IDOR	Insecure Direct Object Reference	📄 View
SSRF	Server-Side Request Forgery	📄 View
XXE	XML External Entity Injection	📄 View
Race Conditions	Timing & concurrency attacks	📄 View
Auth Bypass	Authentication bypass techniques	📄 View
CORS	Cross-Origin misconfigurations	📄 View
Open Redirect	URL redirect vulnerabilities	📄 View

🛡️ Advanced Attack Techniques

Topic	Description	Cheatsheet
WAF Bypass	Origin IP discovery & WAF evasion	📄 View
Cloudflare Bypass	Find origin IP behind Cloudflare	📄 View
Subdomain Takeover	Dangling CNAME exploitation	📄 View
Cache Poisoning	Web cache poisoning & deception	📄 View
HTTP Smuggling	Request smuggling (CL.TE/TE.CL)	📄 View
Prototype Pollution	JavaScript prototype attacks	📄 View

🔎 Dorking & OSINT

Tool	Description	Cheatsheet
Google Dorking	Advanced Google search techniques	📄 View
Shodan	IoT & device search engine	📄 View
GitHub Dorking	Secret hunting in repositories	📄 View

🔝 Privilege Escalation

Topic	Description	Cheatsheet
Linux PrivEsc	Linux privilege escalation techniques	📄 View
Windows PrivEsc	Windows privilege escalation techniques	📄 View

🔬 Digital Forensics

Tool	Description	Cheatsheet
Volatility	Memory forensics framework	📄 View
Autopsy	Digital forensics platform (GUI)	📄 View
ExifTool	Metadata extraction & analysis	📄 View
Binwalk	Firmware analysis & extraction	📄 View

🔄 Reverse Engineering

Tool	Description	Cheatsheet
Ghidra	NSA reverse engineering suite	📄 View
GDB	GNU Debugger (Linux debugging)	📄 View
x64dbg	Windows x64/x32 debugger	📄 View

📶 WiFi Hacking

Tool	Description	Cheatsheet
Aircrack-ng	WiFi hacking suite (WPA/WPA2)	📄 View
Wifite	Automated WiFi auditor	📄 View
Bettercap	Network attack framework (MITM/WiFi)	📄 View

🏢 Active Directory

Tool	Description	Cheatsheet
⭐ AD Methodology	Step-by-step attack guide	📄 View
BloodHound	AD attack path visualization	📄 View
Impacket	Python AD attack toolkit	📄 View
CrackMapExec	AD Swiss Army knife	📄 View
Rubeus	Kerberos abuse toolkit	📄 View
PowerView	PowerShell AD enumeration	📄 View
Responder	LLMNR/NBT-NS poisoning	📄 View
Evil-WinRM	WinRM shell for pentesters	📄 View
Kerbrute	Kerberos user enum & spray	📄 View

📚 Resources

Resource	Description	Cheatsheet
Wordlists	Complete wordlist reference guide	📄 View
Kali Linux Tools	600+ tools by category	📄 View

🚀 Quick Start

Clone the Repository

git clone https://github.com/Ilias1988/Hacking-Cheatsheets.git
cd Hacking-Cheatsheets

Browse Cheatsheets

Navigate to any tool folder and open the README.md file:

# View Metasploit cheatsheet
cat Metasploit/README.md

# Or open in your favorite editor
code Metasploit/

Offline Access

All cheatsheets are in Markdown format, making them:

📱 Mobile-friendly - Read on any device
🔌 Offline accessible - No internet required
🖨️ Printable - Create physical copies
🔍 Searchable - Use grep or your editor's search

📂 Repository Structure

Hacking-Cheatsheets/
│
├── README.md                # This file - Main index
├── README.it.md             # Italian translation - Main index
├── LICENSE                  # MIT License
├── CONTRIBUTING.md          # Contribution guidelines
├── CONTRIBUTING.it.md       # Italian contribution guidelines
├── .gitignore               # Git ignore rules
│
├── Metasploit/              # Metasploit Framework
│   ├── README.md            # Complete msfconsole guide
│   └── Meterpreter.md       # Meterpreter cheatsheet
│
├── Nmap/                    # Network Scanner
│   └── README.md            # Complete Nmap guide
│
├── Gobuster/                # Directory/DNS Enumeration
│   └── README.md            # Complete Gobuster guide
│
├── Nikto/                   # Web Server Scanner
│   └── README.md            # Complete Nikto guide
│
├── SQLMap/                  # SQL Injection Tool
│   └── README.md            # Complete SQLMap guide
│
├── Burp-Suite/              # Web Application Testing
│   └── README.md            # Complete Burp Suite guide
│
├── OWASP-ZAP/               # OWASP Zed Attack Proxy
│   └── README.md            # Complete ZAP guide
│
├── Hydra/                   # Network Login Cracker
│   └── README.md            # Complete Hydra guide
│
├── John-The-Ripper/         # Password Cracker
│   └── README.md            # Complete John guide
│
├── Hashcat/                 # GPU Password Cracker
│   └── README.md            # Complete Hashcat guide
│
├── Wireshark/               # Network Protocol Analyzer
│   └── README.md            # Complete Wireshark guide
│
├── tcpdump/                 # Command-Line Packet Analyzer
│   └── README.md            # Complete tcpdump guide
│
├── Nuclei/                  # Bug Bounty Scanner
│   └── README.md            # Complete Nuclei guide
│
├── ffuf/                    # Web Fuzzer
│   └── README.md            # Complete ffuf guide
│
├── Subfinder/               # Subdomain Discovery
│   └── README.md            # Complete Subfinder guide
│
├── httpx/                   # HTTP Probe & Toolkit
│   └── README.md            # Complete httpx guide
│
├── Google-Dorking/          # Google Search Hacking
│   └── README.md            # Complete Google Dorking guide
│
├── Shodan/                  # IoT Search Engine
│   └── README.md            # Complete Shodan guide
│
├── GitHub-Dorking/          # Secret Hunting
│   └── README.md            # Complete GitHub Dorking guide
│
└── ...

🤝 Contributing

Contributions are welcome! Please read our Contributing Guidelines before submitting a pull request.

Ways to Contribute

📝 Add new cheatsheets for tools not yet covered
🔧 Improve existing cheatsheets with better examples
🐛 Report issues or suggest improvements
🌐 Translate cheatsheets to other languages
⭐ Star this repo to show your support!

⚠️ Legal Disclaimer

IMPORTANT: These cheatsheets are intended for educational purposes and authorized security testing only.

✅ Use on systems you own

✅ Use with explicit written permission

✅ Use in legal penetration testing engagements

❌ Never use for unauthorized access

❌ Never use for malicious purposes

Unauthorized access to computer systems is illegal. The authors are not responsible for any misuse of this information.

📜 License

This project is licensed under the MIT License - see the LICENSE file for details.

🌟 Show Your Support

If you find these cheatsheets useful, please consider:

⭐ Starring this repository
🍴 Forking to contribute
📢 Sharing with fellow security professionals
💬 Providing feedback for improvements

📬 Contact

GitHub Issues - For bug reports and feature requests
Pull Requests - For contributions

Happy Hacking! 🔴
Remember: Hack responsibly, hack ethically!

Made with ❤️ for the cybersecurity community

Name		Name	Last commit message	Last commit date
AD-Attack-Methodology		AD-Attack-Methodology
API-Security		API-Security
Aircrack-ng		Aircrack-ng
Amass		Amass
Arjun		Arjun
Attack-Methodology		Attack-Methodology
Auth-Bypass		Auth-Bypass
Autopsy		Autopsy
Bettercap		Bettercap
Binwalk		Binwalk
BloodHound		BloodHound
Blue-Team		Blue-Team
Bug-Bounty-Methodology		Bug-Bounty-Methodology
Burp-Suite		Burp-Suite
CORS		CORS
CTF		CTF
Cache-Poisoning		Cache-Poisoning
Cloud-Security		Cloud-Security
Cloudflare-Bypass		Cloudflare-Bypass
Container-Security		Container-Security
CrackMapExec		CrackMapExec
Dalfox		Dalfox
Evil-WinRM		Evil-WinRM
ExifTool		ExifTool
GAU		GAU
GDB		GDB
Ghidra		Ghidra
GitHub-Dorking		GitHub-Dorking
Gobuster		Gobuster
Google-Dorking		Google-Dorking
HTTP-Request-Smuggling		HTTP-Request-Smuggling
Hashcat		Hashcat
Hydra		Hydra
IDOR		IDOR
Impacket		Impacket
IoT-Hacking		IoT-Hacking
John-The-Ripper		John-The-Ripper
Kali-Linux-Tools		Kali-Linux-Tools
Katana		Katana
Kerbrute		Kerbrute
Linux-Commands		Linux-Commands
Linux-PrivEsc		Linux-PrivEsc
Metasploit		Metasploit
Mimikatz		Mimikatz
Mobile-Security		Mobile-Security
Network-Pentesting		Network-Pentesting
Nikto		Nikto
Nmap		Nmap
Nuclei		Nuclei
OSINT		OSINT
OWASP-ZAP		OWASP-ZAP
Open-Redirect		Open-Redirect
Payloads		Payloads
PowerShell		PowerShell
PowerView		PowerView
Prototype-Pollution		Prototype-Pollution
Race-Conditions		Race-Conditions
Reporting		Reporting
Responder		Responder
Rubeus		Rubeus
SQLMap		SQLMap
SSRF		SSRF
Shodan		Shodan
Social-Engineering		Social-Engineering
Subdomain-Takeover		Subdomain-Takeover
Subfinder		Subfinder
Volatility		Volatility
WAF-Bypass		WAF-Bypass
Wifite		Wifite
Windows-PrivEsc		Windows-PrivEsc
Wireshark		Wireshark
Wordlists		Wordlists
XXE		XXE
ffuf		ffuf
httpx		httpx
tcpdump		tcpdump
translations		translations
x64dbg		x64dbg
.gitignore		.gitignore
CONTRIBUTING.it.md		CONTRIBUTING.it.md
CONTRIBUTING.md		CONTRIBUTING.md
CONTRIBUTING.tr.md		CONTRIBUTING.tr.md
LICENSE		LICENSE
README.ar.md		README.ar.md
README.de.md		README.de.md
README.el.md		README.el.md
README.es.md		README.es.md
README.fr.md		README.fr.md
README.it.md		README.it.md
README.md		README.md
README.nb.md		README.nb.md
README.pt.md		README.pt.md
README.ru.md		README.ru.md
README.tr.md		README.tr.md
README.zh-CN.md		README.zh-CN.md

Latest commit

History

Folders and files

Repository files navigation