Share
## https://sploitus.com/exploit?id=18E8EBA0-DAE2-5124-87B6-9495E8F8AB35
# AYSEC Security Cheatsheets
> A free, practical collection of **cybersecurity cheatsheets** โ web exploitation, privilege escalation, Active Directory, network analysis, forensics & reverse engineering. The exact commands you reach for during a pentest or CTF, with nothing you don't need.
**Read the rendered, searchable versions on [aysec.tech/cheatsheets](https://aysec.tech) โ then practice on free CTF challenges, courses, and 1v1 duels.**
These are maintained as part of [**AYSEC**](https://aysec.tech), a free cybersecurity training platform: hands-on CTF challenges, guided courses, learning paths, and live duels. Every cheatsheet below has an interactive version on the site with copy buttons and links to challenges where you can use it for real.
> โ ๏ธ **For authorized testing and education only.** Use these techniques exclusively on systems you own or have explicit written permission to test.
---
## ๐ Web Application
| Cheatsheet | What's inside |
|---|---|
| **[SQL Injection](sql-injection.md)** ยท [โ read online](https://aysec.tech/cheatsheets/sql-injection) | Detection + exploitation payloads for MySQL, PostgreSQL, MSSQL, Oracle & SQLite |
| **[XSS โ Cross-Site Scripting](xss.md)** ยท [โ read online](https://aysec.tech/cheatsheets/xss) | Payloads, context breakouts, DOM sinks & WAF/filter bypass |
| **[Command Injection](command-injection.md)** ยท [โ read online](https://aysec.tech/cheatsheets/command-injection) | Separators, blind/out-of-band techniques & filter bypass |
| **[Burp Suite](burp-suite.md)** ยท [โ read online](https://aysec.tech/cheatsheets/burp-suite) | Proxy, Repeater, Intruder, Decoder & shortcuts for web testing |
| **[sqlmap](sqlmap.md)** ยท [โ read online](https://aysec.tech/cheatsheets/sqlmap) | Automated SQL injection detection + exploitation flags |
| **[ffuf](ffuf.md)** ยท [โ read online](https://aysec.tech/cheatsheets/ffuf) | Fast web fuzzing โ directories, parameters, vhosts & filters |
| **[WPScan](wpscan.md)** ยท [โ read online](https://aysec.tech/cheatsheets/wpscan) | WordPress enumeration โ users, plugins, themes & known vulns |
| **[Nikto](nikto.md)** ยท [โ read online](https://aysec.tech/cheatsheets/nikto) | Web server vulnerability & misconfiguration scanner |
## ๐ญ Recon & Enumeration
| Cheatsheet | What's inside |
|---|---|
| **[Nmap](nmap.md)** ยท [โ read online](https://aysec.tech/cheatsheets/nmap) | Host discovery, port scanning, service detection, NSE & evasion |
| **[Gobuster](gobuster.md)** ยท [โ read online](https://aysec.tech/cheatsheets/gobuster) | Directory, DNS subdomain & vhost brute-forcing |
| **[enum4linux & smbclient](enum4linux.md)** ยท [โ read online](https://aysec.tech/cheatsheets/enum4linux) | SMB/Samba enumeration โ shares, users, groups & null sessions |
## ๐ฅ Exploitation
| Cheatsheet | What's inside |
|---|---|
| **[Metasploit Framework](metasploit.md)** ยท [โ read online](https://aysec.tech/cheatsheets/metasploit) | msfconsole workflow โ search, use, set, exploit, sessions & meterpreter |
| **[msfvenom](msfvenom.md)** ยท [โ read online](https://aysec.tech/cheatsheets/msfvenom) | Generate reverse shells & payloads for every platform and format |
| **[Reverse Shell](reverse-shell.md)** ยท [โ read online](https://aysec.tech/cheatsheets/reverse-shell) | One-liners for bash, python, nc, php, PowerShell + TTY upgrade |
| **[Netcat](netcat.md)** ยท [โ read online](https://aysec.tech/cheatsheets/netcat) | The TCP/IP swiss-army knife โ listeners, shells, transfers & scans |
| **[Hydra](hydra.md)** ยท [โ read online](https://aysec.tech/cheatsheets/hydra) | Online password brute-forcing for SSH, FTP, HTTP, RDP & more |
| **[searchsploit](searchsploit.md)** ยท [โ read online](https://aysec.tech/cheatsheets/searchsploit) | Search & use Exploit-DB offline from the terminal |
## ๐ง Privilege Escalation
| Cheatsheet | What's inside |
|---|---|
| **[Linux Privilege Escalation](linux-privilege-escalation.md)** ยท [โ read online](https://aysec.tech/cheatsheets/linux-privilege-escalation) | SUID, sudo, cron, capabilities, PATH & kernel โ the full root checklist |
| **[Windows Privilege Escalation](windows-privilege-escalation.md)** ยท [โ read online](https://aysec.tech/cheatsheets/windows-privilege-escalation) | Token abuse, service misconfigs, AlwaysInstallElevated & cred hunting |
## ๐ฐ Active Directory
| Cheatsheet | What's inside |
|---|---|
| **[Impacket](impacket.md)** ยท [โ read online](https://aysec.tech/cheatsheets/impacket) | AD attack scripts โ secretsdump, psexec, GetUserSPNs, ntlmrelayx |
| **[NetExec / CrackMapExec](netexec.md)** ยท [โ read online](https://aysec.tech/cheatsheets/netexec) | Sweep SMB/WinRM/LDAP/MSSQL โ creds, shares, dumps & modules |
| **[BloodHound](bloodhound.md)** ยท [โ read online](https://aysec.tech/cheatsheets/bloodhound) | Map AD attack paths โ SharpHound collection & Cypher queries |
| **[Mimikatz](mimikatz.md)** ยท [โ read online](https://aysec.tech/cheatsheets/mimikatz) | Dump credentials, pass-the-hash, golden tickets & DCSync |
| **[Evil-WinRM](evil-winrm.md)** ยท [โ read online](https://aysec.tech/cheatsheets/evil-winrm) | WinRM shell โ login by password/hash, upload, download & load tools |
## ๐ Passwords
| Cheatsheet | What's inside |
|---|---|
| **[Password Cracking](password-cracking.md)** ยท [โ read online](https://aysec.tech/cheatsheets/password-cracking) | Hashcat & John modes, hash identification, rules, masks & *2john tools |
## ๐ก Network & Wi-Fi
| Cheatsheet | What's inside |
|---|---|
| **[Wireshark Display Filters](wireshark.md)** ยท [โ read online](https://aysec.tech/cheatsheets/wireshark) | The display filters you actually use โ ip, tcp, http, dns, tls & follow stream |
| **[tcpdump](tcpdump.md)** ยท [โ read online](https://aysec.tech/cheatsheets/tcpdump) | Capture & filter packets from the CLI โ hosts, ports, flags & pcaps |
| **[Aircrack-ng](aircrack-ng.md)** ยท [โ read online](https://aysec.tech/cheatsheets/aircrack-ng) | Wi-Fi auditing โ monitor mode, handshake capture & WPA cracking |
## ๐ฌ Forensics & Reversing
| Cheatsheet | What's inside |
|---|---|
| **[Volatility](volatility.md)** ยท [โ read online](https://aysec.tech/cheatsheets/volatility) | Memory forensics โ process, network, injection & credential plugins |
| **[GDB + pwndbg](gdb-pwndbg.md)** ยท [โ read online](https://aysec.tech/cheatsheets/gdb-pwndbg) | Debug & exploit binaries โ breakpoints, memory exam, checksec & cyclic |
| **[Ghidra](ghidra.md)** ยท [โ read online](https://aysec.tech/cheatsheets/ghidra) | Reverse engineering โ decompiler, XREFs, shortcuts & headless analysis |
---
## โ๏ธ Writeups
Beginner-friendly, step-by-step walkthroughs:
- **[How to Solve Your First Web CTF Challenge](writeups/first-web-ctf.md)** โ from "what is a flag" to capturing your first one, using only a browser. ([read online โ](https://aysec.tech/community/post/4))
- **[LFI to RCE: Exploiting Local File Inclusion](writeups/lfi-to-rce.md)** โ turn "I can read a file" into full remote code execution. ([read online โ](https://aysec.tech/community/post/5))
---
## ๐ฏ About AYSEC
[**AYSEC**](https://aysec.tech) is a free platform to *learn cybersecurity by doing*:
- ๐ฉ **CTF challenges** across web, crypto, forensics, pwn, reverse engineering & more
- ๐ **Courses & learning paths** from fundamentals to OSCP-level skills
- โ๏ธ **1v1 duels** โ race another hacker to the flag
- ๐งฉ **Daily challenges**, XP, levels & leaderboards
๐ **[Start hacking at aysec.tech](https://aysec.tech)** โ free to join.
## ๐ค Contributing
Spotted a missing technique, a better one-liner, or a typo? Open an issue or a pull request. Keep it accurate, concise, and authorized-use only.
## ๐ License
Content is licensed under [**Creative Commons Attribution 4.0 (CC BY 4.0)**](LICENSE) โ use it, share it, build on it, just credit [aysec.tech](https://aysec.tech).
---
Made with ๐ค by AYSEC ยท Learn offensive security, hands-on.