Certify.exe 5626b9deca6f179a4277be00fa687c942ff61784762708af25bd5493698640ab
174.5 KiB 01 ^: 20 sheets
CPTS Attack Flow
01 intermediate HTB Pentest Attack Flow — Dashboard 2026-08-29 02 intermediate Stage 00 — Passive External Recon 2026-08-29 03 intermediate Stage 01 — Recon and Host Discovery 2026-08-29 04 intermediate Stage 02 — Web Enumeration and Exploitation 2026-08-29 05 intermediate Foothold Toolkit — File Transfers 2026-08-29 06 intermediate Foothold Toolkit — Shells, Payloads, and Metasploit 2026-08-29 07 intermediate Stage 03 — Service Enumeration 2026-08-29 08 intermediate Stage 04 — Active Directory Enumeration 2026-08-29 09 advanced Stage 05 — Kerberos Attacks 2026-08-29 10 advanced Stage 06 — ACL and Object Abuse 2026-08-29 11 advanced Stage 07 — ADCS and Certificate Abuse 2026-08-29 12 intermediate Stage 08 — Password Attacks and Credential Hunting 2026-08-29 13 intermediate Stage 09 — Privilege Escalation 2026-08-29 14 advanced Stage 10 — Lateral Movement, Pivoting, and Loot 2026-08-29 15 advanced Domain Trusts and Cross-Forest 2026-08-29 16 intermediate Stage 11 — Documentation and Reporting 2026-08-29 17 advanced Appendix — Worked Chains 2026-08-29 18 intermediate Tool Index 2026-08-29 19 intermediate HTB Attack Flow Playbook 2026-08-27 20 advanced Loot — Attacking Enterprise Networks (INLANEFREIGHT.LOCAL) 2026-08-29
02 ^: 9 sheets
Companion Guides
01 intermediate Attack Flow Guide 2026-07-18 02 intermediate CPTS Exam Attack Flow 2026-07-18 03 intermediate CPTS Exam Most Used Commands 2026-07-18 04 intermediate Most Used Commands 2026-07-18 05 intermediate Network Service Attack Manual 2026-09-15 06 intermediate Attacking Common Applications — Full Guide 2026-09-15 07 intermediate Attacking Common Services — Full Guide 2026-09-16 08 advanced Potato Attacks — SeImpersonate to SYSTEM 2026-09-17 09 intermediate NTFS Alternate Data Streams — Hiding & Finding Hidden Data 2026-09-17
03 ^: 9 sheets
General CPTS Cheatsheets
01 intermediate HTB Pentest Workflow — CPTS Cheat Sheets 2026-08-29 02 intermediate Attacking Common Services — CPTS Cheat Sheet 2026-08-29 03 intermediate Attacking Common Applications — CPTS Cheat Sheet 2026-08-29 04 intermediate Linux Privilege Escalation — CPTS Cheat Sheet 2026-08-29 05 intermediate Windows Privilege Escalation — CPTS Cheat Sheet 2026-08-29 06 intermediate Web Shells — Creating & Deploying 2026-08-29 07 intermediate TTY Upgrades & Restricted Shells — CPTS Cheat Sheet 2026-08-29 08 intermediate Post-Exploitation Persistence & Internal Enumeration 2026-08-05 09 advanced Attacking Enterprise Networks — Lateral Movement to Domain 2026-08-31
DL ^: 51 signed files · 260.6 MiB
Signed attachment library
Every attachment referenced by the CPTS sheets is mirrored here. Each download has an individual SHA-256 checksum and detached OpenPGP signature; the combined manifest covers the complete set.
chisel.exe 0d16df569a45a5512783c1146feb6d3a1c7233fc44046e04f4714529faeb25aa
10.5 MiB chisel_linux_amd64 8fc08cb354379cbdfa735eb2cb6a9a045b25fe37967f28b1917625d7cdc052a3
10.1 MiB donut_v1.1.zip 6bb3a6fab8c37f5009c6e32310730650ec422f4386d296772c7780dc6f1609e9
329.3 KiB fscan_windows_x64.exe 6ca24d63d6586edebd4086288bc52f07b49c1a6f7d51c44439d095e3af77986b
8.4 MiB Go365_linux_amd64.tar.gz dab6adfbef98c66daf3e3da3a035591e39f094774474023e7ed0ca8c9cfc0565
1.9 MiB GodPotato-NET35.exe 3027a212272957298bf4d32505370fa63fb162d6a6a6ec091af9d7626317a858
56.0 KiB GodPotato-NET4.exe 9a8e9d587b570d4074f1c8317b163aa8d0c566efd88f294d9d85bc7776352a28
56.0 KiB gowitness_linux_amd64 57b3188e24782c27fdf72493ce599537efd3187d03b80f8afe733c72d68c5517
46.5 MiB gowitness_windows_amd64.exe 26ea2da2d7d4ef04e60289c94ecfd43692d6eca3723cfe318a03bda7a43f9374
46.1 MiB Inveigh.ps1 cc7dd1d68dc3cc41f385afd000a516145cee2284b2526ee79dfd5e72278e2a23
296.1 KiB jaws-enum.ps1 7c5f2a61a9565a3f9fe48ce9c75c6a1228ca4a31794741279dd9c5d077f46158
16.6 KiB JuicyPotato.exe 0f56c703e9b7ddeb90646927bac05a5c6d95308c8e13b88e5d4f4b572423e036
339.5 KiB kerbrute_linux_amd64 710a9d2653c8bd3689e451778dab9daec0de4c4c75f900788ccf23ef254b122a
7.9 MiB kerbrute_windows_amd64.exe d18aa84b7bf0efde9c6b5db2a38ab1ec9484c59c5284c0bd080f5197bf9388b0
7.6 MiB LaZagne.exe dc06d62ee95062e714f2566c95b8edaabfd387023b1bf98a09078b84007d5268
9.7 MiB ligolo-ng_agent_linux_amd64.tar.gz 8e38630ea7a2771dfcf0800ae4de043260a25974d6246ad059b580bd3f038c42
2.9 MiB ligolo-ng_agent_windows_amd64.zip a1304946c2609c2a0fda217f9e1b1820daba7de7cc78ed76860a60203dd4a52d
2.9 MiB linpeas.sh 8240932f20b41dc68e0fe10883d72301f4eafb0ffb74fd0cd2459c8a89263d60
1.1 MiB linpeas_linux_amd64 90990e7617850cae32830c71a6e3cde2aa01cf21ee530c53f8927721b1503759
3.9 MiB mimikatz_trunk.zip 7accd179e8a6b2fc907e7e8d087c52a7f48084852724b03d25bebcada1acbca5
1.2 MiB MSOLSpray.ps1 7e30f6cd141fe6f298935d9bb86aac9edaf4da4c64b617d32f867d548930c7c3
8.5 KiB nc64.exe 3e59379f585ebf0becb6b4e06d0fbbf806de28a4bb256e837b4555f1b4245571
44.2 KiB nishang-master.zip eafc3d878bde858b4dddd54618962d65c9e36148c46cafabfd4f96e0b441f75b
2.3 MiB nt-webshell-rosepine.aspx 065f45eaab66d42de515a4a7ea9d3b245ce711ff7ae953f80231d8ba8a09dbb5
9.8 KiB PetitPotam.py 5b27d34a29b92357f527efb54a1068c3cc8d7b5428e9fd61aae8790c6c73f348
16.4 KiB PowerUp.ps1 9d59d4c128570eb80c0e8d13e2185030f93d965278b203c91dd196b2e1d3cd22
586.5 KiB PowerView.ps1 507e8666c239397561c58609f7ea569c9c49ddbb900cd260e7e42b02d03cfd87
752.2 KiB PrintSpoofer64.exe 8524fbc0d73e711e69d60c64f1f1b7bef35c986705880643dd4d5e17779e586d
26.5 KiB PrivescCheck.ps1 e26e544a00c6008dfd6721841e9e7d4c443ce164c33e85d81c3fbb9711b9bbe1
233.4 KiB pspy32 1e38ac09d7851b22e16980abc58f93cabdc4a02859c56a2810aa51930277d450
2.8 MiB pspy64 c93f29a5cc1347bdb90e14a12424e6469c8cfea9a20b800bc249755f0043a3bb
3.0 MiB rp-shell.asp dee8bc57b6b920a84070d6f4dd0ec005427f498880699b9893830e2e537fddc9
9.0 KiB rp-shell.jsp 7b8c522481748bb40e80945045df8a872e9f3f43c3d36aa4d1b84cdd53d53ebd
9.3 KiB rp-shell.php f912953c34698b9dae321e3468d7b23d8c3ecb9b60f9cfc89d3899453b494b4b
9.0 KiB Rubeus.exe 49ee7f030454edfa7957c27346a0506f025c7e30e70c213d3c3eeb1c6607a3b8
463.0 KiB Seatbelt.exe dc8ee760f0a1fb1a2f2a239cae71f44382a9be2b67736d590a471eae8c81d0af
513.0 KiB SharpDPAPI.exe 30f9625c5d52c273762d053596d3a5b9030e66e70a323a28bcd18a65b9dcfa96
151.5 KiB SharpHound.zip 1b1812ae5fca0c9a2a20e2d4e4ffcb6b385b83129248c894c05aab0c24b20715
2.4 MiB SharpUp.exe 4514359bb3dd77b7a2431fa1c7f5973e84b463d2895bc2bda079896a0ee298fd
39.0 KiB SharpView.exe 04396e8831a6941b621371df2b308a980dbed52ad4fb1bcaae72b543a7436a45
717.0 KiB SharpWMI.exe 16cb312a58a36b03318ccd5ee2d34504f20a24c36692026924cb154e1d13e0ec
53.5 KiB Snaffler.exe 397b22a956545ba9cd5f03f0f61cb16e4760db21be97f979a5cfc059c2f854ca
483.0 KiB StandIn_v13_Net35_45.zip 8e673a98b998b197a257a105c35a7e7faf31307a9eab811a731b37ce5c2eb7e5
106.0 KiB SweetPotato.exe 699c219d3e7a3978af6e948096ba7c5a796044134433227ec7c2c8791d55bb07
904.5 KiB targetedKerberoast.py a42b96f51efcdff7a38ed095dd26998412206b5ed141da548ebe8d0526d229b2
33.1 KiB Whisker.exe ba79ae8b463c6521428eba99cad2cbf99e37290ecac9c16b2d06b3bc954524b8
41.0 KiB winPEASany.exe c69ad0a460fe5e3a61f74bd0975548b8e47a75bed7f937c918633dc1defa260d
10.7 MiB winPEASx64.exe d952d83c2f4a29a2c2ffa14dbb9d01eeff5e00b1afa73b25035e2d6c1d96d522
10.7 MiB ysoserial-all.jar 2c9bddd6a1a4ec66c1078ea97dacb61eb66d1c41aec7b6d21e3c72214ce170f1
56.8 MiB ysoserial.net_v1.36.zip 7d109bc2f025a1caceb0c9deceb91d75c893bccf8d61dd9d3ede10dbe16f2d71
5.1 MiB