01^:371 tags

By tag

active-directory143adcs78privilege-escalation52kerberos51enumeration42credential-access33hashing32htb28pentest-workflow27windows25web23osint22ntlm21lateral-movement18htb-attack-flow17pentesting16persistence15tool-workflow15relay14tools13delegation12linux11pivoting11sql-injection11post-exploitation10dfir9forensics9credentials7detection-engineering6exploitation6ldap6loot6memory-forensics6password-attacks6smb6tunneling6workflow6xss6brute-force5cracking5dns5git5linux-it5recon5reverse-engineering5certificates4kernel4methodology4network4port-scanning4process-injection4shares4tunneling-pivoting4verification4attack-flow3coercion3cryptography3dotnet3hashes3http3injection3opsec3pass-the-hash3powershell3rce3rdp3smtp3ssh3t10553tooling3acl-abuse2activedirectory2ad2attacking-common2certipy2cli2cpts2deleted-objects2dpapi2email2evasion2evil-winrm2file-transfer2flags2ftp2fuzzing2git-workflow2gmsa2htb-attack-flow-foothold2iis2imap2incident-response2jenkins2laps2malware-analysis2metadata2monitoring2mssql2mysql2nixos2offensive2pop32port-forwarding2powerview2productivity2recycle-bin2registry2satellite2scanning2secret-scanning2shellbags2sleuth-kit2social-media2spraying2telemetry2terminal2threat-hunting2timeline2tomcat2version-control2wine2wordpress2academy1accounts1acl1acquisition1adfs1adidns1ads1adsb1ais1alternate-data-streams1amcache1analysis1api1api-keys1applications1archiving1aspnet1aspx1assembly1attack-paths1attack-surface1attribution1auditd1autopsy1aviation1binary1bloodyad1branching1breach-data1buffer-overflow1c21carving1chain-of-custody1cheatsheet1chronolocation1coldfusion1collection1command-injection1command-reference1commands1companies1conflict1credential-reuse1cron1dcsync1dd1defense1defense-evasion1deserialization1detection1diagrams1dll1domains1dorks1drupal1dynamic-analysis1e011edr1efspotato1encryption1entry-point1environment1esc1esc151esc81etw1event-logs1evidence1evtx1exif1ez-tools1file-analysis1file-inclusion1file-transfers1file-upload1filings1filter-bypass1finance1framework1ftk-imager1fundamentals1geolocation1ghdb1gis1gitlab1godpotato1golden-saml1google-dorking1gpg1gpp1graph1graphs1gui1hashcat1headers1hexdump1htb-academy-attacking-enterprise-networks1htb-attack-flow-appendix1htb-attack-flow-reference1htb-attack-flow-stage-001htb-attack-flow-stage-011htb-attack-flow-stage-021htb-attack-flow-stage-031htb-attack-flow-stage-041htb-attack-flow-stage-051htb-attack-flow-stage-061htb-attack-flow-stage-071htb-attack-flow-stage-081htb-attack-flow-stage-091htb-attack-flow-stage-101htb-attack-flow-stage-111htb-attack-flow-trusts1identification1images1imaging1impacket1inlanefreight1instrumentation1internal1jj1john1joomla1journalctl1jsp1juicypotatong1jujutsu1jumplist1kape1keepass1kerberoasting1kerberos-relay1kill-chain1kubernetes1lab1ldap31lfi1ligolo-ng1lnk1logging1login1logs1lolbin1lsass1macos1magic-bytes1maldev1malware1malware-triage1maps1maritime1mark-of-the-web1mft1mimikatz1motw1netcat1netexec1network-forensics1network-services1networking1nfs1nmap1ntfs1ntlm-disabled1online1osticket1ownership1passive1password-spraying1pcap1pe-format1penetration-testing1people1permissions1pgp1phishing1phone1php1plaso1potato1powerup1prefetch1preservation1printspoofer1prtg1public-records1reanimation1recovery1recursion1red-team1redis1registry-explorer1responder1reverse-search1rfi1roguepotato1rootkit1runas1runascs1saml1screenshots1search1search-operators1seimpersonate1service-enumeration1services1session-hijacking1shadows1shell1shells1shellshock1shimcache1sift1snmp1source-disclosure1splunk1srum1ssrf1starttls1street-view1strings1subdomain-takeover1subdomains1sweetpotato1sysmon1systemd1telegram1thick-client1tickets1tiktok1timeline-explorer1timelines1tls1tmux1token-forgery1token-impersonation1tombstone1triage1trusts1uid-spoofing1undo1username1vhost1viewstate1visualisation1vulnerabilities1webshell1winrm1yara1zone-identifier1

02^:456 tools

By tool

Impacket88PowerShell73Certipy58NetExec57Mimikatz47Rubeus46BloodHound39Evil-WinRM23Nmap21OpenSSL19ldapsearch17Metasploit14Hashcat13Certify12hashcat9windbg9curl8ffuf8John the Ripper8nmap8faketime7Meterpreter7process-hacker7bloodyAD6Responder6dig5evil-winrm5exiftool5John5Ligolo-ng5netexec5socat5wget5Chisel4Gitleaks4Kerbrute4LaZagne4msfvenom4PowerView4Snaffler4volatility4BloodyAD3git3Gobuster3Hydra3mimikatz3Nuclei3pspy3SharpHound3Shodan3sysmon3TruffleHog3yt-dlp3aleph2arctic-shift2Arsenal Image Mounter2Autopsy2BloodHound CE2bloodhound-ce-python2Burp Suite2certipy2certutil2cmd2CrackMapExec2debugview2droopescan2edgar2enum4linux-ng2EZViewer2ffmpeg2find2FreeRDP2FTK Imager2gdal2ghunt2GPG2HxD / ImHex2impacket2invid2kdnet2krbrelayx2ligolo-ng2linPEAS2LinPEAS2MFTExplorer2mono2mysql / sqsh / sqlcmd2netcat2netexec/nxc2opensanctions2openssl2pe-bear2PowerUp2process-explorer2qgis2Registry Explorer2rustscan2RustScan2shasum2smbclient2smbclient / smbmap / rpcclient / enum4linux-ng2smbmap2sqlmap2SQLMap2SSH2subfinder2swaks2Timeline Explorer2TShark2urlscan2Velociraptor2visual-studio2wayback2wdk2wine2winPEAS2WinPEAS2Wireshark2wpscan2ysoserial.net24cat1acled1ActiveDirectory module (Get-AD*)1ADFSDump1ADFSpoof1adsb-lol1adsbexchange1ADSI / adsisearcher1alephclient1Amass1AmcacheParser1ansible-vault1ansible2john1antak1AppCompatCacheParser1archive-today1assetfinder1atproto1ausearch / aureport1auto-archiver1autobloody1AVML1AVML / LiME1AxCrypt1axcrypt2john1bing1Bing1binwalk1blackbird1bloodhound-python1browsertrix-crawler1bstrings1bulk_extractor1burp suite1burp-suite1cff-explorer1changedetection.io1chisel1chkrootkit / rkhunter1chmod1chown1cisco7crack1Cobalt Strike1Coercer1companies-house1copernicus-data-space1courtlistener1crt.sh1crtsh1csvkit1csvtool1curl / searchsploit1datasette1datawrapper1davtest1dd / dcfldd / dc3dd1debsums / rpm -Va1defaults1Detect It Easy (DiE)1dig / fierce / subfinder1dig / host / fierce1distill1dnSpy / de4dot / x64dbg / gdb-peda1docker1donut1dorkforge1dsquery1DuckDuckGo1DumpIt1earthexplorer1edgartools1EfsPotato1EnableAllTokenPrivs1epieos1equasis1ettercap / bettercap1etwexplorer1Event Log Explorer1event-viewer1evil-winrm-py1EvtxECmd1ewfacquire (libewf)1ewfmount / xmount1EyeWitness1eyewitness / aquatone / httpx1feroxbuster1Feroxbuster1ffprobe1file / libmagic1firms1flightradar241foremost / scalpel / photorec1forensically1forfiles1fotoforensics1frida1frida-trace1fscan1gallery-dl1gdb1gdelt1geohints1gephi1Get-Acl (AD PSDrive)1Get-ADObject / Restore-ADObject1Get-ZimmermanTools1ghidra1GhostPack1Git1git-dumper1GitHub1global-fishing-watch1global-forest-watch1gMSADumper1GnuPG1goat1gobuster / feroxbuster / ffuf1GodPotato1Google1google-earth-engine1google-earth-pro1google-lens1gopherus1gpg1gravatar1grep1Groovy1GTFOBins1Guymager1handle1hash-identifier1Hasher1hashid1Hayabusa1hibp1hitta1holehe1httpie1httpx1hunchly1icij-offshore-leaks1ida1ignorant1iis_shortname_scanner1imagehash1imagemagick1Immunity Debugger1impacket (psexec/smbexec/atexec/ntlmrelayx/mssqlclient/smbserver)1instagram-location-search1instaloader1intelx1Inveigh1Jenkins1jj1JLECmd1journalctl1jq1JuicyPotato1JuicyPotatoNG1KAPE / gkape1keepassxc-cli1Kerberos1kpcli1kubectl1landsatlook1last / lastb / utmpdump1laudanum1ldap3 (python)1LECmd1libphonenumber1Liferay1lima1LiME1liveuamap1logman1logseq1maigret1mapillary1marinetraffic1Markdown1Maven1mediainfo1Medusa1medusa / hydra / crowbar1Medusa / Hydra / Crowbar1metasploit1MFTECmd1mona.py1mount1msfconsole1multipass1Multiple1MySQL client1naminter1nasa-firms1nasa-gibs1nc1Neo4j1Netcat1netexec (nxc) / crackmapexec1networkx1Nexus1Nikto1nishang1nltest1nmcli1ntlmrelayx1ntpdate1nxc1nxc / crackmapexec1obsidian1Obsidian1ogr2ogr1oletools (olevba, oleid, oledump)1opencorporates1openrefine1opensky1opentimestamps1osmp1overpass1pandas1pdfid / pdf-parser / peepdf1PECmd1pestudio / pev / readpe1phoneinfoga1phunter1pinpoint1pktmon1plaso1plaso / log2timeline / psort1plink1powershell1PowerView (Get-DomainSearcher)1PrintSpoofer1procdump1procmon1PsExec1puredns1pwnrqube1pyftpdlib1pyopensky1pypykatz1pysolar1ratsit1RBCmd1rce_webmin1rdap1readsb1RECmd1redis-cli1redis-rogue-server1Registry Explorer / RECmd1responder1rlwrap1RoguePotato1rpcclient1rss-bridge1rsshub1rubeus1RunasCs1RustHound-CE1SBECmd / ShellBags Explorer1sc.exe1scp1Seatbelt1secretsdump1sentinel-hub1setspn1shademap1shadowfinder1shadowmap1SharpChrome1SharpDPAPI1SharpSploit1ShellBags Explorer1sherlock1shodan1showmount1SIFT Workstation1Sleuth Kit1Sleuth Kit (mmls, fls, icat, istat, tsk_recover)1SMBMap1smbserver1smtp-user-enum1smtp-user-enum / swaks / o365spray1socid-extractor1SQLECmd1sqlite-utils1SrumECmd1ssdeep / hashdeep1sshpass1stac-client1streams.exe1streams64.exe1strings / bstrings / Sysinternals strings.exe1sudo1suncalc1swaks / smtp-user-enum / o365spray1SweetPotato1targetedKerberoast1TcbElevation1tcpdump1telepathy1telethon1tiktok-hashtag-analysis1Timesketch1tineye1tmux1traceevent1tshark1UAC (Unix-like Artifacts Collector)1umask1unix-privesc-check1updog1virtualbox1VirusTotal1Volatility 31Webmin1weevely1wfuzz1whatsmyname1WinPmem1wmic1WPScan1WxTCmd1xfreerdp1xfreerdp / rdesktop1xp_cmdshell1xxd / hexdump / Format-Hex1yandex1Yandex1YARA1yente1zeeschuimer1zehef1zsh1

☧ CPTS · ordered posts

Locked

Unlock with your Main_Key through local GPG.

Start the local GPG helper

In your cheatsheet checkout, run:

npm run unlock:helper

Open the link it prints, or paste its pairing code below. Keep the terminal open until GPG finishes.

Import an index you already decrypted

Download the encrypted index, then decrypt with GPG:

gpg --output report-index.json --decrypt report-index.gpg

Your private key stays in GPG. The decrypted index is saved in this browser so you can reopen it after navigation, refreshes and restarts. Lock this browser or clear this site's browser data to remove the saved index. Nothing is uploaded.