\documentclass[10pt,a4paper]{article} % Packages \usepackage{fancyhdr} % For header and footer \usepackage{multicol} % Allows multicols in tables \usepackage{tabularx} % Intelligent column widths \usepackage{tabulary} % Used in header and footer \usepackage{hhline} % Border under tables \usepackage{graphicx} % For images \usepackage{xcolor} % For hex colours %\usepackage[utf8x]{inputenc} % For unicode character support \usepackage[T1]{fontenc} % Without this we get weird character replacements \usepackage{colortbl} % For coloured tables \usepackage{setspace} % For line height \usepackage{lastpage} % Needed for total page number \usepackage{seqsplit} % Splits long words. %\usepackage{opensans} % Can't make this work so far. Shame. Would be lovely. \usepackage[normalem]{ulem} % For underlining links % Most of the following are not required for the majority % of cheat sheets but are needed for some symbol support. \usepackage{amsmath} % Symbols \usepackage{MnSymbol} % Symbols \usepackage{wasysym} % Symbols %\usepackage[english,german,french,spanish,italian]{babel} % Languages % Document Info \author{Davomeist} \pdfinfo{ /Title (auditoria-de-seguridad.pdf) /Creator (Cheatography) /Author (Davomeist) /Subject (Auditoria de seguridad Cheat Sheet) } % Lengths and widths \addtolength{\textwidth}{6cm} \addtolength{\textheight}{-1cm} \addtolength{\hoffset}{-3cm} \addtolength{\voffset}{-2cm} \setlength{\tabcolsep}{0.2cm} % Space between columns \setlength{\headsep}{-12pt} % Reduce space between header and content \setlength{\headheight}{85pt} % If less, LaTeX automatically increases it \renewcommand{\footrulewidth}{0pt} % Remove footer line \renewcommand{\headrulewidth}{0pt} % Remove header line \renewcommand{\seqinsert}{\ifmmode\allowbreak\else\-\fi} % Hyphens in seqsplit % This two commands together give roughly % the right line height in the tables \renewcommand{\arraystretch}{1.3} \onehalfspacing % Commands \newcommand{\SetRowColor}[1]{\noalign{\gdef\RowColorName{#1}}\rowcolor{\RowColorName}} % Shortcut for row colour \newcommand{\mymulticolumn}[3]{\multicolumn{#1}{>{\columncolor{\RowColorName}}#2}{#3}} % For coloured multi-cols \newcolumntype{x}[1]{>{\raggedright}p{#1}} % New column types for ragged-right paragraph columns \newcommand{\tn}{\tabularnewline} % Required as custom column type in use % Font and Colours \definecolor{HeadBackground}{HTML}{333333} \definecolor{FootBackground}{HTML}{666666} \definecolor{TextColor}{HTML}{333333} \definecolor{DarkBackground}{HTML}{6BA333} \definecolor{LightBackground}{HTML}{F5F9F2} \renewcommand{\familydefault}{\sfdefault} \color{TextColor} % Header and Footer \pagestyle{fancy} \fancyhead{} % Set header to blank \fancyfoot{} % Set footer to blank \fancyhead[L]{ \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{C} \SetRowColor{DarkBackground} \vspace{-7pt} {\parbox{\dimexpr\textwidth-2\fboxsep\relax}{\noindent \hspace*{-6pt}\includegraphics[width=5.8cm]{/web/www.cheatography.com/public/images/cheatography_logo.pdf}} } \end{tabulary} \columnbreak \begin{tabulary}{11cm}{L} \vspace{-2pt}\large{\bf{\textcolor{DarkBackground}{\textrm{Auditoria de seguridad Cheat Sheet}}}} \\ \normalsize{by \textcolor{DarkBackground}{Davomeist} via \textcolor{DarkBackground}{\uline{cheatography.com/208487/cs/44676/}}} \end{tabulary} \end{multicols}} \fancyfoot[L]{ \footnotesize \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{LL} \SetRowColor{FootBackground} \mymulticolumn{2}{p{5.377cm}}{\bf\textcolor{white}{Cheatographer}} \\ \vspace{-2pt}Davomeist \\ \uline{cheatography.com/davomeist} \\ \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Cheat Sheet}} \\ \vspace{-2pt}Not Yet Published.\\ Updated 15th October, 2024.\\ Page {\thepage} of \pageref{LastPage}. \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Sponsor}} \\ \SetRowColor{white} \vspace{-5pt} %\includegraphics[width=48px,height=48px]{dave.jpeg} Measure your website readability!\\ www.readability-score.com \end{tabulary} \end{multicols}} \begin{document} \raggedright \raggedcolumns % Set font size to small. Switch to any value % from this page to resize cheat sheet text: % www.emerson.emory.edu/services/latex/latex_169.html \footnotesize % Small font. \begin{multicols*}{3} \begin{tabularx}{5.377cm}{x{0.96117 cm} x{0.86963 cm} x{2.7462 cm} } \SetRowColor{DarkBackground} \mymulticolumn{3}{x{5.377cm}}{\bf\textcolor{white}{Reconociemiento DNS}} \tn % Row 0 \SetRowColor{LightBackground} `{\bf{nslookup}}` & ip o \seqsplit{dominio} & realiza la traduccion de nombre a ip y vicebersa \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} `{\bf{dig}}` & ip o \seqsplit{dominmio} & obtener información sobre los servidores de nombres, direcciones de host, puertas de enlace \tn % Row Count 6 (+ 4) % Row 2 \SetRowColor{LightBackground} `{\bf{whois}}` & ip o \seqsplit{dominmio} & btener información de cualquier nombre de dominio del mundo \tn % Row Count 9 (+ 3) % Row 3 \SetRowColor{white} `{\bf{tracert}}` & ip o \seqsplit{dominio} & lista los nodos atravesados para llegar al destino \tn % Row Count 12 (+ 3) \hhline{>{\arrayrulecolor{DarkBackground}}---} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{3.03597 cm} x{1.94103 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Comandos de descubrimiento NMAP}} \tn % Row 0 \SetRowColor{LightBackground} Escaneo de ping & nmap -sP {[}objetivo{]} \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} Sin ping & nmap -PN {[}objetivo{]} \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} TCP SYN Ping & nmap -PS {[}objetivo{]} \tn % Row Count 6 (+ 2) % Row 3 \SetRowColor{white} TCP ACK ping & nmap -PA {[}objetivo{]} \tn % Row Count 8 (+ 2) % Row 4 \SetRowColor{LightBackground} UDP ping & nmap -PU {[}objetivo{]} \tn % Row Count 10 (+ 2) % Row 5 \SetRowColor{white} SCTP Init Ping & nmap -PY {[}objetivo{]} \tn % Row Count 12 (+ 2) % Row 6 \SetRowColor{LightBackground} ICMP echo ping & nmap -PE {[}objetivo{]} \tn % Row Count 14 (+ 2) % Row 7 \SetRowColor{white} ICMP Timestampnmap -PP ping & nmap -PP {[}objetivo{]} \tn % Row Count 16 (+ 2) % Row 8 \SetRowColor{LightBackground} ICMP addressnmap -PM mask ping & nmap -PM {[}objetivo{]} \tn % Row Count 18 (+ 2) % Row 9 \SetRowColor{white} IP protocol ping & nmap -PO {[}objetivo{]} \tn % Row Count 20 (+ 2) % Row 10 \SetRowColor{LightBackground} ARP ping & nmap -PR {[}objetivo{]} \tn % Row Count 22 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.4885 cm} x{2.4885 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Herramientas SMB}} \tn % Row 0 \SetRowColor{LightBackground} istar recursos compartidos en un host específico & smbmap -H {[}objetivo{]} \tn % Row Count 3 (+ 3) % Row 1 \SetRowColor{white} con autenticacion & smbmap -H {[}objetivo{]} -u {[}usuario{]} -p {[}contrasena{]} \tn % Row Count 6 (+ 3) % Row 2 \SetRowColor{LightBackground} enumerar usuarios & smbmap -H {[}objetivo{]} -u {[}usuario{]} -p {[}contrasena{]} -e \tn % Row Count 9 (+ 3) % Row 3 \SetRowColor{white} listar recursos compartidos & smbclient -L //SERVER -N \tn % Row Count 11 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{1.94103 cm} x{3.03597 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Webs de reconociemiento pasivo}} \tn % Row 0 \SetRowColor{LightBackground} {\bf{dumpster.com}} & descubrimiento de servidores en base al dominio \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} {\bf{shodan.io}} & motor de busqueda de dispositivos de red \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} {\bf{phonebook.cz}} & lista dominios y correos asociados a un dominio principal \tn % Row Count 7 (+ 3) % Row 3 \SetRowColor{white} {\bf{hunter.io}} & buscador de direcciones de mail \tn % Row Count 9 (+ 2) % Row 4 \SetRowColor{LightBackground} {\bf{verifyemailaddress.org}} & verificador de direcciones de email \tn % Row Count 11 (+ 2) % Row 5 \SetRowColor{white} {\bf{email-checker.net}} & verificador de direcciones de email \tn % Row Count 13 (+ 2) % Row 6 \SetRowColor{LightBackground} {\bf{dashed.com}} & credenciales y brechas de seguridad \tn % Row Count 15 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.58804 cm} x{2.38896 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Deteccion de versiones con NMAP}} \tn % Row 0 \SetRowColor{LightBackground} Sistema operativo & nmap -O {[}objetivo{]} \tn % Row Count 1 (+ 1) % Row 1 \SetRowColor{white} Intentar adivinar el sistema operativo & nmap -O -{}-ossca​n-guess {[}objetivo{]} \tn % Row Count 3 (+ 2) % Row 2 \SetRowColor{LightBackground} Version de los servicios & nmap -sV {[}objetivo{]} \tn % Row Count 5 (+ 2) % Row 3 \SetRowColor{white} Troubleshooting de version de servicios & nmap -sV -{}-version-trace {[}objetivo{]} \tn % Row Count 7 (+ 2) % Row 4 \SetRowColor{LightBackground} Escaneo RCP & nmap -sR {[}objetivo{]} \tn % Row Count 8 (+ 1) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.38896 cm} x{2.58804 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Tecnicas de evasion de firewall NMAP}} \tn % Row 0 \SetRowColor{LightBackground} Fragmentacion de paquetes & nmap -f {[}objetivo{]} \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} Especificar el MTU & nbmap -mtu {[}MTU{]} {[}objetivo{]} \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} Usar un decoy & nmap -D RND {[}numero{]} {[}objetivo{]} \tn % Row Count 6 (+ 2) % Row 3 \SetRowColor{white} Escaneo zombie & nmap -sl {[}zombie{]} {[}objetivo{]} \tn % Row Count 8 (+ 2) % Row 4 \SetRowColor{LightBackground} Especificacion manual de puerto & nmap -{}-source-port {[}port{]} {[}target{]} \tn % Row Count 10 (+ 2) % Row 5 \SetRowColor{white} Spoofing de MAC & nmap -{}-spoof-mac {[}mac{]} {[}objetivo{]} \tn % Row Count 12 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{1.59264 cm} x{3.38436 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Herramientas de reconocimiento}} \tn % Row 0 \SetRowColor{LightBackground} Clearbit connect & extension de chrome para la busqueda de emails \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} Wapalyzer & extension de firefox para el analisis web \tn % Row Count 4 (+ 2) % Row 2 \SetRowColor{LightBackground} CTRF (github) & programa de busqueda de subdominios basado en transparencia de certificados \tn % Row Count 7 (+ 3) % Row 3 \SetRowColor{white} Motores de busqueda & Google, firefox etc.. \tn % Row Count 9 (+ 2) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.28942 cm} x{2.68758 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Comandos basicos de hidra}} \tn % Row 0 \SetRowColor{LightBackground} ataque de fuerza bruta a ssh & hydra -l usuario -P \seqsplit{/ruta/a/lista\_de\_contraseñas}.txt \seqsplit{ssh://ip\_del\_objetivo} \tn % Row Count 4 (+ 4) % Row 1 \SetRowColor{white} ataque de fuerza bruta a ftp & hydra -l usuario -P \seqsplit{/ruta/a/lista\_de\_contraseñas}.txt \seqsplit{ftp://ip\_del\_objetivo} \tn % Row Count 8 (+ 4) % Row 2 \SetRowColor{LightBackground} ataque con lista de usuarios & hydra -L \seqsplit{/ruta/a/lista\_de\_usuarios}.txt -P \seqsplit{/ruta/a/lista\_de\_contraseñas}.txt \tn % Row Count 12 (+ 4) % Row 3 \SetRowColor{white} ataque con conexiones concurrentes & hydra -l usuario -P \seqsplit{/ruta/a/lista\_de\_contraseñas}.txt -t 4 \tn % Row Count 15 (+ 3) % Row 4 \SetRowColor{LightBackground} ataque con timeout & hydra -l usuario -P \seqsplit{/ruta/a/lista\_de\_contraseñas}.txt -s 5 \tn % Row Count 18 (+ 3) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.43873 cm} x{2.53827 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Uso basico de gobuster}} \tn % Row 0 \SetRowColor{LightBackground} busqueda de subdirectorios & gobuster dir -u \seqsplit{http://ip\_del\_objetivo} -w \seqsplit{/ruta/a/lista\_de\_palabras}.txt \tn % Row Count 4 (+ 4) % Row 1 \SetRowColor{white} enumeracion de archivos por directorio & gobuster dir -u \seqsplit{http://ip\_del\_objetivo} -w \seqsplit{/ruta/a/lista\_de\_palabras}.txt -x php,html \tn % Row Count 9 (+ 5) % Row 2 \SetRowColor{LightBackground} enumeracion de subdominios & obuster dns -d dominio.com -w \seqsplit{/ruta/a/lista\_de\_subdominios}.txt \tn % Row Count 13 (+ 4) % Row 3 \SetRowColor{white} filtrar por codigo de estado http & gobuster dir -u \seqsplit{http://ip\_del\_objetivo} -w \seqsplit{/ruta/a/lista\_de\_palabras}.txt -s "200,204,301,302" \tn % Row Count 18 (+ 5) % Row 4 \SetRowColor{LightBackground} escaneo recursivo & gobuster dir -u \seqsplit{http://ip\_del\_objetivo} -w \seqsplit{/ruta/a/lista\_de\_palabras}.txt -r \tn % Row Count 22 (+ 4) % Row 5 \SetRowColor{white} con uso de proxy & gobuster dir -u \seqsplit{http://ip\_del\_objetivo} -w \seqsplit{/ruta/a/lista\_de\_palabras}.txt -p \seqsplit{http://127.0.0.1:8080} \tn % Row Count 27 (+ 5) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.43873 cm} x{2.53827 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Uso basico de gobuster}} \tn % Row 0 \SetRowColor{LightBackground} busqueda de subdirectorios & gobuster dir -u \seqsplit{http://ip\_del\_objetivo} -w \seqsplit{/ruta/a/lista\_de\_palabras}.txt \tn % Row Count 4 (+ 4) % Row 1 \SetRowColor{white} enumeracion de archivos por directorio & gobuster dir -u \seqsplit{http://ip\_del\_objetivo} -w \seqsplit{/ruta/a/lista\_de\_palabras}.txt -x php,html \tn % Row Count 9 (+ 5) % Row 2 \SetRowColor{LightBackground} enumeracion de subdominios & obuster dns -d dominio.com -w \seqsplit{/ruta/a/lista\_de\_subdominios}.txt \tn % Row Count 13 (+ 4) % Row 3 \SetRowColor{white} filtrar por codigo de estado http & gobuster dir -u \seqsplit{http://ip\_del\_objetivo} -w \seqsplit{/ruta/a/lista\_de\_palabras}.txt -s "200,204,301,302" \tn % Row Count 18 (+ 5) % Row 4 \SetRowColor{LightBackground} escaneo recursivo & gobuster dir -u \seqsplit{http://ip\_del\_objetivo} -w \seqsplit{/ruta/a/lista\_de\_palabras}.txt -r \tn % Row Count 22 (+ 4) % Row 5 \SetRowColor{white} con uso de proxy & gobuster dir -u \seqsplit{http://ip\_del\_objetivo} -w \seqsplit{/ruta/a/lista\_de\_palabras}.txt -p \seqsplit{http://127.0.0.1:8080} \tn % Row Count 27 (+ 5) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} % That's all folks \end{multicols*} \end{document}