Active Directory

• AD Attack Path Index
• OSCP AD Set - Assumed Breach Methodology
• Domain & Host Enumeration
• BloodHound Collection
• Manual LDAP Enumeration
• Grabbing Creds
• ACL & Edge Abuse
• BloodHound Edge Risk
• Lateral Movement
• DCSync & DC Takeover
• Impacket
• Kerberos & Clock Skew

Enumeration

• Nmap
• SMB Enumeration
• Web & Subdomain Bruteforcing

Privilege Escalation

• Linux Privesc
• Windows Privesc

Web Exploitation

• File Inclusion (LFI)
• PHP Tips
• Git Recon

Shells & Access

• Reverse Shells
• Shell Upgrading
• SSH Access

Post-Exploitation

• File Transfer (Inbound)
• Exfiltration
• Pivoting (Ligolo-ng)
• Python Tricks
• Troubleshooting

Other

• General Tips
• Cheatsheet _ Karthax, original unmodified reference note