This is a compiled cheatsheet from my experience of OSCP 2023 journey. Won't say it is all-rounded but a good starting point if you wanna start your OSCP study. It covered all the tools, common issues and tips that I have faced during my study. It is still being updated and feel free to comment if you want any improvements.
☆16Oct 17, 2024Updated 2 years ago
Alternatives and similar repositories for OSCP-cheatsheet
Users that are interested in OSCP-cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Curated UTF-8 URL-encoded character dictionary for injection testing, fuzzing, and bypass techniques against web applications and APIs, f…☆13Sep 20, 2021Updated 5 years ago
- Audit and pentest methodologies for Windows including internal enumeration, privesc, lateral movement, etc.☆20Mar 31, 2026Updated 7 months ago
- I collect writeup about analysis CVEs and Exploits on the Windows in this repository.☆23Jun 8, 2022Updated 4 years ago
- 基于大语言模型的双模式安全自动化 Agent，支持 CTF 自动解题 与 授权渗透测试☆17Jul 8, 2026Updated 3 months ago
- BloodyAv is Custom Shell Code loader to Bypass Av and Edr.☆16Mar 21, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Various AD tools needed for penetration testing in one place.☆25Jul 13, 2023Updated 3 years ago
- Filezilla local admin port exploit☆14Sep 13, 2017Updated 9 years ago
- Exploit Proof-of-Concept code for XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)☆13Nov 1, 2023Updated 3 years ago
- useful stuff for pentesting☆56Sep 19, 2026Updated last month
- Differential fuzzer that finds HTTP parser discrepancies across 54 servers to uncover request-smuggling primitives.☆12Sep 12, 2026Updated last month
- Tools, Resources, Guides, Infographics, etc☆11Aug 17, 2024Updated 2 years ago
- ☆16Jan 19, 2024Updated 2 years ago
- ☆19Sep 12, 2024Updated 2 years ago
- CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]☆11Jul 14, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A comprehensive VS Code extension for developing Burp Suite extensions☆14Jul 22, 2025Updated last year
- this repo is for windows privilege escalation technique☆62Aug 28, 2021Updated 5 years ago
- HITCON 2023 x DEVCORE Wargame☆22Aug 24, 2023Updated 3 years ago
- Fixes to pyobd for modern hardware interfaces☆11Oct 3, 2015Updated 11 years ago
- Rehashing APIs to prevent hash based detection☆14Jan 7, 2025Updated last year
- A network segmentation and egress control testing tool for PCI DSS v4.0 compliance. Automatically discovers network segments, validates i…☆14May 20, 2026Updated 5 months ago
- Bruteweb is a Python script for web security testing. It conducts brute-force attacks to assess web application security. Customize your …☆14May 7, 2024Updated 2 years ago
- CVE-2021-41773 | CVE-2021-42013 Exploit Tool (Apache/2.4.49-2.4.50)☆10Apr 8, 2022Updated 4 years ago
- Open-source engine for turning documentation sites into searchable, MCP-accessible context for humans and coding agents.☆21Sep 26, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- OSCP CheatSheet☆12Sep 27, 2026Updated last month
- A biweekly secure code review challenge series, full working apps, based on real-world vulnerabilities.☆13Oct 31, 2026Updated last week
- A Sublime Text plugin that allows for Nmap syntax highlighting☆13Sep 14, 2024Updated 2 years ago
- Some Awesome and Simple CVE☆12Feb 25, 2023Updated 3 years ago
- OSWE-cheat sheet module by module with updated syllabus☆13May 25, 2021Updated 5 years ago
- OSWE-like machines☆11Dec 28, 2020Updated 5 years ago
- ☆28Jul 30, 2026Updated 3 months ago
- GeoServer & GeoTools SQL Injection (CVE-2023-25157 & CVE-2023-25158)☆13Jun 11, 2023Updated 3 years ago
- ☆10Jul 23, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This is the criminal face recognition application can be used as surviellance system.☆20May 25, 2021Updated 5 years ago
- Module I created for the wifi pineapple that allows users to customize the 172 page style.☆11Nov 10, 2019Updated 6 years ago
- SDK for building SecDim Play challenges, an open training game for AppSec, DevSecOps, CloudSec, etc.☆30Oct 26, 2026Updated last week
- Hashcat rule analyzer and interpreter - A Rosetta Stone for decoding hashcat rule syntax☆13Updated this week
- Collection of over 9000 xss payloads | heavy xss collection☆12Dec 6, 2022Updated 3 years ago
- Validate AD credentials over NTLM and Kerberos - passwords, hashes, keys, and tickets☆17Updated this week
- ☆21Oct 30, 2026Updated last week