This is a compiled cheatsheet from my experience of OSCP 2023 journey. Won't say it is all-rounded but a good starting point if you wanna start your OSCP study. It covered all the tools, common issues and tips that I have faced during my study. It is still being updated and feel free to comment if you want any improvements.
☆14Oct 17, 2024Updated last year
Alternatives and similar repositories for OSCP-cheatsheet
Users that are interested in OSCP-cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- HITCON 2023 x DEVCORE Wargame☆22Aug 24, 2023Updated 2 years ago
- ☆18Sep 12, 2024Updated last year
- Filezilla local admin port exploit☆13Sep 13, 2017Updated 8 years ago
- Various AD tools needed for penetration testing in one place.☆25Jul 13, 2023Updated 3 years ago
- Vulnerabilities exploitation examples, python☆25May 22, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- useful stuff for pentesting☆56Mar 18, 2025Updated last year
- this repo is for windows privilege escalation technique☆60Aug 28, 2021Updated 4 years ago
- Recently, the OpenSSH maintainers released security updates to fix a critical vulnerability that could lead to unauthenticated remote cod…☆14Jul 2, 2024Updated 2 years ago
- HITCON 2024 x DEVCORE Wargame☆31Aug 30, 2024Updated last year
- Hours of research on color theory and what hues stimulate the eyes, and hand-picked hacked icons☆14Mar 13, 2024Updated 2 years ago
- ☆29Sep 20, 2023Updated 2 years ago
- Linux privilege escalation enumeration tool for OSCP, CPTS, CTFs, and penetration testing. Detects kernel exploits, GTFOBins, Kubernetes …☆16Jun 15, 2026Updated last month
- Unofficial list of approved tools for OSCP☆28Apr 25, 2023Updated 3 years ago
- Pentest report framework without data send☆19Sep 23, 2025Updated 10 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- RBCD Attack Path enumeration tool for attackers and defenders☆15Apr 25, 2026Updated 3 months ago
- ☆40Feb 26, 2019Updated 7 years ago
- A red-team script that you can run in the background for scanning during a pentest☆15Feb 16, 2026Updated 5 months ago
- A terminal workspace with batteries included☆18Jun 3, 2026Updated last month
- Monitors and curates bug-bounty related repositories weekly (Monday).☆22Updated this week
- 🔐 Welcome to Hack-Academia — your go-to destination for everything related to 🖥️ ethical hacking, 🔧 penetration testing, and 🛡️ cyber…☆18Jul 3, 2026Updated 3 weeks ago
- [Hackaburg 2025 Winner] Interactive security awareness game simulating a retro Windows 95 environment to teach users about online scams a…☆22May 25, 2025Updated last year
- CTF-focused password spray wordlist generator. Perfected for OSCP/PNPT/CPTS. Generates realistic seasonal passwords without the bloat of…☆19Jun 9, 2026Updated last month
- A python3 and bash PoC for CVE-2021-4034 by Kim Schulz☆23Jan 27, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆51May 18, 2022Updated 4 years ago
- Audit and pentest methodologies for Windows including internal enumeration, privesc, lateral movement, etc.☆18Mar 31, 2026Updated 3 months ago
- Notes and cheatsheets for the OffSec Wireless Professional (OSWP) certification☆52Oct 29, 2023Updated 2 years ago
- The low cortisol shell handler☆20Updated this week
- NmapView – Nmap XML Report Viewer | Turn Nmap XML into a searchable, portable HTML report for analysis, triage, and pentest reporting.☆28Jul 7, 2026Updated 3 weeks ago
- Scripts I created to pass the OSCP☆22Jul 23, 2021Updated 5 years ago
- A tool developed in Java for enumerating and scanning WordPress websites. It is completely free, open source and with no API rate limit.☆26Jun 12, 2026Updated last month
- ☆24Sep 9, 2025Updated 10 months ago
- Repository for tools used for the OSCP☆27Sep 18, 2025Updated 10 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Passive recon & attack surface mapper — zero requests sent☆33May 5, 2026Updated 2 months ago
- ☆11Jan 6, 2020Updated 6 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆11Apr 2, 2021Updated 5 years ago
- Multi-protocol credential validation tool with spray and no-spray modes for penetration testing.☆32Jun 1, 2026Updated last month
- Specialized testing tool designed to identify vulnerabilities and bugs in OPC UA (Open Platform Communications Unified Architecture) impl…☆45Feb 4, 2026Updated 5 months ago
- Simple Zeroconf/mDNS scanner written in Go with no external dependencies☆12Apr 20, 2021Updated 5 years ago
- ADKAVEH - One PowerShell script for Active Directory discovery and safe attack simulation.☆37Sep 28, 2025Updated 10 months ago