This is a cheatsheet of commands and processes to compromise an Active Directory environment. Everything documented in this repository is based on my own experience with the CRTA exam, and the context and circumstances may vary. For educational purposes only.
☆29May 18, 2025Updated last year
Alternatives and similar repositories for CRTA-CheatSheet
Users that are interested in CRTA-CheatSheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A practical, hands-on Nmap enumeration guide packed with commands, workflows, AD tips, and cheat-sheets for authorized pentesting.☆23Nov 5, 2025Updated 11 months ago
- INE/eLearnSecurity Web Application Penetration Tester eXtreme (eWPTXv3) Notes☆40Apr 15, 2025Updated last year
- This repository contains 5 junior-level exercises for developers who wish to build cool projects for their portfolio and train skills tha…☆51Mar 28, 2024Updated 2 years ago
- Manual extremo de hacking ético: técnicas, exploits y estrategias reales para pentesters, con enfoque práctico y visión profesional.☆11Aug 17, 2025Updated last year
- Active Directory lab for vulernability testing.☆12Oct 2, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This repository contains a series of entry-level exercises that can be solved in any programming language. The purpose of these exercises…☆16Apr 16, 2024Updated 2 years ago
- MikroTik RouterOS API client for node.js.☆11Aug 22, 2019Updated 7 years ago
- PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll.☆75Oct 22, 2025Updated last year
- Bash Script to automate Metasploit, Payload & Reverse Shell Generation.☆11Mar 28, 2023Updated 3 years ago
- Write-ups of Try Hack me challenge machines☆10Mar 29, 2024Updated 2 years ago
- A Bash script for scanning the local network to identify machines, retrieve their IP and MAC addresses, and determine the operating syste…☆44Mar 16, 2024Updated 2 years ago
- An operator-focused XSL stylesheet that transforms Nmap XML output into a clear, service-centric HTML report designed for use during acti…☆15Feb 3, 2026Updated 8 months ago
- Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQ…☆18Apr 7, 2026Updated 6 months ago
- Reduce your LLM costs by 40-70% automatically. Routes prompts locally, compacts context, tracks real savings.☆15Apr 27, 2026Updated 6 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆14Jun 3, 2024Updated 2 years ago
- CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution☆33Jan 13, 2026Updated 9 months ago
- Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !☆45Mar 24, 2026Updated 7 months ago
- ☆13Jan 4, 2026Updated 9 months ago
- Advanced Command and Control Framework for Authorized Red Team Operations☆58Mar 1, 2026Updated 7 months ago
- This is the report that goes with my mock full-scope red team engagement against Game of Active Directory.☆19Oct 26, 2025Updated last year
- HHousen's writeups to various HackTheBox machines and challenges from https://hackthebox.com.☆22Mar 3, 2023Updated 3 years ago
- A PoC Cobalt Strike UDRL written in Rust☆34Sep 12, 2026Updated last month
- ☆14Jul 15, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This repo has the comprehensive Cheatsheet that I made during my eJPT exam prep...☆55Jul 27, 2026Updated 3 months ago
- Rosemary: Transparent network pivoting and tunneling over QUIC. Cross-platform, no TUN/TAP, no proxychains, no proxy settings.☆14Aug 3, 2026Updated 2 months ago
- This repository contains deep-dive technical analysis reports that has been written in the ZAYOTEM team.☆19Oct 11, 2026Updated 2 weeks ago
- S4vitar's desktop enviroment automatic☆12Feb 9, 2023Updated 3 years ago
- This is a repository of the source code of various malware targeting the *nix (mostly Linux) operating systems.☆17Oct 15, 2016Updated 10 years ago
- Active Directory engagement workspace that combines offline tradecraft, operator-ready commands, attack path analysis, and automated play…☆23Jun 24, 2026Updated 4 months ago
- doxxing tool☆38Dec 1, 2019Updated 6 years ago
- Defensive security canary tool that detects unauthorized access via decoy files with Discord/Telegram alerts, geofencing, and threat inte…☆18Jul 5, 2026Updated 3 months ago
- This script demonstrates a time-based blind SQL injection on Moodle platforms, exploiting response delays to extract data.☆22Jul 7, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆11Jan 22, 2026Updated 9 months ago
- OSINT Toolkit – Wayback Collector & URL Checker☆23Nov 13, 2025Updated 11 months ago
- ☆35Jun 7, 2026Updated 4 months ago
- 🪝 Android pentesting toolkit - Frida server manager + Burp Suite proxy☆13Oct 9, 2026Updated 3 weeks ago
- Mobile Mouse 3.6.0.4 could allow a remote attacker to execute arbitrary code on the system, caused by improper input validation. By sendi…☆13Apr 2, 2026Updated 6 months ago
- Collection of command cheat sheets and useful resources for anyone pursuing OSCP certification.☆21Apr 11, 2025Updated last year
- Explore a rich collection of diverse payloads in these GitHub repositories. 🚀☆12Apr 9, 2026Updated 6 months ago