A comprehensive cheatsheet and learning resource created during CRTO preparation after extensive lab practice. This repository contains battle-tested commands, techniques, and methodologies that work in modern enterprise environments.
☆18Jan 12, 2026Updated 9 months ago
Alternatives and similar repositories for CRTO-CheatSheet
Users that are interested in CRTO-CheatSheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Android Snapshot and recording tool☆14Apr 29, 2025Updated last year
- Subdomain discovery using Sublist3r, certspotter, crt.sh , censys and amass . Subdomain bruteforcing using Gobuster and Resolve hosts usi…☆16Oct 8, 2024Updated 2 years ago
- The NeoC2 Framework☆40Sep 23, 2026Updated last month
- Linux Space Booster is an advanced, secure disk space cleanup utility specifically designed for Linux virtual machines. It intelligently …☆18Jun 15, 2025Updated last year
- Top 2025 Vulnerabilities You Shouldn’t Accept in a Pentest Report☆14Feb 6, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Simple version of the minishell tester☆34Dec 13, 2024Updated last year
- A module to help you understand the std::containers in CPP (Darija)☆30Feb 2, 2024Updated 2 years ago
- Flask app for File, PCAP, IOC analysis☆10Apr 3, 2023Updated 3 years ago
- A cross-platform library for interacting with Windows through various protocols such as SMB, MSRPC, and LDAP/CLDAP written in Nim.☆17Jun 9, 2026Updated 4 months ago
- This Python script analyzes a Wireshark pcap file and generates a detailed PDF report. The analysis includes protocol statistics, IP addr…☆10Sep 11, 2024Updated 2 years ago
- Automated evil twin access point toolkit with traffic capture and real-time monitoring for wireless penetration testing and security re…☆16Oct 18, 2025Updated last year
- flAWS.cloud and flAWS2.cloud Interactive tutorial/CTFs to learn common AWS security mistakes.☆17May 30, 2022Updated 4 years ago
- This script can be used by Frida to hijack SSL context and okhttp CertificateBuilder☆11Dec 31, 2020Updated 5 years ago
- Python framework for extracting secret data from compression oracles such as those exploited by the BEAST and CRIME attacks.☆10Apr 22, 2015Updated 11 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A command-line tool to mount SMB shares and scan them for secrets using NoseyParker.☆36Updated this week
- The Spotify to Apple Music converter that doesn't cost your firstborn child 🍏☆13Nov 13, 2025Updated 11 months ago
- Automated HTTP/HTTPS simulation for Cobalt Strike Malleable C2 profiles☆28Sep 3, 2026Updated last month
- ☆13May 29, 2020Updated 6 years ago
- Kerberos CNAME abuse PoC☆109Jan 27, 2026Updated 9 months ago
- Audit and pentest methodologies for Linux including internal enumeration, privesc, lateral movement, etc.☆19Apr 3, 2026Updated 6 months ago
- A red-team script that you can run in the background for scanning during a pentest☆18Feb 16, 2026Updated 8 months ago
- Claude Code skill for systematically reducing VirusTotal/EDR detection rates on compiled Go binaries via PE structural analysis and disci…☆20Jun 24, 2026Updated 4 months ago
- CVE-2023-38831 winrar exploit generator and get reverse shell☆11Aug 28, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Fixes corrupted Magic Bytes for PNG, JPG and JPEG☆13Aug 4, 2021Updated 5 years ago
- In-depth reverse engineering of a suspected LockBit affiliate dropper, documenting shellcode loading, import polymorphism, and payload de…☆16Jan 24, 2026Updated 9 months ago
- A fast, reactive graphical interface (GUI / UI) for managing Sliver C2 operations, powered by Wails and Svelte.☆31Sep 19, 2026Updated last month
- Proyectos de la 1ª ed. del Boot. Ciberseguridad de 42 España☆17Dec 25, 2023Updated 2 years ago
- A demo vulnerable application for stealing sensitive information by abusing Google Chrome cache☆20Jan 19, 2020Updated 6 years ago
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 9 months ago
- Packet Analysis on Steroids☆14Oct 20, 2022Updated 4 years ago
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆128Sep 1, 2026Updated last month
- Customized Shellcode loader which bypasses AV/EDR sandbox detections and decrypts shellcode in memory.☆13Feb 9, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Reporting template for OSCP, VHL and more.☆17Oct 30, 2021Updated 5 years ago
- XSS-Checker is a tool used to Check / Validate for XSS vulnerabilities☆18Dec 1, 2022Updated 3 years ago
- 🔍Lookup and Analyze Packet Capture ('PCAP') Files☆15Mar 17, 2019Updated 7 years ago
- Shellcode Injector that obtains system call opcodes using the Halo's Gate method to evade EDR Hooks.☆20Feb 2, 2022Updated 4 years ago
- A small example of loading BOFs in Python with pure reflection☆19Jan 26, 2023Updated 3 years ago
- Python Penetration Testing Tools☆16Jul 19, 2025Updated last year
- public archive for corCTF 2023☆18Aug 6, 2023Updated 3 years ago