Resources.md

General Guides:

• HackTricks: https://book.hacktricks.xyz/ (my favorite starting point for most things, this resource is excellent)
• SNMP Vulns: https://www.btcirt.bt/snmp-vulnerability/
• https://0xdf.gitlab.io/2018/12/02/pwk-notes-smb-enumeration-checklist-update1.html#samba
• Hakluke's OSCP Guide, part 3: https://medium.com/@hakluke/haklukes-ultimate-oscp-guide-part-3-practical-hacking-tips-and-tricks-c38486f5fc97
• Hakluke's Guide to Hacking Without Metasploit: https://medium.com/@hakluke/haklukes-guide-to-hacking-without-metasploit-1bbbe3d14f90
• abatchy's blog: https://www.abatchy.com/2017/03/how-to-prepare-for-pwkoscp-noob
• scund00r's Guide: https://scund00r.com/all/oscp/2018/02/25/passing-oscp.html

OSINT

• Google Hacking Database: https://www.exploit-db.com/google-hacking-database
• SANS Google Hacking Cheat Sheet: https://www.sans.org/security-resources/GoogleCheatSheet.pdf

Methodologies:

• xapax's Linux Playbook: https://github.com/xapax/oscp/blob/master/templates/linux-template.md
• xapax's Windows Playbook: https://github.com/xapax/oscp/blob/master/templates/windows-template.md

Enumeration:

• 0day Security Ports and Services: http://www.0daysecurity.com/penetration-testing/enumeration.html
• Tib3rius AutoRecon tool: https://github.com/Tib3rius/AutoRecon
• SNMP Vulns: https://www.btcirt.bt/snmp-vulnerability/
• 0xdf hacks stuff SMB Enumeration Checklist: https://0xdf.gitlab.io/2018/12/02/pwk-notes-smb-enumeration-checklist-update1.html#samba
• Hacking Article's MSSQL pentesting using nmap: https://www.hackingarticles.in/mssql-peneration-testing-using-nmap/
• pentestmonkey's MSSQL Injection Cheat Sheet: http://pentestmonkey.net/cheat-sheet/sql-injection/mssql-sql-injection-cheat-sheet
• pentestmonkey's MySQL SQL Injection Cheat Sheet: http://pentestmonkey.net/cheat-sheet/sql-injection/mysql-sql-injection-cheat-sheet
• netsparker's SQL Injection Cheat Sheet: https://www.netsparker.com/blog/web-security/sql-injection-cheat-sheet/
• MySQL Command Cheat Sheet: http://g2pc1.bu.edu/~qzpeng/manual/MySQL%20Commands.htm
• GracefulSecurity's Linux Path Traversal Cheat Sheet: https://gracefulsecurity.com/path-traversal-cheat-sheet-linux/

Exploiting and Payloads

• ferreirasc's Payload Cheatsheet: https://github.com/ferreirasc/oscp/tree/master/payloads
• pentestmonkey's Reverse Shell Cheat Sheet: http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet
• pentestmonkey's PHP Reverse Shell: http://pentestmonkey.net/tools/web-shells/php-reverse-shell
• Dhayalanb's Windows PHP Reverse Shell: https://github.com/Dhayalanb/windows-php-reverse-shell/blob/master/Reverse%20Shell.php
• burmat's MSFVenom Cheatsheet: https://burmat.gitbook.io/security/hacking/msfvenom-cheetsheet
• Hacking Tutorial's Compilin Windows Exploits on Linux: https://www.hackingtutorials.org/exploit-tutorials/mingw-w64-how-to-compile-windows-exploits-on-kali-linux/
• InfosecMatter's PowerShell Commands for Pentesters: https://www.infosecmatter.com/powershell-commands-for-pentesters/

File Transfers:

• PenTest Duck's (Almost) All The Ways to Transfer Files: https://medium.com/@PenTest_duck/almost-all-the-ways-to-file-transfer-1bd6bf710d65
• nakkaya's netcat file transfers: https://nakkaya.com/2009/04/15/using-netcat-for-file-transfers/
• ropnop's Kali to Windows File Transfers: https://blog.ropnop.com/transferring-files-from-kali-to-windows/#ftp

Linux Privilege Escalation:

• payatu's Linux Priv Esc: https://payatu.com/guide-linux-privilege-escalation/
• g0tmi1k's basic linux priv esc: https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/
• LinuxEOP: https://guif.re/linuxeop
• LinPeas: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/linPEAS
• Sudo and SU: https://www.linux.com/blog/how-use-sudo-and-su-commands-linux-introduction
• SUID Misconfigs: https://www.hackingarticles.in/linux-privilege-escalation-using-suid-binaries/
• SUID Executables: https://pentestlab.blog/2017/09/25/suid-executables/

Windows Privilege Escalation:

• Fuzzysecurity's Windows priv esc: http://www.fuzzysecurity.com/tutorials/16.html
• Windows EOP: https://guif.re/windowseop
• PayloadsAllTheThings' Windows Priv Esc: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Privilege%20Escalation.md
• pentestmonkey's windows privesc check: https://github.com/pentestmonkey/windows-privesc-check
• WinPeas: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS