Pentesting Tips - Cheatsheets

A curated list of useful general cheatsheets.

Information Gathering

• Nmap - Nmap is used to discover hosts and services on a computer network
  • Nmap by Incendium
  • More Nmap by stationx
• Gobuster - Gobuster is a tool used to brute-force URIs, DNS, vhosts, AWS S3 buckets
  • Gobuster by 3os
• Nikto - Nikto is a free software command-line vulnerability scanner that scans webservers for dangerous files/CGIs, outdated server software and other problems.
  • Nikto by comparitech