Others

📚 Resources (Wordlists, some commands)

Back to Index.

Wordlists

# Usernames
/usr/share/wordlists/seclists/Usernames/Names/names.txt
/usr/share/wordlists/wfuzz/others/names.txt
# Web content
/usr/share/wordlists/seclists/Discovery/Web-Content/raft-medium-directories.txt
raft-medium-files.txt   common.txt

Search Google for software_name + wordlist. SecLists Web-Content.

If rockyou.txt fails, try fasttrack.txt or a different list.

External links

General

• HackTricks · PayloadsAllTheThings · WADComs · Haax cheatsheet
• Offensive Security Testing Guide · OSCP things to try when stuck
• OffSec student resources

Shells & payloads

• revshells.com · PentestMonkey reverse shells · MSFVenom cheatsheet · URL encoder/decoder

Exploits & vulns

• Exploit-DB · GTFOBins

Hashes

• Hashcat example hashes · hashes.com identifier · CrackStation

Privesc / AD

• PEASS-ng · PrivescCheck · Rubeus · Certipy · Mimikatz (HackTricks)

Some useful commands

Docker (for CTF env)

docker build -t ctf .
docker run -p 4444:4444 -v /media/psf/vm-share:/vm-share -it ctf /bin/bash
docker ps -a                        # find a stopped container
docker attach ID                    # reattach to it

Linux

echo "sss" | base64 -d
cat file | xclip -selection clipboard
git log                             # commit history
git show COMMIT_ID                  # inspect one commit (GitHacker for a found .git folder)

File transfer (scp/nc/smb/http) lives in file-transfer.