Supercharge your offensive workflow

Pentest Cheatsheet

Quickly search, filter and copy practical commands for your favorite penetration testing tools.

pentest security enumeration network reconnaissance exploitation web impacket active-directory scanner authentication windows smb forensics kerberos

403bypasser

8 Commands

websecuritypentestbypass+3

aircrack-ng

18 Commands

wirelesssecuritypentestwifi+3

amass

11 Commands

reconnaissancednsenumerationsubdomains+3

apktool

11 Commands

androidreverse-engineeringsecuritypentest+3

arachni

15 Commands

webscannersecuritypentest+2

arjun

12 Commands

websecuritypentestenumeration+3

autobloody

8 Commands

active-directorypentestprivilege-escalationbloodhound+3

autopsy

8 Commands

forensicsdigital-forensicstskincident-response+2

autorecon

12 Commands

networkscannerreconnaissancepentest+3

awk

11 Commands

text-processinglinuxscriptingdata-extraction+3

bbot

14 Commands

reconscannerpentestsubdomain-enum+3

binwalk

17 Commands

forensicsreverse-engineeringfirmwareanalysis+3

bloodhound-automation

6 Commands

securitypentestactive-directoryenumeration+3

bloodhound-python

10 Commands

active-directoryenumerationpentestsecurity+3

bloodyad

14 Commands

active-directorypentestsecurityprivilege-escalation+2

brew

11 Commands

macoslinuxpackage-managersoftware+3

bruteforce-luks

7 Commands

securitypentestencryptionluks+3

brutesharkcli

9 Commands

networksecurityforensicspentest+4

caido-cli

13 Commands

websecurityproxypentest+2

cariddi

15 Commands

reconwebscannerpentest+4

cero

9 Commands

networkreconnaissancescanningsecurity+3

certipy

11 Commands

active-directoryadcssecuritypentest+4

cewl

14 Commands

wordlistpassword-crackingreconnaissancesecurity+3

changeme

10 Commands

pentestsecurityenumerationexploitation+2

chisel

10 Commands

networktunnelingpivotingproxy+4

cloud_enum

9 Commands

cloudosintenumerationaws+4

coercer

6 Commands

windowsauthenticationcoercionpentest+4

commix

13 Commands

websecuritypentestexploitation+2

corsy

8 Commands

websecuritypentestreconnaissance+2

crlfuzz

11 Commands

web-securitycrlf-injectionscannerpentest+3

crunch

11 Commands

password-crackingwordlistsecuritypentest+2

cupp

6 Commands

passwordswordlistsocial-engineeringpentest+2

curl

15 Commands

networkwebsecuritytransfer+4

dalfox

13 Commands

websecuritypentestscanner+3

dig

13 Commands

networkdnsenumerationreconnaissance+2

dirb

13 Commands

webscannerpentestenumeration+3

dirsearch

13 Commands

webpentestreconnaissanceenumeration+3

dirstalk

9 Commands

webscannersecuritypentest+3

dmitry

10 Commands

information-gatheringreconnaissancepentestnetwork+2

dnscat

10 Commands

networkdnsexfiltrationc2+3

dnscat2-server

10 Commands

networksecuritypentestexfiltration+2

dnsenum

10 Commands

dnsenumerationreconnaissancepentest+3

dnsrecon

14 Commands

networkreconnaissancednspentest+3

dnsx

11 Commands

dnsenumerationreconnaissancenetworking+3

docker

19 Commands

containerizationdevopsvirtualizationinfrastructure+2

dotdotpwn

11 Commands

networksecuritypentestenumeration+4

drupwn

9 Commands

securitypentestenumerationdrupal+3

emailharvester

9 Commands

osintreconnaissanceemailenumeration+2

enum4linux-ng

14 Commands

networkwindowssmbenumeration+3

evil-winrm

10 Commands

winrmwindowspentestexploitation+2

eyewitness

11 Commands

webreconnaissanceenumerationscanner+4

fatcat

13 Commands

forensicsfilesystemsecurityrecovery+2

fcrackzip

9 Commands

password-crackingzipsecurityforensics+2

feroxbuster

17 Commands

webscannersecuritypentest+3

ffuf

13 Commands

webscannerfuzzerpentest+3

fierce

8 Commands

dnsenumerationreconnaissancefootprinting+3

find

11 Commands

linuxfile-systemenumerationforensics+3

findomain

13 Commands

subdomain-enumerationreconnaissancepentestosint+2

fping

13 Commands

networkscannerdiscoveryicmp+3

gaia

7 Commands

reconweburlsparameters+2

gau

13 Commands

reconweb-securityenumerationurls+3

ghauri

15 Commands

sql-injectionexploitationsecuritypentest+3

git

18 Commands

vcsversion-controldevelopmentcollaboration+2

gitleaks

11 Commands

securitysecretsgitscanning+4

gobuster

12 Commands

webscanningenumerationpentest+6

goshs

11 Commands

networkfile-sharingsecurityweb+4

gospider

11 Commands

webscannersecuritypentest+3

gowitness

12 Commands

webscreenshotreconnaissancepentest+3

graphw00f

10 Commands

graphqlsecuritypentestfingerprinting+4

grep

11 Commands

linuxsearchtext-processingcommand-line+3

gunzip

10 Commands

systemarchivecompressionutility+2

hakrawler

12 Commands

webcrawlerreconreconnaissance+4

hash-identifier

4 Commands

securitypentesthashidentification+3

hashcat

13 Commands

securitypentestpassword-crackingforensics+2

hashdeep

11 Commands

forensicssecurityhashingintegrity+2

httpx

15 Commands

networkwebscannersecurity+3

hydra

13 Commands

networksecuritypentestbrute-force+3

impacket-addcomputer

8 Commands

active-directorypentestexploitationsecurity+3

impacket-atexec

8 Commands

securitypentestexploitationlateral-movement+3

impacket-changepasswd

10 Commands

active-directorywindowspentestauthentication+3

impacket-dacledit

13 Commands

active-directorypentestexploitationdacl+3

impacket-dcomexec

11 Commands

pentestlateral-movementsecuritywindows+3

impacket-describeTicket

7 Commands

kerberosactive-directorysecuritypentest+2

impacket-dpapi

8 Commands

windowssecuritypentestdecryption+3

impacket-DumpNTLMInfo

5 Commands

networkenumerationsecuritypentest+3

impacket-esentutl

6 Commands

windowsforensicsactive-directoryesent+3

impacket-exchanger

5 Commands

pentestsecurityexchangeenumeration+3

impacket-findDelegation

8 Commands

pentestactive-directorysecurityenumeration+3

impacket-Get-GPPPassword

7 Commands

active-directorywindowspentestexploitation+3

impacket-GetADComputers

8 Commands

active-directorypentestenumerationsecurity+2

impacket-getadusers

8 Commands

active-directoryenumerationpentestimpacket+4

impacket-getarch

5 Commands

networkenumerationsmbimpacket+3

impacket-getlapspassword

8 Commands

pentestsecurityactive-directoryimpacket+3

impacket-GetNPUsers

9 Commands

active-directorykerberosas-rep-roastingpentest+3

impacket-getpac

5 Commands

active-directorykerberossecuritypentest+3

impacket-getst

8 Commands

active-directorykerberospentestexploitation+3

impacket-gettgt

8 Commands

kerberosactive-directorysecuritypentest+3

impacket-getuserspns

10 Commands

pentestsecurityactive-directorykerberos+3

impacket-goldenPac

6 Commands

networksecuritypentestexploitation+4

impacket-karmaSMB

5 Commands

smbpentestexploitationimpacket+2

impacket-keylistattack

9 Commands

pentestsecurityactive-directorykerberos+3

impacket-lookupsid

8 Commands

pentestenumerationsecurityactive-directory+3

impacket-machine_role

7 Commands

pentestnetworksecurityenumeration+3

impacket-mimikatz

7 Commands

pentestsecuritycredentialsexploitation+3

impacket-mqtt_check

7 Commands

networkiotsecuritypentest+3

impacket-mssqlclient

10 Commands

databasemssqlpentestexploitation+3

impacket-mssqlinstance

5 Commands

networkpentestreconnaissancemssql+3

impacket-net

8 Commands

networkpentestactive-directoryenumeration+3

impacket-ntfs-read

7 Commands

forensicsstoragentfsimpacket+3

impacket-ntlmrelayx

12 Commands

networkpentestexploitationntlm+5

impacket-owneredit

9 Commands

active-directoryldappentestsecurity+4

impacket-ping

4 Commands

networksecuritypentesticmp+4

impacket-ping6

4 Commands

networkicmpipv6reconnaissance+3

impacket-psexec

9 Commands

pentaestsecurityexploitationlateral-movement+3

impacket-raiseChild

7 Commands

active-directorypentestprivilege-escalationimpacket+3

impacket-rbcd

8 Commands

active-directorykerberospentestexploitation+4

impacket-rdp_check

6 Commands

networksecuritypentestenumeration+3

impacket-reg

10 Commands

networksecuritypentestenumeration+4

impacket-registry-read

7 Commands

pentestforensicwindowsregistry+3

impacket-rpcmap

10 Commands

networksecuritypentestenumeration+3

impacket-sambapipe

8 Commands

networkpentestexploitationsmb+3

impacket-services

10 Commands

pentestsecurityimpacketwindows+4

impacket-smbclient

10 Commands

networkwindowssecuritypentest+4

impacket-smbexec

10 Commands

networksecuritypentestexploitation+4

impacket-smbserver

9 Commands

networkfile-transfersecuritypentest+3

impacket-sniff

5 Commands

networksniffingpacketsimpacket+3

impacket-sniffer

7 Commands

networksniffersecuritypentest+3

impacket-split

4 Commands

networkforensicstraffic-analysispcap+3

impacket-ticketConverter

4 Commands

pentestsecuritykerberosactive-directory+3

impacket-ticketer

10 Commands

pentestsecuritykerberosimpacket+4

impacket-tstool

11 Commands

pentestsecurityimpacketterminal-services+5

impacket-wmipersist

6 Commands

pentestpersistencewmiwindows+3

impacket-wmiquery

9 Commands

networkwindowspentestenumeration+3

interactsh

10 Commands

oastout-of-bandpentestsecurity+3

jadx

11 Commands

androidsecuritydecompilerreverse-engineering+3

john

15 Commands

password-crackingsecuritypentestbrute-force+3

joomscan

8 Commands

joomlascannerpentestvulnerability+4

jwt_tool

12 Commands

securityjwtpentestexploitation+3

k8scan

11 Commands

kubernetesk8ssecurityscanner+4

katana

14 Commands

webscannerreconnaissancecrawler+3

kerbrute

10 Commands

active-directorykerberospentestenumeration+3

kiterunner

9 Commands

networkwebsecuritypentest+4

kubectl

16 Commands

kubernetesdevopscontainersorchestration+3

kubernetes

18 Commands

orchestrationcloudcontainerssecurity+3

ligolo-proxy

10 Commands

pivotingnetworktunnelingproxy+2

lsassy

11 Commands

active-directorycredential-dumpingpentestsecurity+4

masscan

10 Commands

networkscannersecuritypentest+3

medusa

13 Commands

networksecuritypentestenumeration+2

mitm6

9 Commands

networkpentestsecurityexploitation+4

mount

10 Commands

systemstoragelinuxunix+3

msfconsole

13 Commands

pentestexploitationnetworksecurity+3

msfvenom

13 Commands

pentestpayloadexploitationsecurity+3

naabu

14 Commands

networkscannersecuritypentest+3

nbtscan

9 Commands

networkpentestenumerationnetbios+2

netcat

12 Commands

networksecuritypentestshell+3

netdiscover

10 Commands

networkreconnaissancearpscanner+3

nikto

13 Commands

webscannersecuritypentest+3

nmap

17 Commands

networkscannerreconnaissancesecurity+3

nmapautomator

10 Commands

networkscannerpentestreconnaissance+2

npm

18 Commands

javascriptnodejspackage-managerdevelopment+2

nuclei

18 Commands

vulnerability-scannersecuritypentestautomation+3

nxc

167 Commands

networkwindowsactive-directorysmb+6

objection

16 Commands

mobilesecurityandroidios+4

onesixtyone

9 Commands

networksnmpscannerpentest+3

openredirex

6 Commands

websecuritypentestopen-redirection+3

pacu

11 Commands

cloudsecuritypentestaws+3

paramspider

6 Commands

reconwebsecuritypentest+4

passdetective

4 Commands

securitypentestcredentialsforensics+4

php

16 Commands

webdevelopmentscriptingserver+2

phpsploit

12 Commands

webpost-exploitationphpshell+4

plumhound

11 Commands

active-directorybloodhoundsecuritypentest+4

pwncat

13 Commands

networkconnectivityscanningpentest+3

pywhisker

11 Commands

active-directorypentestshadow-credentialssecurity+4

qsfuzz

10 Commands

websecuritypentestfuzzer+3

qsreplace

5 Commands

webbug-bountyreconnaissancescanning+3

recon-ng

12 Commands

reconnaissanceosintframeworkpentest+3

responder

11 Commands

networksecuritypentestpoisoning+3

rpcclient

13 Commands

networksmbrpcpentest+3

scp

11 Commands

file-transfernetworksecurityssh+4

searchsploit

13 Commands

securityexploitationpentestvulnerability+3

sherlock

13 Commands

osintreconnaissancesecuritysocial-media+3

sliver

144 Commands

c2frameworkpost-exploitationred-team+13

smbmap

15 Commands

networksecuritypentestenumeration+3

smtp-user-enum

8 Commands

networksecuritypentestenumeration+3

smugglex

11 Commands

websecuritypentestvulnerability-scanner+2

snmp-check

7 Commands

networkscannersecuritypentest+3

snmpwalk

10 Commands

networkenumerationsecuritypentest+2

spiderfoot

13 Commands

osintreconnaissancefootprintinginformation-gathering+2

sprayhound

9 Commands

active-directorypentestsecuritypassword-spraying+3

sqlmap

16 Commands

securitypentestexploitationvulnerability-scanner+3

ssh

13 Commands

networksecuritypentestauthentication+3

sshuttle

11 Commands

networkvpnproxyssh+4

sslscan

15 Commands

networksecuritypentestenumeration+3

ssrfmap

7 Commands

securitypentestssrfweb+3

sstimap

13 Commands

securitypentestexploitationssti+4

subfinder

15 Commands

subdomainenumerationreconnaissancepassive+3

subjack

8 Commands

securitypentestreconnaissancesubdomain-takeover+2

tar

12 Commands

systemarchivecompressionutility+2

tcpdump

14 Commands

networksniffersecuritypentest+3

theHarvester

11 Commands

osintreconnaissancesecuritypentest+3

trivy

13 Commands

securityscannervulnerabilitiescontainer+4

trufflehog

11 Commands

securitysecrets-scanningpentestreconnaissance+4

uncover

11 Commands

reconscannersecuritypentest+4

uro

11 Commands

websecuritypentestreconnaissance+2

username-anarchy

9 Commands

pentestreconnaissanceenumerationusernames+2

wafw00f

10 Commands

websecuritypentestenumeration+3

wapiti

13 Commands

webscannersecuritypentest+3

weevely

14 Commands

webwebshellpost-exploitationpentest+4

wfuzz

12 Commands

webpentestenumerationbruteforce+2

wget

16 Commands

networkdownloadutilityscraping+2

whatweb

13 Commands

webscannersecuritypentest+3

windapsearch

16 Commands

active-directoryldapenumerationpentest+3

wpprobe

9 Commands

wordpressscannersecuritypentest+3

wpscan

13 Commands

vulnerability-scannerwordpresssecuritypentest+3

xfreerdp

13 Commands

networkremote-desktoprdpsecurity+3

xsser

13 Commands

websecuritypentestxss+3

xsstrike

16 Commands

web-securityxssscannerpentest+2

xxexploiter

10 Commands

websecuritypentestexploitation+4

ysoserial

8 Commands

javasecurityexploitationdeserialization+3

zip

12 Commands

compressionarchivebackupsecurity+2