Hacking/OSCP Cheatsheet
Well, just finished my 90 days journey of OSCP labs, so now here is my cheatsheet of it (and of hacking itself), I will be adding stuff in an incremental way as I go having time and/or learning new stuff. But this is basically the tools I tend to relie and use in this way the most. Hope is helpfull for you! 

• Hacking/OSCP Cheatsheet

• Enumeration

• Network discoverie

• Nmap

• Ports discovery (without nmap)

• nc + bash

• /dev/tcp/ip/port or /dev/udp/ip/port

• Banner grabbing (without nmap)

• /dev/tcp/ip/port or /dev/udp/ip/port

• telnet

• Web directorie/file scanner

• Gobuster

• Nikto

• fuff

• Most usefull dictionaries (OSCP/HTB)

• Samba

• smbclient

• impacket

• smbmap

• Version (nmap didn’t detect it)

• Exfiltration

• Samba

• Mount in Windows

• Mount in Linux

• HTTP

• Windows

• Linux

• FTP

• Sockets

• RDP

• Pivoting

• sshuttle

• One hop

• Multi-hops

• Reverse shells

• php

• bash

• sh + nc

• Perl (example deploy as cgi-bin)

• Java (example to deploy on tomcat)

• Windows HTPP download reverse shell

• Windows staged reverse TCP

• Windows stageless reverse TCP

• Linux staged reverse TCP

• Linux staged reverse TCP

• Privilege escalation

• Windows

• Run-As

• Incorrect permisions in services (sc config binpath)

• SAM + SYSTEM + Security

• Linux

• /home/user/openssl =ep (empty capabilities)

• Command web injection: add user

• NFS; no_root_squash,insecure,rw

• Good to know (either Windows and/or Linux)

• Arch cross compile exploit (and diff glibc version)

• IP restriction at application level, bypass

• Windows - check OS information

• Windows - check architecture

• Powershell running as 32 or 64 bits

• Linux LFI - intesresting files to look after

• Simple Buffer Overflow (32 bits, NO ASLR and NO DEP)

• Summarized steps

• Fuzzing: example with vulnserver + spike on TRUN command

• Badchars

• Usefull tools (on Kali Linux)

• create_pattern

• pattern_offset

• nasm_shell

• msfvenom

• Shellcode POC: calc.exe 

*Beware click the link!