LOADING N0PERM…

QUICK REFERENCE

Security Cheat Sheets

High-density, scannable command syntax, protocol rules, and defensive checklists. Built to provide immediate practical answers on real systems.

Showing20of 20 cheat sheets

CHEAT SHEET -ACTIVE DIRECTORYQUICK REF

Active Directory LDAP & Domain Enumeration

LDAP search filters, BloodHound collection syntax, and read-only domain enumeration queries for auditing Active Directory objects.

Active Directory Domain Services ArchitectureBloodHound

FREE REFERENCE

CHEAT SHEET -WINDOWSQUICK REF

Critical Windows Security Event IDs

Scannable guide to essential Windows Event Log IDs for detecting account tampering, lateral movement, Kerberoasting, and privilege elevation.

Windows Security Event Log ForensicsSysmon (System Monitor)

FREE REFERENCE

CHEAT SHEET -NETWORKINGQUICK REF

DNS Security & Query Diagnostics

Comprehensive dig and nslookup syntax for DNS record verification, DNSSEC validation, and zone transfer auditing.

DNS Security, Tunneling & Cache Defensedig (Domain Information Groper)

FREE REFERENCE

CHEAT SHEET -CONTAINER SECURITYQUICK REF

Docker Container Security & Hardening

Checklist of container runtime flags, capability drops, seccomp filtering, and Docker socket protection.

Control Groups (cgroups v2) Resource ControlsDocker CLI

FREE REFERENCE

CHEAT SHEET -DEVELOPMENT SECURITYQUICK REF

Git Secrets Scanning & Remediation

Strategies and commands for detecting, preventing, and purging accidentally committed API keys, tokens, and credentials in Git.

Modern Cryptographic PrimitivesTrivy

FREE REFERENCE

CHEAT SHEET -DETECTIONQUICK REF

Host Incident Response Triage Playbook

Initial triage commands for gathering volatile evidence, inspecting process states, and identifying active persistence on compromised Linux hosts.

Incident Triage, Containment & Post-MortemVolatility 3

FREE REFERENCE

CHEAT SHEET -WEB SECURITYQUICK REF

HTTP Security Headers & Browser Hardening

Authoritative guide to defensive HTTP response headers, Content Security Policy (CSP), HSTS, and frame protections.

Web Injection Vulnerabilities & SQLi Mitigationcurl

FREE REFERENCE

CHEAT SHEET -WEB SECURITYQUICK REF

JSON Web Token (RFC 7519) Security & Triage

Deep dive into JWT token architecture (Header.Payload.Signature), common cryptographic implementation flaws, and hardening rules.

JWT Signature Verification & Algorithm Defensejwt_tool

FREE REFERENCE

CHEAT SHEET -ACTIVE DIRECTORYQUICK REF

Kerberos Protocol Mechanics & Attack Triage

Detailed breakdown of Kerberos authentication tickets (TGT, TGS), Kerberoasting mechanics, and ticket anomaly detection.

Kerberos Protocol Mechanics & Ticket SecurityBloodHound

FREE REFERENCE

CHEAT SHEET -DETECTIONQUICK REF

Linux auditd Rules & Threat Telemetry

Production-grade auditd rule syntax for monitoring file integrity, execution of privileged tools, and user session activity.

auditctl

FREE REFERENCE

CHEAT SHEET -CONTAINER SECURITYQUICK REF

Linux Container Isolation Primitives (cgroups & namespaces)

Deep dive into the Linux kernel primitives that power containers: namespaces (PID, NET, MNT, IPC, UTS, USER) and control groups (cgroups v2).

Linux Namespaces & Process IsolationDocker CLI

FREE REFERENCE

CHEAT SHEET -LINUXQUICK REF

Linux File Permissions & POSIX ACLs

Rapid reference for standard POSIX file permissions (rwx), octal notation, special permission bits (SUID, SGID, Sticky), and getfacl/setfacl commands.

Linux Discretionary Access Control & Permissionsauditctl

FREE REFERENCE

CHEAT SHEET -LINUXQUICK REF

Linux Privilege Escalation Triage

Systematic manual enumeration commands for identifying local privilege escalation vectors on Linux systems.

Linux Privilege Escalation & SUID Triageauditctl

FREE REFERENCE

CHEAT SHEET -AI SECURITYQUICK REF

LLM Prompt Injection & Agent Security Reference

Tactical reference for direct and indirect prompt injection defense, agent permission sandboxing, and output sanitization.

Direct & Indirect Prompt Injection Defensegarak (LLM Vulnerability Scanner)

FREE REFERENCE

CHEAT SHEET -WEB SECURITYQUICK REF

OAuth 2.0 & OpenID Connect Security Reference

Security reference for OAuth 2.0 grant types, PKCE protection, redirect URI validation, and authorization code leakage mitigations.

OAuth 2.0 & PKCE Authorization FlowsBurp Suite Community Edition

FREE REFERENCE

CHEAT SHEET -CRYPTOGRAPHYQUICK REF

OpenSSL PKI, Keys & TLS Diagnostics

Practical command recipes for generating modern RSA/Ed25519 keypairs, CSRs, self-signed certificates, and troubleshooting TLS handshakes.

Modern Cryptographic PrimitivesOpenSSL

FREE REFERENCE

CHEAT SHEET -WEB SECURITYQUICK REF

OWASP Top 10 Web Application Security Reference

Essential summary of the OWASP Top 10 web vulnerabilities, root causes, attacker mechanics, and architectural defenses.

Web Injection Vulnerabilities & SQLi MitigationOWASP ZAP (Zed Attack Proxy)

FREE REFERENCE

CHEAT SHEET -WINDOWSQUICK REF

PowerShell Auditing & Security Controls

PowerShell security configurations, Script Block Logging (Event ID 4104), Constrained Language Mode, and AMSI protection.

Active Directory Domain Services ArchitecturePowerShell

FREE REFERENCE

CHEAT SHEET -PACKET ANALYSISQUICK REF

TCP/IP Protocol & 3-Way Handshake Reference

Detailed packet header reference for IPv4 and TCP, handshake flag combinations, connection termination, and anomalous TCP behavior.

TCP/IP Protocol Analysis & State Trackingtcpdump

FREE REFERENCE

CHEAT SHEET -PACKET ANALYSISQUICK REF

Wireshark Display Filter Syntax & Forensics

Curated display filters for network forensics, protocol hunting, malware beaconing, and security troubleshooting.

Packet Capture Forensics & TelemetryWireshark

FREE REFERENCE