> For the complete documentation index, see [llms.txt](https://docs.h4rithd.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.h4rithd.com/other/bookmarks.md).

# BookMarks

## 00. Anonymous

* <https://unsee.cc/>
* <https://paste.offsec.com/>

## 01. Notebooks

* [https://book.hacktricks.xyz/](https://book.hacktricks.xyz)
* [https://gtfobins.github.io/](https://gtfobins.github.io)
* [https://wadcoms.github.io/](https://wadcoms.github.io)
* [https://lolbas-project.github.io/](https://lolbas-project.github.io)
* [https://www.explainshell.com/](https://www.explainshell.com)
* <https://ppn.snovvcrash.rocks/>
* [https://www.ired.team/](https://www.ired.team)
* [https://0xrick.github.io/](https://0xrick.github.io)
* <https://howto.thec2matrix.com/>
* [https://ptestmethod.readthedocs.io/](https://ptestmethod.readthedocs.io/en/latest/index.html)
* [https://gitbook.seguranca-informatica.pt/](https://gitbook.seguranca-informatica.pt)
* [https://vk9-sec.com/](https://vk9-sec.com)
* [https://butter0verflow.github.io/](https://butter0verflow.github.io)
* <https://blueteamdope.gitbook.io/penetration-testing-playbook/>
* <https://hunter2.gitbook.io/darthsidious/>
* <https://guyinatuxedo.github.io/>
* <https://notes.offsec-journey.com/>
* <https://pentestbook.six2dez.com/>
* <https://persistence-info.github.io/>

## 02. OSCP Notes

* <https://sushant747.gitbooks.io/total-oscp-guide/content/>
* <https://github.com/rkhal101/Hack-the-Box-OSCP-Preparation>
* <https://refabr1k.gitbook.io/oscp/>
* <https://oscpnotes.infosecsanyam.in/>
* <https://www.netsecfocus.com/oscp/2021/05/06/The_Journey_to_Try_Harder-_TJnull-s_Preparation_Guide_for_PEN-200_PWK_OSCP_2.0.html>
* <https://infosecwriteups.com/how-i-passed-oscp-with-100-points-in-12-hours-without-metasploit-in-my-first-attempt-dc8d03366f33>
* <https://rana-khalil.gitbook.io/hack-the-box-oscp-preparation/>
* <https://cd6629.gitbook.io/ctfwriteups/oscp-cheatsheet-unfinished>
* <https://casvancooten.com/posts/2021/03/getting-the-osep-certification-evasion-techniques-and-breaching-defenses-pen-300-course-review/>
* <https://fareedfauzi.gitbook.io/oscp-notes/>
* <https://www.tarlogic.com/en/blog/how-to-attack-kerberos/>

## 03. Awesome Cheatsheet 📜

* [Bash](https://github.com/LeCoupa/awesome-cheatsheets/blob/master/languages/bash.sh)
* [Curl](https://github.com/LeCoupa/awesome-cheatsheets/blob/master/tools/curl.sh)
* [VIM](https://raw.githubusercontent.com/LeCoupa/awesome-cheatsheets/master/tools/vim.txt)
* [LFI](https://highon.coffee/blog/lfi-cheat-sheet/)
* [MSF](https://www.offensive-security.com/metasploit-unleashed/)
* [mysql](https://devhints.io/mysql)
* [Docker](https://raw.githubusercontent.com/LeCoupa/awesome-cheatsheets/master/tools/docker.sh)
* [cronatb](https://crontab.guru/)
* [MacOS](https://github.com/herrbischoff/awesome-macos-command-line)
* [Regexp](https://github.com/attackercan/regexp-security-cheatsheet)
* [Python3](https://github.com/siyuanzhao/python3-in-one-pic)
* [msfvenom](https://netsec.ws/?p=331)
* [MobApps](https://github.com/tanprathan/MobileApp-Pentest-Cheatsheet#all-in-one-mobile-security-frameworks)
* [PowerView-2.0](https://gist.github.com/HarmJ0y/3328d954607d71362e3c)
* [PowerView-3.0](https://gist.github.com/HarmJ0y/184f9822b195c52dd50c379ed3117993)
* [Deserialization](https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet)
* [PHP htaccess injection](https://github.com/sektioneins/pcc/wiki/PHP-htaccess-injection-cheat-sheet)
* [Reverse Shell Cheat Sheet](http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet)
* [WebHackersWeapons](https://github.com/hahwul/WebHackersWeapons)

## 04. Windows Privilege Escalation

* [Sherlock](https://github.com/rasta-mouse/Sherlock)
* [Watson](https://github.com/rasta-mouse/Watson)
* [PowerSploit](https://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc)
* [WindowsExploits](https://github.com/abatchy17/WindowsExploits)
* [Windows-Exploit-Suggester](https://github.com/AonCyberLabs/Windows-Exploit-Suggester)
* [Microsoft Wont-Fix-List](https://github.com/cfalta/MicrosoftWontFixList/blob/main/README.md)
* [Ghostpack CompiledBinaries](https://github.com/depradip/Ghostpack_CompiledBinaries/tree/main/Ghostpack-CompiledBinaries)

## 05. Linux Privilege Escalation

* [LinEnum](https://github.com/rebootuser/LinEnum)
* L[inPEAS](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/linPEAS)
* [SharpCollection](https://github.com/Flangvik/SharpCollection)
* [Linux Exploit Suggester](https://github.com/InteliSecureLabs/Linux_Exploit_Suggester)
* [Linux Exploit Suggester 2](https://github.com/jondonas/linux-exploit-suggester-2)
* [Linux Soft Exploit Suggester](https://github.com/belane/linux-soft-exploit-suggester)
* [Basic Linux Privilege Escalation](https://blog.g0tmi1k.com/2011/08/basic-linux-privilege-escalation/)
* [Linux privilege escalation auditing tool](https://github.com/mzet-/linux-exploit-suggester)

## 06. Other

### 06.1 Binary Exp

* <https://tc.gts3.org/cs6265/2019/tut/tut01-warmup1.html>
* <https://guyinatuxedo.github.io/index.html>
* <https://github.com/Gallopsled/pwntools-tutorial>
* [https://butter0verflow.github.io/](https://butter0verflow.github.io)

### 06.2 File Upload

* <https://infosecwriteups.com/all-about-unrestricted-file-upload-a4ecf243b86b>

### 06.3 Bug Bounty

* <https://kathan19.gitbook.io/howtohunt/>

### 06.4 Malware analysis

* [Decompiled Pegasus Spyware](https://github.com/jonathandata1/pegasus_spyware)

### 06.5 Other

* <https://github.com/juanjoSanz/aws-pentesting-lab>
* <https://github.com/andrew-d/static-binaries/>
* <https://medium.com/mii-cybersec/how-to-dealing-with-flutterapp-penetration-testing-another-way-bypass-ssl-pinning-ed6755217c85>
* <https://github.com/streaak/keyhacks>
* <https://missing.csail.mit.edu/2020/editors/>
* <https://www.eicar.org/?page_id=3950>
* <https://lelinhtinh.github.io/de4js/>

### 06.6 Active Directory

* [https://blog.xpnsec.com/](https://blog.xpnsec.com)
* <https://yingshaoxo.gitbook.io/university-notes/>