Reverse Engineering (REV)
Static/dynamic analysis of compiled binaries, custom VMs, obfuscated code, and decompilers.
Playbooks & Blueprints
Cheatsheets & Disassemblers
IDA Pro Cheat Sheet
Keyboard shortcuts, cross-references, type casting, and IDAPython automation scripting.
Ghidra Cheat Sheet
Equivalent workflows, commented structures, Data Type Manager, and Jython scripting.
Reversing CLI Tools
Quick guide on file, strings, ltrace, strace, objdump, and unpacked extraction tools.
GDB (gef) Cheat Sheet
GEF context, telescope, registers inspection, and bypassing basic anti-debug checks.
x64dbg Cheat Sheet
Windows dynamic debugging, setting memory patches, hardware breakpoints, and Scylla unpacking.
Solvers & Scripting
Practice & Progression
Machine Exploitation
Network scanning, privilege escalation, Windows/Linux environments, Active Directory, and lateral pivoting.
Playbooks & Blueprints
Machine Exploitation Playbook
Port scanning, shell stabilization, privilege escalation methods, and file transfers.
Exploitation Databank
Exploit references, payloads, and mapping guides for compromised target pathways.
Machine Attack Blueprint Index
40+ detailed attack blueprints spanning SMB, Kerberoasting, MSSQL, Docker escapes, and NFS.
Enumeration & Recon
Nmap Cheat Sheet
Scanning styles, service detection, and NSE script flags.
Footprinting Cheatsheet
OS detection and network enumeration strategies.
Dig (DNS) Cheat Sheet
DNS record queries, reverse lookups, and zone transfer commands.
SMBClient Cheat Sheet
SMB share connections, file downloads, and listing commands.
FTP Cheat Sheet
FTP authentication, mirroring directories, and recursive downloads.
SMTP Mail Enumeration
SMTP commands (VRFY/EXPN) and user enumeration.
Networking & Tunneling
Port forwarding, proxychains, SSH tunneling, and networking diagnostics.
Exploitation & PrivEsc
Metasploit Cheat Sheet
Module configurations, payloads selection, and multi-handler setup.
EternalBlue (MS17-010)
Testing SMB vulnerabilities and executing exploit script commands.
Linux Attack Path & PrivEsc
SUID binaries, capabilities, cronjobs, kernel exploits, and Sudo abuses.
Windows Privilege Escalation
Token impersonation, registry exploits, service path hijacks, and UAC bypasses.
Windows Attack Paths
Windows specific lateral movement, credential harvesting, and attack vectors.
Active Directory
Web Exploitation
Vulnerability analysis of web apps. SQL Injection, Command Injection, LFI/RFI, SSRF, XSS, and directory fuzzing.
Playbooks & Blueprints
Cheatsheets & Tools
Web Testing & Fuzzing
Burp Suite proxies, Gobuster/ffuf directory busting, and parameter wordlists.
Web Attack Alternatives
Advanced payload options, bypass syntax variations, and niche exploit configurations.
picoCTF Web & REV Patterns
Common CTF-specific web challenge patterns, cookie tempers, and basic solutions.
PWN (Binary Exploitation)
Compromising native binaries. Buffer overflows, format string vulnerabilities, shellcode injection, and ROP chain exploitation.
Playbooks & Blueprints
Cheatsheets & Solvers
GDB (gef) for Exploit Dev
Inspecting stack arrays, using pattern creator/searcher, finding canary offsets, and GOT tables.
Pwn CLI Verification Tools
Quick guide for checksec, ROPgadget, ropper, one_gadget, and pwntools command hooks.
Pwntools Script Templates
Template configurations for remote socket exploits, local process forks, ELF symbol lookups.
Steganography
Extracting hidden payloads from files. Analyzing metadata, color-plane channels, and embedded zip files.
Cryptography
Analyzing and breaking ciphers. XOR, AES, RSA, stream ciphers, hash functions, MACs, TLS, and custom crypto attacks.
Playbooks & Blueprints
Cryptography Blueprint
Solvers for XOR ciphers, RSA factorization, classical ciphers, hash ID, and custom source-code reversal. Decision-tree triage workflow.
Hash Cracking & Password Attacks
Syntax mapping for hashcat rules, John the Ripper wordlist mutations, NTLM, NTLMv2, Kerberoast, and zip cracking.
Crypto Python Solvers
Template scripts for XOR brute-force, RSA with pycryptodome, AES-CBC decrypt, Z3 constraint solving, and hash cracking loops.
RsaCtfTool Weak RSA Guide
Dissect weak RSA assumptions, select targeted attacks, recover private keys, decrypt ciphertext, diagnose failures, and validate every result.
CTF Cryptography Field Guide
Integrated H4G 2025 notes for recognizing attacks against encodings, classical ciphers, AES modes, RSA, DH, ECC, lattices, PRNGs, signatures, and key files.
Crypto Notes Vault
Dedicated searchable reader for the H4G cryptography notes: AES, XOR, RSA, ECC, Diffie–Hellman, hashes, classical ciphers, CRT, and padding oracles.
Zen CTF Notes
Searchable Notion-sourced checklists for web exploitation, OSINT, forensics, networking, cryptography, reverse engineering, scripting, and tool syntax.
Crypto 101 — Searchable Course (lvh, CC BY-NC 4.0)
Building Blocks (Crypto101 — Part II)
Ch.5 — XOR & One-Time Pads
XOR as a programmable inverter, bitwise XOR, one-time pad construction, perfect secrecy proof, and attacks when the pad is reused.
Ch.6 — Block Ciphers (AES / DES)
Block cipher permutations, AES S-boxes and rounds, DES and 3DES structure, key sizes, and why ECB mode leaks patterns.
Ch.7 — Stream Ciphers & Modes
CBC mode, predictable-IV attacks, bit-flipping, PKCS#7 padding oracle, RC4, Salsa20, CTR mode, and authenticated operation modes.
Ch.8 — Key Exchange (DH / ECDH)
Abstract Diffie-Hellman, discrete logarithm hardness, ECDH over elliptic curves, and forward secrecy motivation.
Ch.9 — Public-Key Encryption (RSA / ECC)
RSA key generation and math, why textbook RSA is broken, OAEP padding, and elliptic curve cryptography basics.
Ch.10 — Hash Functions
MD5, SHA-1, SHA-2, SHA-3/Keccak, collision attacks, pre-image resistance, password storage, and length extension attacks.
Ch.11 — MACs (HMAC / GCM / OCB)
MAC authentication, encrypt-then-MAC ordering, HMAC construction, Carter-Wegman, GCM, and OCB authenticated encryption modes.
Ch.12 — Signature Algorithms (DSA / ECDSA)
RSA signatures, DSA construction, ECDSA nonce reuse vulnerability (the PS3 exploit), and repudiable authenticators.
Ch.13 — Key Derivation Functions
Password stretching with PBKDF2, bcrypt, scrypt, and HKDF for deriving subkeys from shared secrets or passwords.
Ch.14 — Random Number Generators
True RNGs vs CSPRNGs, Yarrow entropy pool, Blum Blum Shub, the Dual_EC_DRBG NSA backdoor story, and Mersenne Twister weaknesses.
Complete Cryptosystems (Crypto101 — Part III)
Ch.15 — SSL & TLS
TLS handshake, certificate authorities, perfect forward secrecy, BEAST, CRIME, POODLE, Lucky13, HSTS, and certificate pinning.
Ch.16 — OpenPGP & GPG
PGP architecture, web of trust model, key signing, key servers, and practical GPG usage for encrypted communication and file signing.
Ch.17 — Off-The-Record Messaging (OTR)
OTR protocol design, authenticated key exchange, Socialist Millionaire Protocol, deniability, and perfect forward secrecy in messaging.
Math Foundations (Crypto101 — Appendices)
Appendix A — Modular Arithmetic
Clock arithmetic, prime numbers, modular inverse, Fermat's little theorem, modular exponentiation by squaring, and the discrete log problem.
Appendix B — Elliptic Curves
Weierstrass form, point addition and doubling, Abelian groups on curves, ECDLP hardness, and why ECC gives smaller keys than RSA.
Appendix C — Side-Channel Attacks
Timing attacks on modular exponentiation, power measurement analysis (DPA/SPA), and Montgomery ladder countermeasures.
OSINT
Open-source intelligence. Domain reconnaissance, public lookup registries, and passive fingerprinting.
Forensics
Incident response analysis. Network traffic packets, event system logs, and shell trace analysis.
Networking
CCNA & Enterprise routing/switching, IPv4/IPv6 subnetting, protocols, packet analysis, and Layer 2/3 defense.
Core Architecture & Cheatsheets
Networking Cheat Sheet (CCNA & Enterprise)
Subnetting table (/24-/32), IPv4/IPv6, ports, cabling, VLANs, STP, EtherChannel, OSPFv2, FHRP, NAT/PAT, ACLs, and AAA hardening.
Linux Networking & Packet Analysis
Interface status, IP routes, live tcpdump filters, Scapy packet crafting, and Responder poisoned responses.
Wireless Networking & Security
802.11 standards (Wi-Fi 4/5/6/6E), channel planning, WPA2/WPA3, airmon-ng, and 4-way handshake cracking.
Nmap Port & Service Scanner
Host discovery, TCP SYN/Connect scans, UDP scans, version detection, NSE scripts, and evasion timing.
Reporting & Vault Hubs
Cross-cutting indices, documentation templates, interactive panels, and overall indices.
Reporting & Methodologies
Interactive Apps & Panels
0xrefs Command Reference
Interactive command panel with filter chips, searchable commands, and live shell variables.
CryptoRefs Cipher Atlas
Search 319 attributed cipher references, recognition clues, worked principles, and more than 1,500 visual-symbol samples.
Offline ASCII Workbench
Encode and decode binary, octal, decimal, and hexadecimal ASCII; inspect local dCode CSV exports; and search the full 7-bit table.
Cipher Identifier
Rank likely encodings and cipher families from measurable structure, with an optional allowlisted OpenCode review.
Offline Vigenere WorkbenchEncrypt, decrypt, visualize repeated keys, recover known keys, and rank likely key lengths without uploading ciphertext.
ROT Cipher WorkbenchBrute-force ROT shifts or use ROT13, ROT47, Base36, and custom alphabets entirely offline.
Columnar Transposition WorkbenchEncrypt and decrypt with word or numeric keys, inspect the column grid, and rank short unknown permutations offline.
Affine Cipher WorkbenchUse custom alphabets, validate modular keys, inspect substitutions, and rank every valid affine key pair offline.
Local GTFOBins ReferenceSearch Unix executable functions, privilege contexts, and copyable command variants from a local attributed snapshot.
Not The Hidden Wiki Mirror
Search an attributed, non-commercial snapshot of 5,000+ community-curated cybersecurity links.
CTF Writeups Search Vault
Search, filter, and study 1,140+ detailed challenge solves and machine walkthroughs.
Vault Indices
Markdown Vault Hub
Static markdown homepage linking the training guides.
Blueprints Index
Direct links to vulnerability and compromise blueprint pages.
Learning Path Index
Structured routes for learning basic network/host theory.
Tools & Cheatsheets Index
Consolidated index of all command-line and graphic analysis sheets.
References Index
Deep external links, system calls mapping, and resource inventory sheets.
Challenge Use Cases
Exemplar case writeups and walkthrough references.