Cheat sheets

List of cheat sheets that cover different areas of web security

• Attacks
• Cloud
• Credentials
• Tools
• Other

Attacks

• XSS
  • XSS Vector Cheat Sheet
  • PortSwigger XSS Cheat Sheet
  • XSS Filter Evasion Cheat Sheet
  • XSS Prevention Cheat Sheet
  • XSS Cheat sheet
  • Tiny XSS Payloads
• SQLi
  • NetSparker SQLi Cheat Sheet
  • Port Swigger SQLi Cheat Sheet
  • Acunetix SQLi Cheat Sheet
  • SQLi prevention cheat sheet
  • Advanced SQLi Cheat sheet
• NoSQLi
  • NoSQLi Cheat Sheet
  • HackTricks NoSQLi cheat sheet
• LFI & RFI
  • File inclusion cheat sheet from hacktricks
• File upload attacks
  • File upload attacks cheat sheet, part 1
  • File upload attacks cheat sheet, part 2
  • File upload attacks by PortSwigger
  • File upload attacks cheat sheet from hacktricks
  • File attacks cheat sheet, Offensive Security cheatsheet
• Authentication attacks
  • Broken access control cheat sheet
  • User management attacks
• Subdomain enumeration
  • Subdomain enumeration cheat sheet

Cloud

• Cloud pentesting cheat sheets
• HackTricks Cloud

Credentials

• DefaultCreds
• awesome-lists-of-secrets

Tools

• Nmap
  • nmap cheat sheet by Station X
  • Nmap GitHub cheat sheet
  • Infosec Institute nmap cheat sheet
• SQLMap
  • sqlmap cheat sheet by jkullick
  • sqlmap cheat sheet from sleuth
  • sqlmap cheat sheet from hacktricks
• wpscan
  • WPScan CLI cheat sheet poster
  • WPScan with metasploit
• Burp Suite
  • BurpSuite cheat sheet from xl7dev
  • Burp Suite cheat sheet from SANS
• nuclei
  • nuclei cheat sheet
• ffuf
  • ffuf cheat sheet

Other

• Web-Application-Cheatsheet