Home › Reference
Reference
Free, practical cybersecurity cheat sheets — the commands, flags and checklists worth coming back to, each with a visible last-verified date and none of it behind an email form or a PDF wall.
New here? The Cyber Kill Chain maps every sheet below onto a stage of a real attack — a good place to start.
The offensive chain runs end to end: map a target with the OSINT & recon sheet, scan it with Nmap, make sense of what's open via common ports, catch a shell with the reverse shell sheet, then climb with Linux privilege escalation.
The AI-security set covers what everyone's asking about: the OWASP LLM Top 10, prompt injection, jailbreak techniques, AI agent security and RAG security — with a hands-on LLM security lab to practise on.
On the blue-team side, watch the wire with tcpdump, read Linux logs with journalctl, search them at scale with SPL, and triage a suspicious file safely with malware analysis sandboxes. Everything is written to be scanned in seconds and trusted — spot something out of date? Tell me.
The Hosts File Explained: What It Is, Where It Lives, and Its Pros and Cons
ReferenceTopic hosts file + localhostWindows · Linux · macOSLast verified Oct 2026 The hosts file is a plain text list of names and IP addresses that…
DNSlytics Search Homepage
Lookup service for IP addresses, domains, and hosting providers. Aggregates DNS records, whois data, and historical information. Useful for reconnaissance, incident response and threat hunting when…
AI Scams: How to Spot and Stop Voice Clones, Deepfake Calls and AI Phishing
For everyoneRead ~6 minLast verified 30 Sep 2026No sign-up, no PDF wall AI scams are old scams with better props. A cloned voice that sounds exactly…
Top 50 Useful Linux Commands for Beginners - PDF | 2026
A beginner-focused reference covering 50 essential Linux commands, organized by function: basics, file management, networking and more. Includes a downloadable PDF. Useful for anyone new to…
The Watchlist
WatchlistFormat curated video picksCovers security + the fundamentals under itCost free A running list of videos I’ve saved to learn from — security, and the fundamentals…
The Purple Bridge — run the attack, catch the attack
Purple teamFormat attack → detect mapMaps to ATT&CK + Windows Event IDsCost free Red teams break in; blue teams catch them. Purple is the habit of…
Security Slang Decoder
ReferenceCovers ~70 termsLevel beginner-friendlyLast verified 27 Sep 2026No sign-up, no PDF wall The gap between how a thing is taught and what people call it at…
Windows Security Log Encyclopedia
A reference site documenting Windows event IDs, log sources, and their security implications. Built for defenders and incident responders who need to understand what a given…
Live Exploit Tracker Powered by the Crowd
A crowd-sourced tracker of vulnerabilities actively exploited in the wild, mapped to attacking IPs. CrowdSec aggregates signals from its distributed sensor network to surface threats with…
Shodan Cheat Sheet
ReferenceTool ShodanCovers web search, CLI, InternetDBLast verified 26 Sep 2026No sign-up, no PDF wall Shodan is a search engine for internet-connected devices, not web pages. It…
Awesome Android Security
Curated collection of Android security resources, tools, and materials aimed at penetration testers and bug hunters. Covers testing approaches, reverse engineering, tooling, and vulnerability research across…
Legendary OSINT
Curated list of open-source intelligence tools and resources aimed at fraud investigators, threat intelligence analysts, and compliance roles. Covers techniques for identity verification, anti-money laundering work,…
AI Cybersecurity Collaboration Playbook
CISA's guide to building effective partnerships between AI developers, security researchers, and government on AI safety and security. Covers threat modeling, vulnerability disclosure, and coordinated response.…
tcpdump Cheat Sheet
ReferenceTool tcpdumpCovers tcpdump 4.99.xLast verified Sep 2026No sign-up, no PDF wall tcpdump is the command-line packet capture tool that ships with, or is one install away…
journalctl Cheat Sheet: Read and Search Linux Logs
ReferenceTool journalctlLast verified Sep 2026No sign-up, no PDF wall journalctl reads the systemd journal — where most modern Linux systems keep their logs. This cheat sheet…
TryHackMe vs Hack The Box: Which Should You Use (and When)?
Comparison2 platformsLast verified Sep 2026Affiliate links: Hack The Box TryHackMe and Hack The Box are the two platforms almost everyone uses to practise hacking and defence…
SPL Cheat Sheet: Splunk Search Processing Language
ReferenceSplunk SPLLast verified Sep 2026Copy-paste queries SPL — Search Processing Language — is how you ask Splunk questions. A search reads left to right, piping results…
Which SIEM Should You Learn? A Free-to-Lab Comparison
Reference9 platformsLast verified Oct 2026Free-to-lab flagged A SIEM is the tool a SOC analyst lives in all day — it collects logs, runs detections, and raises…
Unbounded Consumption in LLMs
ReferenceOWASP LLM06:2026Last verified Sep 2026No sign-up, no PDF wall An LLM endpoint with no limits is a bill and an outage waiting to happen. Unbounded consumption…
LLM Misinformation & Hallucinations
ReferenceOWASP LLM07:2026Last verified Sep 2026No sign-up, no PDF wall A confident wrong answer is its own security problem. Misinformation (OWASP LLM07:2026 — up from #9 in…
System Prompt Leakage & Hidden Context Exposure in LLMs
ReferenceOWASP LLM08:2026Last verified Sep 2026No sign-up, no PDF wall Assume your system prompt is public. In the 2026 edition OWASP renamed this from “System Prompt Leakage”…
Improper Output Handling in LLMs
ReferenceOWASP LLM10:2026Last verified Sep 2026No sign-up, no PDF wall The dangerous moment often isn’t the model — it’s what your code does with the model’s answer.…
Sensitive Information Disclosure in LLMs
ReferenceOWASP LLM02:2026Last verified Sep 2026No sign-up, no PDF wall Language models can leak what they should never say — personal data, credentials, proprietary code, another user’s…
The Cyber Kill Chain Explained
ReferenceModel Lockheed MartinLast verified Sep 2026Stages 7No sign-up, no PDF wall The Cyber Kill Chain is a seven-stage model of how a targeted intrusion actually unfolds,…
Data & Model Poisoning Cheat Sheet: Backdoors & Defenses
ReferenceLast verified Sep 2026OWASP LLM05No sign-up, no PDF wall A model is a mirror of its data. Data & model poisoning (OWASP LLM05) is tampering with…
AI Supply Chain Security Cheat Sheet: Models, Data & Dependencies
ReferenceLast verified Sep 2026OWASP LLM04No sign-up, no PDF wall Almost no one trains a model from scratch — they pull a pretrained one, a dataset, some…
RAG Security Cheat Sheet: Threats to Retrieval & Embeddings
ReferenceLast verified Sep 2026OWASP LLM09No sign-up, no PDF wall RAG — retrieval-augmented generation — makes a model useful by feeding it your documents at query time.…
AI Agent Security Cheat Sheet: Excessive Agency, Tool Misuse & More
ReferenceLast verified Sep 2026OWASP LLM03No sign-up, no PDF wall A chatbot that gets jailbroken is a content problem. An agent — a model wired to tools…
LLM Jailbreak Cheat Sheet: Jailbreak Families & Defenses
ReferenceLast verified Sep 2026OWASP LLM01No sign-up, no PDF wall A jailbreak is any input that gets a model to do what its safety training says it…
Prompt Injection Prevention Cheat Sheet: Direct, Indirect & Defenses
ReferenceLast verified Sep 2026OWASP LLM01No sign-up, no PDF wall Prompt injection is the number-one risk in the OWASP LLM Top 10 and the root of most…