Home › Reference

Reference

Free, practical cybersecurity cheat sheets — the commands, flags and checklists worth coming back to, each with a visible last-verified date and none of it behind an email form or a PDF wall.
New here? The Cyber Kill Chain maps every sheet below onto a stage of a real attack — a good place to start.
The offensive chain runs end to end: map a target with the OSINT & recon sheet, scan it with Nmap, make sense of what's open via common ports, catch a shell with the reverse shell sheet, then climb with Linux privilege escalation.
The AI-security set covers what everyone's asking about: the OWASP LLM Top 10, prompt injection, jailbreak techniques, AI agent security and RAG security — with a hands-on LLM security lab to practise on.
On the blue-team side, watch the wire with tcpdump, read Linux logs with journalctl, search them at scale with SPL, and triage a suspicious file safely with malware analysis sandboxes. Everything is written to be scanned in seconds and trusted — spot something out of date? Tell me.

Reference

The Hosts File Explained: What It Is, Where It Lives, and Its Pros and Cons

ReferenceTopic hosts file + localhostWindows · Linux · macOSLast verified Oct 2026 The hosts file is a plain text list of names and IP addresses that…

Reference

DNSlytics Search Homepage

Lookup service for IP addresses, domains, and hosting providers. Aggregates DNS records, whois data, and historical information. Useful for reconnaissance, incident response and threat hunting when…

Reference

AI Scams: How to Spot and Stop Voice Clones, Deepfake Calls and AI Phishing

For everyoneRead ~6 minLast verified 30 Sep 2026No sign-up, no PDF wall AI scams are old scams with better props. A cloned voice that sounds exactly…

Reference

Top 50 Useful Linux Commands for Beginners - PDF | 2026

A beginner-focused reference covering 50 essential Linux commands, organized by function: basics, file management, networking and more. Includes a downloadable PDF. Useful for anyone new to…

Reference

The Watchlist

WatchlistFormat curated video picksCovers security + the fundamentals under itCost free A running list of videos I’ve saved to learn from — security, and the fundamentals…

Reference

The Purple Bridge — run the attack, catch the attack

Purple teamFormat attack → detect mapMaps to ATT&CK + Windows Event IDsCost free Red teams break in; blue teams catch them. Purple is the habit of…

Reference

Security Slang Decoder

ReferenceCovers ~70 termsLevel beginner-friendlyLast verified 27 Sep 2026No sign-up, no PDF wall The gap between how a thing is taught and what people call it at…

Reference

Windows Security Log Encyclopedia

A reference site documenting Windows event IDs, log sources, and their security implications. Built for defenders and incident responders who need to understand what a given…

Reference

Live Exploit Tracker Powered by the Crowd

A crowd-sourced tracker of vulnerabilities actively exploited in the wild, mapped to attacking IPs. CrowdSec aggregates signals from its distributed sensor network to surface threats with…

Reference

Shodan Cheat Sheet

ReferenceTool ShodanCovers web search, CLI, InternetDBLast verified 26 Sep 2026No sign-up, no PDF wall Shodan is a search engine for internet-connected devices, not web pages. It…

Reference

Awesome Android Security

Curated collection of Android security resources, tools, and materials aimed at penetration testers and bug hunters. Covers testing approaches, reverse engineering, tooling, and vulnerability research across…

Reference

Legendary OSINT

Curated list of open-source intelligence tools and resources aimed at fraud investigators, threat intelligence analysts, and compliance roles. Covers techniques for identity verification, anti-money laundering work,…

Reference

AI Cybersecurity Collaboration Playbook

CISA's guide to building effective partnerships between AI developers, security researchers, and government on AI safety and security. Covers threat modeling, vulnerability disclosure, and coordinated response.…

Reference

tcpdump Cheat Sheet

ReferenceTool tcpdumpCovers tcpdump 4.99.xLast verified Sep 2026No sign-up, no PDF wall tcpdump is the command-line packet capture tool that ships with, or is one install away…

Reference

journalctl Cheat Sheet: Read and Search Linux Logs

ReferenceTool journalctlLast verified Sep 2026No sign-up, no PDF wall journalctl reads the systemd journal — where most modern Linux systems keep their logs. This cheat sheet…

Reference

TryHackMe vs Hack The Box: Which Should You Use (and When)?

Comparison2 platformsLast verified Sep 2026Affiliate links: Hack The Box TryHackMe and Hack The Box are the two platforms almost everyone uses to practise hacking and defence…

Reference

SPL Cheat Sheet: Splunk Search Processing Language

ReferenceSplunk SPLLast verified Sep 2026Copy-paste queries SPL — Search Processing Language — is how you ask Splunk questions. A search reads left to right, piping results…

Reference

Which SIEM Should You Learn? A Free-to-Lab Comparison

Reference9 platformsLast verified Oct 2026Free-to-lab flagged A SIEM is the tool a SOC analyst lives in all day — it collects logs, runs detections, and raises…

Reference

Unbounded Consumption in LLMs

ReferenceOWASP LLM06:2026Last verified Sep 2026No sign-up, no PDF wall An LLM endpoint with no limits is a bill and an outage waiting to happen. Unbounded consumption…

Reference

LLM Misinformation & Hallucinations

ReferenceOWASP LLM07:2026Last verified Sep 2026No sign-up, no PDF wall A confident wrong answer is its own security problem. Misinformation (OWASP LLM07:2026 — up from #9 in…

Reference

System Prompt Leakage & Hidden Context Exposure in LLMs

ReferenceOWASP LLM08:2026Last verified Sep 2026No sign-up, no PDF wall Assume your system prompt is public. In the 2026 edition OWASP renamed this from “System Prompt Leakage”…

Reference

Improper Output Handling in LLMs

ReferenceOWASP LLM10:2026Last verified Sep 2026No sign-up, no PDF wall The dangerous moment often isn’t the model — it’s what your code does with the model’s answer.…

Reference

Sensitive Information Disclosure in LLMs

ReferenceOWASP LLM02:2026Last verified Sep 2026No sign-up, no PDF wall Language models can leak what they should never say — personal data, credentials, proprietary code, another user’s…

Reference

The Cyber Kill Chain Explained

ReferenceModel Lockheed MartinLast verified Sep 2026Stages 7No sign-up, no PDF wall The Cyber Kill Chain is a seven-stage model of how a targeted intrusion actually unfolds,…

Reference

Data & Model Poisoning Cheat Sheet: Backdoors & Defenses

ReferenceLast verified Sep 2026OWASP LLM05No sign-up, no PDF wall A model is a mirror of its data. Data & model poisoning (OWASP LLM05) is tampering with…

Reference

AI Supply Chain Security Cheat Sheet: Models, Data & Dependencies

ReferenceLast verified Sep 2026OWASP LLM04No sign-up, no PDF wall Almost no one trains a model from scratch — they pull a pretrained one, a dataset, some…

Reference

RAG Security Cheat Sheet: Threats to Retrieval & Embeddings

ReferenceLast verified Sep 2026OWASP LLM09No sign-up, no PDF wall RAG — retrieval-augmented generation — makes a model useful by feeding it your documents at query time.…

Reference

AI Agent Security Cheat Sheet: Excessive Agency, Tool Misuse & More

ReferenceLast verified Sep 2026OWASP LLM03No sign-up, no PDF wall A chatbot that gets jailbroken is a content problem. An agent — a model wired to tools…

Reference

LLM Jailbreak Cheat Sheet: Jailbreak Families & Defenses

ReferenceLast verified Sep 2026OWASP LLM01No sign-up, no PDF wall A jailbreak is any input that gets a model to do what its safety training says it…

Reference

Prompt Injection Prevention Cheat Sheet: Direct, Indirect & Defenses

ReferenceLast verified Sep 2026OWASP LLM01No sign-up, no PDF wall Prompt injection is the number-one risk in the OWASP LLM Top 10 and the root of most…