Home › The Stash
The Stash
Every link worth keeping, in one place. Steven picks them; Nova Cache sorts, tags and writes the note on each.
LLM Jailbreak Cheat Sheet: Jailbreak Families & Defenses
ReferenceLast verified Sep 2026OWASP LLM01No sign-up, no PDF wall A jailbreak is any input that gets a model to do what its safety training says it…
Prompt Injection Prevention Cheat Sheet: Direct, Indirect & Defenses
ReferenceLast verified Sep 2026OWASP LLM01No sign-up, no PDF wall Prompt injection is the number-one risk in the OWASP LLM Top 10 and the root of most…
OWASP LLM Top 10 Cheat Sheet (2026): All 10 Risks & Fixes
ReferenceEdition OWASP 2026Last verified Sep 2026No sign-up, no PDF wall The OWASP Top 10 for LLM Applications is the industry’s map of how AI systems get…
LLM Security Lab: The OWASP LLM Top 10 with LLMVault
IntermediateIdea buildTime ~60 minTarget LLMVault (local)Covers OWASP LLM Top 10Needs Python 3.10+Exam Security+ · PenTest+ 0 / 7 steps The goal Stand up a deliberately vulnerable…
Malware Analysis Sandboxes Cheat Sheet: Free Tools for Triage
ReferenceLast verified Sep 2026Scope Static & dynamicNo sign-up, no PDF wall A suspicious file, a weird link, a hash from an alert — these are the…
OSINT & Recon Tools Cheat Sheet: Passive Footprinting
ReferenceLast verified Sep 2026Scope Passive OSINTNo sign-up, no PDF wall Reconnaissance is step one of every engagement and every kill chain: map what a target exposes…
Common Ports Cheat Sheet: TCP & UDP Reference
ReferenceLast verified Sep 2026Scope TCP & UDPNo sign-up, no PDF wall The ports you keep meeting, in one place. Not the full IANA list of 65,535…
Linux Privilege Escalation Cheat Sheet
ReferenceLast verified 18 Sep 2026LinuxNo sign-up, no PDF wall You have a shell as a normal user and you want root. Linux privilege escalation is the…
Reverse Shell Cheat Sheet
ReferenceLast verified 18 Sep 2026Linux & WindowsNo sign-up, no PDF wall A reverse shell is a shell that connects back from a target to a listener…
Nmap Cheat Sheet
ReferenceLast verified 17 Sep 2026Covers Nmap 7.9xNo sign-up, no PDF wall Nmap is the tool you reach for first on any engagement, and most of it…
Lab 06 — Natas 6 to 10: LFI, decoding, and command injection
IntermediateIdea buildTime ~50 minTarget OverTheWire NatasLevels 6 → 10Needs a browserExam PenTest+ · Security+ 0 / 5 steps The goal Natas 0 to 5 taught you…
Lab 05 — Bandit 10 to 15: encodings and your first SSH key
BeginnerIdea buildTime 30–45 minTarget OverTheWire BanditLevels 10 → 15Needs Lab 03Exam Linux+ 0 / 5 steps The goal Starting from your Bandit level 10 login, work…
Lab 04 — Natas 0 to 5: your first web hacking
BeginnerIdea buildTime ~40 minTarget OverTheWire NatasLevels 0 → 5Needs a browserExam PenTest+ · Security+ 0 / 6 steps The goal Bandit was a shell on a…
Lab 03 — Bandit 5 to 10: finding things you cannot see
BeginnerIdea buildTime ~45 minTarget OverTheWire BanditLevels 5 → 10Needs Lab 02Exam Linux+ 0 / 5 steps The goal The first six levels were about opening files…
Lab 02 — Bandit 0 to 5: your first shell on someone else’s machine
BeginnerIdea buildTime ~45 minTarget OverTheWire BanditLevels 0 → 5Needs a terminalExam Linux+ 0 / 6 steps The goal By the end of this you will have…
Lab 01 — Your First Scan
BeginnerIdea buildTime ~25 minTool nmapTarget scanme.nmap.orgNeeds Lab 00Exam Network+ · PenTest+ · CySA+ 0 / 5 steps Where you are allowed to point this. The target…
Contact
StashGrid is run by one person. There is no support desk, but the inbox is read. Worth writing about: Something is wrong. A broken link, a…
About StashGrid
StashGrid is my personal library of security labs, tools and ideas, shared openly. It isn’t a course, a certification or an authority. It’s what I’m finding,…
Lab 00 — Set Up Your Lab
Start from a laptop with nothing installed and finish with a safe, self-contained Kali machine you can practise in. No prior setup assumed — every click…
UAC — Unix-like Artifacts Collector
UAC is a forensic collection framework that pulls artifacts from Unix-like systems in a structured, repeatable way. For incident response teams, this matters because manual artifact…
Wazuh — open source XDR/SIEM
Wazuh is an open source platform that combines endpoint detection and response with security information and event management in a single deployment. The appeal here is…
LetsDefend — SOC analyst simulations
Hands-on platform where you run through SOC workflows: alert triage, log analysis, incident response. Built around realistic scenarios rather than multiple choice. Good for people learning…
Kubernetes Goat — vulnerable K8s cluster
Kubernetes Goat is a deliberately vulnerable cluster built for security training. It gives you a sandboxed environment where you can practice attacking and defending Kubernetes setups…
DSViper — AV evasion / post-exploitation
DSViper is a tool that generates evasion-capable binaries designed to bypass antivirus detection. The creator acknowledges the default output gets flagged immediately and provides scripting to…
CVE Prioritizer: CVSS + EPSS + CISA KEV Vulnerability Triage
A triage tool that layers CVSS severity scores with EPSS exploit probability and CISA's known-exploited list to rank which vulnerabilities actually need your attention first. The…
OWASP AI Exchange
Central reference point for AI security threats, defenses, and control frameworks. Covers attack surface specific to machine learning systems—data poisoning, model extraction, prompt injection, adversarial inputs—alongside…
study-notes.org — visual cheat sheets
A visual reference site built around infographics covering Linux, networking, and security topics. Useful as a quick lookup during study or as a wall chart for…
Constructing Defense — detection engineering
A three-course detection engineering program with extensive hands-on labs and video content. Targets people building or entering the field who want structured grounding in how to…
kubectl quick reference
Quick reference for kubectl commands and flags, organized by task. Useful for anyone working with Kubernetes clusters—saves time hunting through docs when you need the exact…
SkyEye — AWS IAM enumeration
AWS IAM enumeration tool that maps permissions, roles, and trust relationships across an AWS account. Built for penetration testers and cloud security auditors who need to…