Linux & Windows pentest cheat sheet

Windows :

Check services running on server

netstat -ant

Let’s check the log

"cd /" and then "dir /s /b *.log"

Linux :

creating wordlist with word in various forms

cat /usr/share/wordlists/rockyou.txt | grep (your_word) > pass.txt 

search for user creds search for pass on this folder

cd ~ 
cat * | grep pass                                               

list all dirs

ls -la                                                             

check conditions

sudo -l                                                           

breaking out of the shell jail

python -c 'import pty;pty.spawn("/bin/bash")'
echo os.system('/bin/bash')  
/bin/sh -i

show us crontabs

cat /etc/crontab                                                 

Random :

wpscan for find some users and vulnerabilities in plugin-ins

wpscan --url http://hostname.com/ -e ap,t,u

PS. I am contributing and letting this page grow so dont judge this book by its cover :)