This repository is a structured, beginner friendly cybersecurity cheat sheet built to support junior pentesters as they develop practical, real world skills.
It serves as a clear reference for tools, commands, and workflows commonly used during security assessments, labs, and capture the flag challenges.
The content reflects hands on learning through platforms like TryHackMe and other reputable cybersecurity resources. The goal is simple: provide one organized place where beginners can quickly understand what a tool does, when to use it, and how to use it effectively.
This repository is continuously updated as new tools, techniques, and notes are learned and tested.
This repository exists to help junior pentesters build confidence and practical understanding.
It aims to:
- Provide clear, practical cheat sheets for commonly used cybersecurity tools
- Explain how tools are used in real world scenarios, not just theory
- Serve as a quick reference during labs, CTFs, and training paths
- Help learners think through problems independently
- Support skill development without revealing platform challenge answers
No platform solutions or walkthrough answers are included. The material is designed to guide understanding so you can solve challenges yourself.
The repository follows a logical learning progression similar to structured cybersecurity training paths.
Content is organized by stage of the penetration testing process, such as:
- Reconnaissance and enumeration
- Exploitation basics
- Privilege escalation
- Post exploitation
- Networking fundamentals
- Supporting tools and utilities
Each tool file typically includes:
- What the tool is and why it matters
- Installation (when relevant)
- Common commands
- Realistic usage examples
- Tips, notes, and common mistakes
This structure helps you understand not just how a tool works, but when to use it during an assessment.
This resource is designed specifically for:
- Junior pentesters building practical skills
- Beginners starting a cybersecurity career
- Learners following structured training paths
- Students preparing for labs, CTFs, or technical interviews
- Anyone who wants a well organized reference for security tools
If you are learning by doing, this repository is built for you.
To get the most value:
- Follow the folders in order if you are new to penetration testing
- Read the tool cheat sheet before using it in a lab
- Use it as a reference when stuck, not as a shortcut
- Test every command in a safe practice environment
- Focus on understanding what is happening, not memorizing blindly
Consistent hands on practice is essential.
This repository is for educational purposes only.
All tools and techniques documented here must be used ethically and legally, only on systems you own or have explicit permission to test.
Unauthorized use of these tools may be illegal.
Contributions are welcome and encouraged.
You can help by:
- Improving explanations
- Adding new tools
- Fixing errors
- Enhancing structure or organization
- Sharing practical examples
Feel free to open an issue or submit a pull request.
Maintained by Azil Rababe, software engineer and master’s student in cybersecurity, created to help beginners navigate the early stages of their penetration testing journey.
Learn continuously. Practice responsibly. Hack ethically.