{"slug": "cheat-sheets", "title": "Cheat Sheets", "description": "Quick-reference cheat sheets for offensive and defensive security work.", "sections": [{"title": "API", "groups": [{"title": "", "tools": [{"name": "API Security Checklist", "url": "https://github.com/shieldfy/API-Security-Checklist", "description": "Checklist of the most important security countermeasures when designing, testing, and releasing your API.", "repo": "shieldfy/API-Security-Checklist", "_anchor": "api-security-checklist", "_section": "API", "_group": "", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/api-security-checklist/"}, {"name": "GraphQL OWASP", "url": "https://cheatsheetseries.owasp.org/cheatsheets/GraphQL_Cheat_Sheet.html", "description": "OWASP GraphQL cheat sheet.", "_anchor": "graphql-owasp", "_section": "API", "_group": "", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/graphql-owasp/"}, {"name": "Microservices OWASP", "url": "https://cheatsheetseries.owasp.org/cheatsheets/Microservices_security.html", "description": "Microservices Security.", "_anchor": "microservices-owasp", "_section": "API", "_group": "", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/microservices-owasp/"}, {"name": "OWASP API Top 10", "url": "https://apisecurity.io/encyclopedia/content/owasp-api-security-top-10-cheat-sheet-a4.pdf", "description": "OWASP API security Top 10.", "_anchor": "owasp-api-top-10", "_section": "API", "_group": "", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/owasp-api-top-10/"}, {"name": "REST Security OWASP", "url": "https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html", "description": "OWASP REST security cheat sheet.", "_anchor": "rest-security-owasp", "_section": "API", "_group": "", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/rest-security-owasp/"}, {"name": "REST Assessment OWASP", "url": "https://cheatsheetseries.owasp.org/cheatsheets/REST_Assessment_Cheat_Sheet.html", "description": "OWASP REST assessment cheat sheet.", "_anchor": "rest-assessment-owasp", "_section": "API", "_group": "", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/rest-assessment-owasp/"}, {"name": "Web API Pentesting", "url": "https://book.hacktricks.xyz/pentesting/pentesting-web/web-api-pentesting", "description": "Web API pentesting GitBook.", "_anchor": "web-api-pentesting", "_section": "API", "_group": "", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/web-api-pentesting/"}]}, {"title": "Defensive Security", "tools": [{"name": "AD Killchain Attack & Defense", "url": "https://github.com/infosecn1nja/AD-Attack-Defense", "description": "Attack and defend active directory using modern post exploitation adversary tradecraft activity.", "repo": "infosecn1nja/AD-Attack-Defense", "_anchor": "ad-killchain-attack-defense", "_section": "API", "_group": "Defensive Security", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/ad-killchain-attack-defense/"}]}, {"title": "Offensive Security", "tools": [{"name": "Active Directory", "url": "https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet", "description": "A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.", "repo": "S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet", "_anchor": "active-directory", "_section": "API", "_group": "Offensive Security", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/active-directory/"}, {"name": "Binary Exploitation", "url": "https://ir0nstone.gitbook.io/notes/", "description": "Notes on binary exploitation.", "_anchor": "binary-exploitation", "_section": "API", "_group": "Offensive Security", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/binary-exploitation/"}, {"name": "OWASP Cheat Sheet Series", "url": "https://github.com/OWASP/CheatSheetSeries", "description": "Collection of high value information on specific application security topics.", "repo": "OWASP/CheatSheetSeries", "_anchor": "owasp-cheat-sheet-series", "_section": "API", "_group": "Offensive Security", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/owasp-cheat-sheet-series/"}, {"name": "Red Teaming Experiments", "url": "https://www.ired.team/", "description": "Various red teaming cheatsheets.", "_anchor": "red-teaming-experiments", "_section": "API", "_group": "Offensive Security", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/red-teaming-experiments/"}, {"name": "The Hacker Recipes", "url": "https://github.com/ShutdownRepo/The-Hacker-Recipes", "description": "Project is aimed at providing technical guides on various hacking topics.", "repo": "ShutdownRepo/The-Hacker-Recipes", "_anchor": "the-hacker-recipes", "_section": "API", "_group": "Offensive Security", "_tabs": ["api"], "_tab_titles": ["API"], "_page": "/tools/the-hacker-recipes/"}]}]}], "tools": [{"name": "Active Directory", "url": "https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet", "description": "A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.", "category": "cheat-sheets", "section": "API", "group": "Offensive Security", "repo": "S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet", "links": [], "tags": [], "path": "/tools/active-directory/", "listing": "/cheat-sheets/#active-directory"}, {"name": "AD Killchain Attack & Defense", "url": "https://github.com/infosecn1nja/AD-Attack-Defense", "description": "Attack and defend active directory using modern post exploitation adversary tradecraft activity.", "category": "cheat-sheets", "section": "API", "group": "Defensive Security", "repo": "infosecn1nja/AD-Attack-Defense", "links": [], "tags": [], "path": "/tools/ad-killchain-attack-defense/", "listing": "/cheat-sheets/#ad-killchain-attack-defense"}, {"name": "API Security Checklist", "url": "https://github.com/shieldfy/API-Security-Checklist", "description": "Checklist of the most important security countermeasures when designing, testing, and releasing your API.", "category": "cheat-sheets", "section": "API", "group": "", "repo": "shieldfy/API-Security-Checklist", "links": [], "tags": [], "path": "/tools/api-security-checklist/", "listing": "/cheat-sheets/#api-security-checklist"}, {"name": "Binary Exploitation", "url": "https://ir0nstone.gitbook.io/notes/", "description": "Notes on binary exploitation.", "category": "cheat-sheets", "section": "API", "group": "Offensive Security", "repo": null, "links": [], "tags": [], "path": "/tools/binary-exploitation/", "listing": "/cheat-sheets/#binary-exploitation"}, {"name": "GraphQL OWASP", "url": "https://cheatsheetseries.owasp.org/cheatsheets/GraphQL_Cheat_Sheet.html", "description": "OWASP GraphQL cheat sheet.", "category": "cheat-sheets", "section": "API", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/graphql-owasp/", "listing": "/cheat-sheets/#graphql-owasp"}, {"name": "Microservices OWASP", "url": "https://cheatsheetseries.owasp.org/cheatsheets/Microservices_security.html", "description": "Microservices Security.", "category": "cheat-sheets", "section": "API", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/microservices-owasp/", "listing": "/cheat-sheets/#microservices-owasp"}, {"name": "OWASP API Top 10", "url": "https://apisecurity.io/encyclopedia/content/owasp-api-security-top-10-cheat-sheet-a4.pdf", "description": "OWASP API security Top 10.", "category": "cheat-sheets", "section": "API", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/owasp-api-top-10/", "listing": "/cheat-sheets/#owasp-api-top-10"}, {"name": "OWASP Cheat Sheet Series", "url": "https://github.com/OWASP/CheatSheetSeries", "description": "Collection of high value information on specific application security topics.", "category": "cheat-sheets", "section": "API", "group": "Offensive Security", "repo": "OWASP/CheatSheetSeries", "links": [], "tags": [], "path": "/tools/owasp-cheat-sheet-series/", "listing": "/cheat-sheets/#owasp-cheat-sheet-series"}, {"name": "Red Teaming Experiments", "url": "https://www.ired.team/", "description": "Various red teaming cheatsheets.", "category": "cheat-sheets", "section": "API", "group": "Offensive Security", "repo": null, "links": [], "tags": [], "path": "/tools/red-teaming-experiments/", "listing": "/cheat-sheets/#red-teaming-experiments"}, {"name": "REST Assessment OWASP", "url": "https://cheatsheetseries.owasp.org/cheatsheets/REST_Assessment_Cheat_Sheet.html", "description": "OWASP REST assessment cheat sheet.", "category": "cheat-sheets", "section": "API", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/rest-assessment-owasp/", "listing": "/cheat-sheets/#rest-assessment-owasp"}, {"name": "REST Security OWASP", "url": "https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html", "description": "OWASP REST security cheat sheet.", "category": "cheat-sheets", "section": "API", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/rest-security-owasp/", "listing": "/cheat-sheets/#rest-security-owasp"}, {"name": "The Hacker Recipes", "url": "https://github.com/ShutdownRepo/The-Hacker-Recipes", "description": "Project is aimed at providing technical guides on various hacking topics.", "category": "cheat-sheets", "section": "API", "group": "Offensive Security", "repo": "ShutdownRepo/The-Hacker-Recipes", "links": [], "tags": [], "path": "/tools/the-hacker-recipes/", "listing": "/cheat-sheets/#the-hacker-recipes"}, {"name": "Web API Pentesting", "url": "https://book.hacktricks.xyz/pentesting/pentesting-web/web-api-pentesting", "description": "Web API pentesting GitBook.", "category": "cheat-sheets", "section": "API", "group": "", "repo": null, "links": [], "tags": [], "path": "/tools/web-api-pentesting/", "listing": "/cheat-sheets/#web-api-pentesting"}]}