This is my personal knowledge base for penetration testing: course notes, tool references, and write-ups from HTB, VulnHub, and other labs, built up over years of training. It's an Obsidian vault, and the source of truth lives in this repo.
Note on images: notes are authored in Obsidian and may still contain
![[wikilink]]style embeds in a few places. These render correctly in Obsidian but not in GitHub's markdown viewer. Standardimages have been converted and will display normally here.
Legal: everything here refers to authorized testing only - HTB/VulnHub labs, my own OSCP coursework, and licensed training. Nothing in this repo should be used against systems you don't have explicit permission to test.
| Folder | What's in it |
|---|---|
Boxes/ |
Full write-ups for retired HTB machines and VulnHub VMs, one file per box (recon → enumeration → exploitation → privesc) |
HTB/Cheatsheets/ |
Reference cheatsheets from HTB Academy modules, organized by topic |
Knowledge Base/ |
Deeper conceptual notes on protocols, AD concepts, Wi-Fi attacks, and Windows internals - things that apply across boxes rather than being tied to one |
Tool Box/ |
Quick command reference per tool (Nmap, Hydra, Chisel, etc.) |
BlackHat/ |
Notes from Black Hat training courses |
Exams/ |
Exam prep notes and post-exam retrospectives (OSCP, etc.) |
AI/ |
Notes on AI-driven pentesting tools |
Templates/ |
Standard templates for new box write-ups, tool pages, and Knowledge Base notes, so new notes stay consistent with old ones |
Images/ |
Screenshots referenced by the notes above, organized into one subfolder per box/topic |
Rule of thumb for where something goes: if it's a step you'd only take on one specific box, it belongs in that box's write-up. If it's true regardless of which box you're on, it belongs in Knowledge Base or Tool Box. Cheatsheets under HTB/Cheatsheets are HTB Academy module references specifically - if a topic already has a page in Knowledge Base or Tool Box, that page is the canonical one and the cheatsheet should link to it rather than duplicating it.
- Active
- Cozy Hosting
- Dante
- Devel
- Download
- Editorial
- Forest
- Intentions
- Keeper
- Office
- OnlyForYou
- PC
- Sandworm
- Soccer
- Topology
- Usage
- Visual
- Zipping
- Basic Pentesting 1
- Basic Pentesting 2
- Fall
- Golden Eye
- Aragog
- Lupin
- Nully Cybersecurity
- SickOS
- WinterMute
- Zico
Actively maintained as I continue training - new boxes, cheatsheets, and knowledge base pages get added regularly. See Templates/ before adding a new box write-up or tool page so the structure stays consistent.