Notes & Cheatsheets

Quick notes on using cron for persistence, common locations, and what to look for during enumeration.

Quick notes on enumerating Linux users, groups, shells, and privileged accounts.

Quick notes on common Linux persistence mechanisms and where to look for them.

Quick notes on enumerating Linux processes and identifying unusual or privileged execution.

Quick notes on Linux shell startup files and how they can be abused for persistence.

Quick notes on SSH keys, authorized_keys, and detecting persistent SSH access.

Quick notes on SUID and SGID permissions, enumeration, and why unusual privileged binaries matter.

Quick notes on systemd services and timers as Linux persistence mechanisms.