Browse command syntax, code snippets, handouts, and activity guides published by the academy. Inspect contents directly or download reference notes.
Complete syntax reference for host discovery, port scanning, OS fingerprinting, and NSE script execution.
# Nmap Network Scanning & Enumeration Cheatsheet ## Host Discovery & Ping Sweeps ```bash # ICMP Echo ping sweep across a /24 subnet nmap -sn 192.168.1.0/24 # ARP sweep on local Ethernet segment (bypasses local OS firewall) nmap -PR -sn 192.168.1.0/24 # TCP SYN ping to ports 80 and 443 nmap -PS80,...
Operational CLI commands for VLAN setup, 802.1Q trunking, OSPF routing, and ACL packet filters.
# Cisco IOS Switch & Router Configuration Cheatsheet ## Basic Interface & VLAN Configuration ```cisco Switch# configure terminal Switch(config)# vlan 10 Switch(config-vlan)# name ENGINEERING Switch(config-vlan)# exit Switch(config)# interface gigabitEthernet 0/1 Switch(config-if)# switchport mode ...
Core display filter expressions for analyzing DNS queries, TCP handshakes, TLS SNI, and anomalous HTTP traffic.
# Wireshark Display Filters Reference ## TCP Handshakes & Connection Diagnostics ```wireshark # Display initial TCP connection attempts (SYN without ACK) tcp.flags.syn == 1 and tcp.flags.ack == 0 # Display TCP Resets (aborted connections) tcp.flags.reset == 1 # Display retransmitted segments (net...
Essential reconnaissance commands to inspect SUID binaries, sudo rights, cron jobs, and kernel architecture.
# Linux Privilege Escalation & Enumeration Cheatsheet ## User & Sudo Enumeration ```bash # Current user id, groups, and privileges id; whoami # Check allowable sudo binaries for current user sudo -l # Check active system users with login shells cat /etc/passwd | grep -E "(/bin/bash|/bin/sh)" ``` ...
Last Updated:
The vault is the reference shelf: command syntax, reusable configuration snippets, and lab handouts that you can read in the browser, copy to the clipboard, or download as Markdown or plain text. This briefing explains what each category contains, how the entries are kept accurate, and the rules that apply to using them.
The vault is the reference shelf. The learning paths and the practice labs are where you work; the vault is where you look things up while you are working. It holds command syntax references, reusable configuration snippets, lab handouts that expand on a specific exercise, and a set of extra activities for learners who want more practice on a topic they have already met in the curriculum.
Every entry is readable directly in the browser, and every entry can be copied to the clipboard or downloaded as Markdown or plain text. That matters more than it sounds: the point of a cheat sheet is that you can paste it into a scratch file, mark it up, and keep it. Nothing in the vault requires an account to read.
Resources are grouped into four categories, and you can switch between them from the filter row at the top of the page. The categories are deliberately practical rather than academic.
A reference that is out of date is worse than no reference, because it is trusted. Each entry is written against a specific software version or protocol revision, and that version is noted where it matters. When a command changes behaviour between releases, the entry says which releases it applies to rather than presenting a single behaviour as universal.
Entries are reviewed on a regular cycle and whenever a reader reports an error. The rule we follow is the same one we publish in the editorial policy: if a correction changes a command, a value, or a conclusion, the entry is materially revised and re-dated; a typo fix that does not change meaning is applied silently. Every vault entry shows its category and its last-updated date.
The vault documents techniques that are dual-use. A Nmap scan type reference is equally useful to an attacker enumerating a target and to a defender checking their own exposure; the difference is authorisation. Use these references against systems you own or have permission to test, and use them to understand how a defender would detect the activity you are practising.
The educational disclaimer sets out the scope in full, and the terms and conditions describe the limits of what you may do with the material. If you find a command that no longer works, or an entry that is missing a flag you rely on, please tell us through the contact page; vault corrections are among the fastest fixes we make.