srl
Pentesting Command Checklist
Copy-paste command sheet for a general pentest or an OSCP-style exam: one block per phase, checkboxes for the steps, exact commands for the tool versions shipped on current distributions. It is the companion to the methodology — the methodology explains why and when, this page is what you actually type. Every command is a template: read it, substitute the variables, and check the precondition before running it.
Version drift is the #1 cause of a “broken” cheat sheet. Recent tool releases changed flags in nxc, certipy, impacket, ligolo-ng, and hashcat. Before trusting a command: nxc --help, certipy <subcommand> -h, impacket-<tool> -h, hashcat --example-hashes. If your install predates mid-2026, several of the modules below (ADCS ESC17, nxc --ntds --use-vss, --remove-mic) will not exist.