An interactive checklist you tick off for each box you work on. Pick a target, work through the phases, and your progress is saved per machine, so you can see what is done and what is left. Commands insert your target IP and attacker values.
- Eight-phase attack lifecycle with checklist items per phase
- Service branches so the checklist adapts to what you find on a target
- Copyable commands with your target and attacker values interpolated
- Checklist progress tracked per machine
- Search across phases and commands
- Export the full playbook as Markdown for Obsidian or GitBook
- HTB and TryHackMe machine writeups and attack paths
- OSCP and CTF cheatsheets by topic
- Pentest methodology checklist by phase
- Reverse shell cheat sheet
- Pentest methodology notes
Want to read the phases without the app? See the pentest methodology guide.
- Phase 01: Host Discovery & Surface Mapping
- Phase 02: Protocol & Service Enumeration
- Phase 03: Vulnerability Identification & Threat Modeling
- Phase 04: Foothold Execution & Initial Access
- Phase 05: Shell Stabilization & Context Triage
- Phase 06: Internal System & Network Reconnaissance
- Phase 07: Privilege Escalation & Lateral Movement
- Phase 08: Post-Exploitation, Flag Vault & Artifact Collection