gotr00t - Security Guides

Penetration Testing & Red Team (13 Guides)

Web App Pentest Quick Reference Card

Complete quick reference guide for web application penetration testing - phases, checklists, payloads, and professional testing tips

Penetration Testing Roadmap

Comprehensive roadmap for aspiring penetration testers

Bug Bounty Hunting

Master the art of bug bounty hunting with methodologies and tools

Dorking Guide for Bug Bounty Hunters

Complete guide to Shodan, Google, and GitHub dorking techniques for reconnaissance, asset discovery, and finding exposed secrets in bug bounty programs

SMTP & Postfix Pentesting

Deep dive into SMTP server security and email system exploitation

Active Directory Pentesting

Comprehensive guide for penetration testing Active Directory environments

Red Team Operations

Professional red team engagements following MITRE ATT&CK methodology

DLL Side-Loading

A comprehensive guide to understanding and executing DLL Side-Loading attacks.

EDR & AV Bypass Guide

Advanced techniques to bypass and evade common Endpoint Detection and Response (EDR) and Antivirus solutions.

Linux Malware Evasion Techniques

Comprehensive guide covering Linux malware evasion techniques including process hiding, filesystem stealth, memory-only payloads, and anti-analysis methods.

BGP Pentesting Guide

Guide to attacking and securing the Border Gateway Protocol - route hijacking, prefix manipulation, session attacks, and defensive hardening

Telecommunications Network Pentesting

Penetration testing methodology for telecom networks - CPE and ONT exposure, default credentials, signaling, and provider infrastructure

Cron Backdoor Techniques

Persistence techniques abusing cron - scheduled task backdoors, hidden jobs, and detection and hardening guidance

Operating Systems (4 guides)

Windows Security & Hardening

Comprehensive guide for securing Windows environments

Linux Security & Administration

Essential guide for Linux system administrators and security professionals

Linux Process Control (prctl)

Complete guide to prctl() system call for process control, security hardening, and stealth operations

Windows Persistence

Advanced techniques for maintaining persistence on Windows systems

Programming & Development (4 guides)

Python for Security

Learn Python programming specifically for cybersecurity applications

PowerShell for Security

Master PowerShell for both offensive and defensive security operations

C++ for Security

Comprehensive guide to using C++ for cybersecurity applications, exploit development, and security research

Linux Syscalls & ptrace (C/C++)

Intermediate C++ tutorial on Linux syscalls and ptrace for post-exploitation research—raw syscall invocation, strace, process memory access, and real-world kernel security context