No description
Find a file
SirBroccoli 4b31b576f6
Merge pull request #930 from haxxm0nkey/master
Add new website for exploit search
2024-09-15 17:18:02 +02:00
.gitbook/assets GITBOOK-4394: No subject 2024-09-04 13:38:27 +00:00
.github Rename translate_ua to translate_ua.yml 2024-07-18 03:42:55 +02:00
backdoors a 2024-07-18 18:21:56 +02:00
binary-exploitation Merge pull request #917 from hoangprod/patch-1 2024-08-13 20:53:55 +02:00
blockchain/blockchain-and-crypto-currencies a 2024-07-18 18:21:56 +02:00
c2 gpt-4o-mini 2024-07-18 22:49:07 +02:00
crypto-and-stego update 2024-09-04 14:44:38 +02:00
cryptography gpt-4o-mini 2024-07-18 22:49:07 +02:00
exploiting gpt-4o-mini 2024-07-18 22:49:07 +02:00
forensics/basic-forensic-methodology update 2024-09-04 14:44:38 +02:00
generic-methodologies-and-resources Update search-exploits.md 2024-09-10 07:07:30 +02:00
hardware-physical-access update 2024-09-04 14:44:38 +02:00
linux-hardening update 2024-09-04 14:44:38 +02:00
linux-unix/privilege-escalation a 2024-07-19 01:15:55 +02:00
macos-hardening GITBOOK-4399: No subject 2024-09-13 09:39:20 +00:00
misc b 2024-07-19 01:16:27 +02:00
mobile-pentesting Merge pull request #926 from x86-69/master 2024-09-06 14:50:43 +02:00
network-services-pentesting GITBOOK-4395: No subject 2024-09-05 18:56:59 +00:00
pentesting-web GITBOOK-4398: No subject 2024-09-09 14:52:40 +00:00
physical-attacks update 2024-09-04 14:44:38 +02:00
radio-hacking b 2024-07-19 16:12:09 +02:00
reversing update 2024-09-04 14:44:38 +02:00
reversing-and-exploiting/linux-exploiting-basic-esp gpt-4o-mini 2024-07-18 22:49:07 +02:00
stego update 2024-09-04 14:44:38 +02:00
todo GITBOOK-4401: No subject 2024-09-14 20:43:14 +00:00
welcome a 2024-07-19 16:09:38 +02:00
windows-hardening Merge pull request #927 from Alexandre887/patch-1 2024-09-08 12:46:56 +02:00
.gitignore Update .gitignore 2023-06-25 15:55:55 +02:00
1911-pentesting-fox.md a 2024-07-18 18:21:56 +02:00
6881-udp-pentesting-bittorrent.md a 2024-07-18 18:21:56 +02:00
android-forensics.md a 2024-07-18 18:21:56 +02:00
burp-suite.md a 2024-07-18 18:21:56 +02:00
consumer a 2024-05-02 16:12:28 +02:00
consumer.c a 2024-05-02 16:12:28 +02:00
emails-vulns.md a 2024-07-18 18:21:56 +02:00
interesting-http.md a 2024-07-18 18:21:56 +02:00
LICENSE.md a 2024-07-18 18:21:56 +02:00
online-platforms-with-api.md a 2024-07-18 18:21:56 +02:00
other-web-tricks.md a 2024-08-04 17:08:37 +02:00
pentesting-dns.md a 2024-07-18 18:21:56 +02:00
post-exploitation.md a 2024-07-18 18:21:56 +02:00
README.md update 2024-09-04 14:44:38 +02:00
stealing-sensitive-information-disclosure-from-a-web.md a 2024-07-18 18:21:56 +02:00
SUMMARY.md GITBOOK-4401: No subject 2024-09-14 20:43:14 +00:00

HackTricks

Hacktricks logos & motion design by @ppiernacho.

{% hint style="success" %} Welcome to the wiki where you will find each hacking trick/technique/whatever I have learnt from CTFs, real life apps, reading researches, and news. {% endhint %}

To get started follow this page where you will find the typical flow that you should follow when pentesting one or more machines:

{% content-ref url="generic-methodologies-and-resources/pentesting-methodology.md" %} pentesting-methodology.md {% endcontent-ref %}

Corporate Sponsors

STM Cyber

STM Cyber is a great cybersecurity company whose slogan is HACK THE UNHACKABLE. They perform their own research and develop their own hacking tools to offer several valuable cybersecurity services like pentesting, Red teams and training.

You can check their blog in https://blog.stmcyber.com

STM Cyber also support cybersecurity open source projects like HackTricks :)


RootedCON

RootedCON is the most relevant cybersecurity event in Spain and one of the most important in Europe. With the mission of promoting technical knowledge, this congress is a boiling meeting point for technology and cybersecurity professionals in every discipline.

{% embed url="https://www.rootedcon.com/" %}


Intigriti

Intigriti is the Europe's #1 ethical hacking and bug bounty platform.

Bug bounty tip: sign up for Intigriti, a premium bug bounty platform created by hackers, for hackers! Join us at https://go.intigriti.com/hacktricks today, and start earning bounties up to $100,000!

{% embed url="https://go.intigriti.com/hacktricks" %}


Trickest


Use Trickest to easily build and automate workflows powered by the world's most advanced community tools.

Get Access Today:

{% embed url="https://trickest.com/?utm_campaign=hacktrics&utm_medium=banner&utm_source=hacktricks" %}


HACKENPROOF

Join HackenProof Discord server to communicate with experienced hackers and bug bounty hunters!

  • Hacking Insights: Engage with content that delves into the thrill and challenges of hacking
  • Real-Time Hack News: Keep up-to-date with fast-paced hacking world through real-time news and insights
  • Latest Announcements: Stay informed with the newest bug bounties launching and crucial platform updates

Join us on Discord and start collaborating with top hackers today!


Instantly available setup for vulnerability assessment & penetration testing. Run a full pentest from anywhere with 20+ tools & features that go from recon to reporting. We don't replace pentesters - we develop custom tools, detection & exploitation modules to give them back some time to dig deeper, pop shells, and have fun.

{% embed url="https://pentest-tools.com/?utm_term=jul2024&utm_medium=link&utm_source=hacktricks&utm_campaign=spons" %}


WebSec

WebSec is a professional cybersecurity company based in Amsterdam which helps protecting businesses all over the world against the latest cybersecurity threats by providing offensive-security services with a modern approach.

WebSec is an all-in-one security company which means they do it all; Pentesting, Security Audits, Awareness Trainings, Phishing Campagnes, Code Review, Exploit Development, Security Experts Outsourcing and much more.

Another cool thing about WebSec is that unlike the industry average WebSec is very confident in their skills, to such an extent that they guarantee the best quality results, it states on their website "If we can't hack it, You don't pay it!". For more info take a look at their website and blog!

In addition to the above WebSec is also a committed supporter of HackTricks.

{% embed url="https://www.youtube.com/watch?v=Zq2JycGDCPM" %}

License & Disclaimer

Check them in:

{% content-ref url="welcome/hacktricks-values-and-faq.md" %} hacktricks-values-and-faq.md {% endcontent-ref %}

Github Stats

HackTricks Github Stats

{% hint style="success" %} Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks
{% endhint %}