No description
Find a file
2024-10-05 14:48:29 +00:00
.gitbook/assets Translated ['binary-exploitation/libc-heap/README.md', 'binary-exploitat 2024-09-23 23:31:12 +00:00
.github Translated ['.github/pull_request_template.md'] to cn 2024-02-04 11:00:20 +00:00
a.i.-exploiting/bra.i.nsmasher-presentation Translated ['a.i.-exploiting/bra.i.nsmasher-presentation/README.md', 'a. 2024-02-04 16:26:04 +00:00
backdoors Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
binary-exploitation Translated ['binary-exploitation/rop-return-oriented-programing/ret2csu. 2024-09-25 16:50:23 +00:00
blockchain/blockchain-and-crypto-currencies Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
c2 Translated ['binary-exploitation/basic-stack-binary-exploitation-methodo 2024-07-18 22:08:20 +00:00
courses-and-certifications-reviews Translated to Chinese 2023-08-03 19:12:22 +00:00
crypto-and-stego Translated ['crypto-and-stego/certificates.md'] to cn 2024-10-05 14:45:09 +00:00
cryptography Translated ['binary-exploitation/basic-stack-binary-exploitation-methodo 2024-07-18 22:08:20 +00:00
ctf-write-ups Translated ['ctf-write-ups/challenge-0521.intigriti.io.md', 'ctf-write-u 2024-02-07 04:49:09 +00:00
exploiting Translated ['binary-exploitation/basic-stack-binary-exploitation-methodo 2024-07-18 22:08:20 +00:00
forensics/basic-forensic-methodology Translated ['README.md', 'crypto-and-stego/hash-length-extension-attack. 2024-09-04 13:29:40 +00:00
generic-methodologies-and-resources Translated ['generic-methodologies-and-resources/python/bypass-python-sa 2024-10-01 14:40:33 +00:00
hardware-physical-access Translated ['README.md', 'crypto-and-stego/hash-length-extension-attack. 2024-09-04 13:29:40 +00:00
linux-hardening Translated ['linux-hardening/privilege-escalation/linux-capabilities.md' 2024-10-05 14:48:29 +00:00
linux-unix/privilege-escalation Translated ['crypto-and-stego/cryptographic-algorithms/unpacking-binarie 2024-07-19 04:51:22 +00:00
macos-hardening Translated ['generic-methodologies-and-resources/python/bypass-python-sa 2024-10-01 14:40:33 +00:00
misc Translated ['macos-hardening/macos-security-and-privilege-escalation/mac 2024-07-19 05:18:31 +00:00
mobile-pentesting Translated ['mobile-pentesting/android-app-pentesting/android-applicatio 2024-10-05 13:16:50 +00:00
network-services-pentesting Translated ['network-services-pentesting/pentesting-web/code-review-tool 2024-09-27 11:27:34 +00:00
pentesting-web Translated ['generic-methodologies-and-resources/python/bypass-python-sa 2024-10-01 14:40:33 +00:00
physical-attacks Translated ['README.md', 'crypto-and-stego/hash-length-extension-attack. 2024-09-04 13:29:40 +00:00
radio-hacking Translated ['macos-hardening/macos-security-and-privilege-escalation/mac 2024-07-19 16:08:50 +00:00
reversing Translated ['README.md', 'crypto-and-stego/hash-length-extension-attack. 2024-09-04 13:29:40 +00:00
reversing-and-exploiting Translated ['binary-exploitation/basic-stack-binary-exploitation-methodo 2024-07-18 22:08:20 +00:00
stego Translated ['README.md', 'crypto-and-stego/hash-length-extension-attack. 2024-09-04 13:29:40 +00:00
todo Translated ['binary-exploitation/libc-heap/README.md', 'binary-exploitat 2024-09-23 23:31:12 +00:00
welcome Translated ['pentesting-web/browser-extension-pentesting-methodology/REA 2024-07-19 15:59:20 +00:00
windows-hardening Translated ['windows-hardening/windows-local-privilege-escalation/README 2024-10-05 13:20:30 +00:00
.gitignore Update .gitignore 2023-06-25 15:55:55 +02:00
1911-pentesting-fox.md Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
6881-udp-pentesting-bittorrent.md Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
android-forensics.md Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
burp-suite.md Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
emails-vulns.md Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
interesting-http.md Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
LICENSE.md Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
online-platforms-with-api.md Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
other-web-tricks.md Translated ['network-services-pentesting/512-pentesting-rexec.md', 'netw 2024-08-04 15:17:39 +00:00
pentesting-dns.md Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
post-exploitation.md Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
README.md Translated ['README.md', 'crypto-and-stego/hash-length-extension-attack. 2024-09-04 13:29:40 +00:00
stealing-sensitive-information-disclosure-from-a-web.md Translated ['1911-pentesting-fox.md', '6881-udp-pentesting-bittorrent.md 2024-07-18 18:17:52 +00:00
SUMMARY.md Translated ['generic-methodologies-and-resources/python/bypass-python-sa 2024-10-01 14:40:33 +00:00

HackTricks

Hacktricks logos & motion design by @ppiernacho.

{% hint style="success" %} 欢迎来到这个维基在这里你将找到我从CTF、现实生活应用、阅读研究和新闻中学到的每一个黑客技巧/技术/无论是什么。 {% endhint %}

要开始,请遵循此页面,在这里你将找到你在进行一个或多个机器的渗透测试时应该遵循的典型流程:

{% content-ref url="generic-methodologies-and-resources/pentesting-methodology.md" %} pentesting-methodology.md {% endcontent-ref %}

Corporate Sponsors

STM Cyber

STM Cyber 是一家优秀的网络安全公司,其口号是HACK THE UNHACKABLE。他们进行自己的研究并开发自己的黑客工具,以提供多种有价值的网络安全服务,如渗透测试、红队和培训。

你可以查看他们的博客https://blog.stmcyber.com

STM Cyber 还支持像 HackTricks 这样的网络安全开源项目 :)


RootedCON

RootedCON西班牙最重要的网络安全事件之一,也是欧洲最重要的活动之一。这个大会的使命是促进技术知识,是各个学科的技术和网络安全专业人士的热烈交流点。

{% embed url="https://www.rootedcon.com/" %}


Intigriti

Intigriti欧洲第一的道德黑客和漏洞赏金平台

漏洞赏金提示注册 Intigriti,这是一个由黑客为黑客创建的高级漏洞赏金平台!今天就加入我们,访问 https://go.intigriti.com/hacktricks,开始赚取高达**$100,000**的赏金!

{% embed url="https://go.intigriti.com/hacktricks" %}


Trickest


使用 Trickest 轻松构建和自动化工作流程,由世界上最先进的社区工具提供支持。

今天就获取访问权限:

{% embed url="https://trickest.com/?utm_campaign=hacktrics&utm_medium=banner&utm_source=hacktricks" %}


HACKENPROOF

加入 HackenProof Discord 服务器,与经验丰富的黑客和漏洞赏金猎人交流!

  • 黑客见解:参与深入探讨黑客的刺激和挑战的内容
  • 实时黑客新闻:通过实时新闻和见解,跟上快速变化的黑客世界
  • 最新公告:了解最新的漏洞赏金发布和重要平台更新

加入我们在 Discord,今天就开始与顶级黑客合作!


即时可用的漏洞评估和渗透测试设置。从任何地方运行完整的渗透测试使用20多个工具和功能从侦察到报告。我们不替代渗透测试人员 - 我们开发自定义工具、检测和利用模块以便让他们有更多时间深入挖掘、获取shell并享受乐趣。

{% embed url="https://pentest-tools.com/?utm_term=jul2024&utm_medium=link&utm_source=hacktricks&utm_campaign=spons" %}


WebSec

WebSec 是一家总部位于阿姆斯特丹的专业网络安全公司,帮助保护全球企业免受最新网络安全威胁,通过提供进攻性安全服务,采用现代方法。

WebSec 是一家一体化安全公司,这意味着他们提供所有服务;渗透测试、安全审计、意识培训、网络钓鱼活动、代码审查、漏洞开发、安全专家外包等。

WebSec 还有一个很酷的特点与行业平均水平不同WebSec 对他们的技能非常自信,甚至保证最佳质量结果,他们在网站上声明“如果我们无法攻破它,你就不需要支付!”。有关更多信息,请查看他们的网站博客

除了上述内容WebSec 还是HackTricks的坚定支持者

{% embed url="https://www.youtube.com/watch?v=Zq2JycGDCPM" %}

License & Disclaimer

查看它们在:

{% content-ref url="welcome/hacktricks-values-and-faq.md" %} hacktricks-values-and-faq.md {% endcontent-ref %}

Github Stats

HackTricks Github Stats

{% hint style="success" %} 学习和实践 AWS 黑客技术:HackTricks Training AWS Red Team Expert (ARTE)
学习和实践 GCP 黑客技术: HackTricks Training GCP Red Team Expert (GRTE)

支持 HackTricks
{% endhint %}