Home

Awesome

HackTricks

<figure><img src=".gitbook/assets/hacktricks.gif" alt=""><figcaption></figcaption></figure>

Hacktricks logos & motion design by @ppiernacho.

{% hint style="success" %} Welcome to the wiki where you will find each hacking trick/technique/whatever I have learnt from CTFs, real life apps, reading researches, and news. {% endhint %}

To get started follow this page where you will find the typical flow that you should follow when pentesting one or more machines:

{% content-ref url="generic-methodologies-and-resources/pentesting-methodology.md" %} pentesting-methodology.md {% endcontent-ref %}

Corporate Sponsors

STM Cyber

<figure><img src=".gitbook/assets/stm (1).png" alt=""><figcaption></figcaption></figure>

STM Cyber is a great cybersecurity company whose slogan is HACK THE UNHACKABLE. They perform their own research and develop their own hacking tools to offer several valuable cybersecurity services like pentesting, Red teams and training.

You can check their blog in https://blog.stmcyber.com

STM Cyber also support cybersecurity open source projects like HackTricks :)

RootedCON

<figure><img src=".gitbook/assets/image (45).png" alt=""><figcaption></figcaption></figure>

RootedCON is the most relevant cybersecurity event in Spain and one of the most important in Europe. With the mission of promoting technical knowledge, this congress is a boiling meeting point for technology and cybersecurity professionals in every discipline.

{% embed url="https://www.rootedcon.com/" %}

Intigriti

<figure><img src=".gitbook/assets/image (47).png" alt=""><figcaption></figcaption></figure>

Intigriti is the Europe's #1 ethical hacking and bug bounty platform.

Bug bounty tip: sign up for Intigriti, a premium bug bounty platform created by hackers, for hackers! Join us at https://go.intigriti.com/hacktricks today, and start earning bounties up to $100,000!

{% embed url="https://go.intigriti.com/hacktricks" %}

Trickest

<figure><img src=".gitbook/assets/image (48).png" alt=""><figcaption></figcaption></figure>


Use Trickest to easily build and automate workflows powered by the world's most advanced community tools.

Get Access Today:

{% embed url="https://trickest.com/?utm_campaign=hacktrics&utm_medium=banner&utm_source=hacktricks" %}

HACKENPROOF

<figure><img src=".gitbook/assets/image (3).png" alt=""><figcaption></figcaption></figure>

Join HackenProof Discord server to communicate with experienced hackers and bug bounty hunters!

Join us on Discord and start collaborating with top hackers today!

Pentest-Tools.com - The essential penetration testing toolkit

<figure><img src=".gitbook/assets/pentest-tools.svg" alt=""><figcaption></figcaption></figure>

Get a hacker's perspective on your web apps, network, and cloud

Find and report critical, exploitable vulnerabilities with real business impact. Use our 20+ custom tools to map the attack surface, find security issues that let you escalate privileges, and use automated exploits to collect essential evidence, turning your hard work into persuasive reports.

{% embed url="https://pentest-tools.com/?utm_term=jul2024&utm_medium=link&utm_source=hacktricks&utm_campaign=spons" %}

SerpApi

<figure><img src=".gitbook/assets/image (1254).png" alt=""><figcaption></figcaption></figure>

SerpApi offers fast and easy real-time APIs to access search engine results. They scrape search engines, handle proxies, solve captchas, and parse all rich structured data for you.

A subscription to one of SerpApi’s plans includes access to over 50 different APIs for scraping different search engines, including Google, Bing, Baidu, Yahoo, Yandex, and more.
Unlike other providers, SerpApi doesn’t just scrape organic results. SerpApi responses consistently include all ads, inline images and videos, knowledge graphs, and other elements and features present in the search results.

Current SerpApi customers include Apple, Shopify, and GrubHub.
For more information check out their blog, or try an example in their playground.
You can create a free account here.

8kSec Academy – In-Depth Mobile Security Courses

<figure><img src=".gitbook/assets/image (2).png" alt=""><figcaption></figcaption></figure>

Learn the technologies and skills required to perform vulnerability research, penetration testing, and reverse engineering to protect mobile applications and devices. Master iOS and Android security through our on-demand courses and get certified:

{% embed url="https://academy.8ksec.io/" %}

WebSec

<figure><img src=".gitbook/assets/websec (1).svg" alt=""><figcaption></figcaption></figure>

WebSec is a professional cybersecurity company based in Amsterdam which helps protecting businesses all over the world against the latest cybersecurity threats by providing offensive-security services with a modern approach.

WebSec is an all-in-one security company which means they do it all; Pentesting, Security Audits, Awareness Trainings, Phishing Campagnes, Code Review, Exploit Development, Security Experts Outsourcing and much more.

Another cool thing about WebSec is that unlike the industry average WebSec is very confident in their skills, to such an extent that they guarantee the best quality results, it states on their website "If we can't hack it, You don't pay it!". For more info take a look at their website and blog!

In addition to the above WebSec is also a committed supporter of HackTricks.

{% embed url="https://www.youtube.com/watch?v=Zq2JycGDCPM" %}

License & Disclaimer

Check them in:

{% content-ref url="welcome/hacktricks-values-and-faq.md" %} hacktricks-values-and-faq.md {% endcontent-ref %}

Github Stats

HackTricks Github Stats

{% hint style="success" %} Learn & practice AWS Hacking:<img src=".gitbook/assets/arte.png" alt="" data-size="line">HackTricks Training AWS Red Team Expert (ARTE)<img src=".gitbook/assets/arte.png" alt="" data-size="line">
Learn & practice GCP Hacking: <img src=".gitbook/assets/grte.png" alt="" data-size="line">HackTricks Training GCP Red Team Expert (GRTE)<img src=".gitbook/assets/grte.png" alt="" data-size="line">

<details> <summary>Support HackTricks</summary> </details> {% endhint %}