HackTricks
Last updated
Last updated
Hacktricks logos & motion design by .
Welcome to the wiki where you will find each hacking trick/technique/whatever I have learnt from CTFs, real life apps, reading researches, and news.
To get started follow this page where you will find the typical flow that you should follow when pentesting one or more machines:
STM Cyber also support cybersecurity open source projects like HackTricks :)
Intigriti is the Europe's #1 ethical hacking and bug bounty platform.
Get Access Today:
Hacking Insights: Engage with content that delves into the thrill and challenges of hacking
Real-Time Hack News: Keep up-to-date with fast-paced hacking world through real-time news and insights
Latest Announcements: Stay informed with the newest bug bounties launching and crucial platform updates
Get a hacker's perspective on your web apps, network, and cloud
Find and report critical, exploitable vulnerabilities with real business impact. Use our 20+ custom tools to map the attack surface, find security issues that let you escalate privileges, and use automated exploits to collect essential evidence, turning your hard work into persuasive reports.
SerpApi offers fast and easy real-time APIs to access search engine results. They scrape search engines, handle proxies, solve captchas, and parse all rich structured data for you.
A subscription to one of SerpApi’s plans includes access to over 50 different APIs for scraping different search engines, including Google, Bing, Baidu, Yahoo, Yandex, and more. Unlike other providers, SerpApi doesn’t just scrape organic results. SerpApi responses consistently include all ads, inline images and videos, knowledge graphs, and other elements and features present in the search results.
WebSec is an all-in-one security company which means they do it all; Pentesting, Security Audits, Awareness Trainings, Phishing Campagnes, Code Review, Exploit Development, Security Experts Outsourcing and much more.
In addition to the above WebSec is also a committed supporter of HackTricks.
Check them in:
is a great cybersecurity company whose slogan is HACK THE UNHACKABLE. They perform their own research and develop their own hacking tools to offer several valuable cybersecurity services like pentesting, Red teams and training.
You can check their blog in
is the most relevant cybersecurity event in Spain and one of the most important in Europe. With the mission of promoting technical knowledge, this congress is a boiling meeting point for technology and cybersecurity professionals in every discipline.
Bug bounty tip: sign up for Intigriti, a premium bug bounty platform created by hackers, for hackers! Join us at today, and start earning bounties up to $100,000!
Use to easily build and automate workflows powered by the world's most advanced community tools.
Join server to communicate with experienced hackers and bug bounty hunters!
Join us on and start collaborating with top hackers today!
Current SerpApi customers include Apple, Shopify, and GrubHub. For more information check out their , or try an example in their . You can create a free account .
is a professional cybersecurity company based in Amsterdam which helps protecting businesses all over the world against the latest cybersecurity threats by providing offensive-security services with a modern approach.
Another cool thing about WebSec is that unlike the industry average WebSec is very confident in their skills, to such an extent that they guarantee the best quality results, it states on their website "If we can't hack it, You don't pay it!". For more info take a look at their and !
Learn & practice AWS Hacking: Learn & practice GCP Hacking:
Check the !
Join the 💬 or the or follow us on Twitter 🐦 .
Share hacking tricks by submitting PRs to the and github repos.
.svg?alt=media)
