Repository files navigation

Hacktricks logos & motion design by@ppieranacho.

# Download latest version of hacktricksgit clone https://github.com/HackTricks-wiki/hacktricks# Select the language you want to useexport LANG="master"# Leave master for english# "af" for Afrikaans# "de" for German# "el" for Greek# "es" for Spanish# "fr" for French# "hi" for HindiP# "it" for Italian# "ja" for Japanese# "ko" for Korean# "pl" for Polish# "pt" for Portuguese# "sr" for Serbian# "sw" for Swahili# "tr" for Turkish# "uk" for Ukrainian# "zh" for Chinese# Run the docker container indicating the path to the hacktricks folderdocker run -d --rm --platform linux/amd64 -p 3337:3000 --name hacktricks -v$(pwd)/hacktricks:/app ghcr.io/hacktricks-wiki/hacktricks-cloud/translator-image bash -c"mkdir -p ~/.ssh && ssh-keyscan -H github.com >> ~/.ssh/known_hosts && cd /app && git config --global --add safe.directory /app && git checkout$LANG && git pull && MDBOOK_PREPROCESSOR__HACKTRICKS__ENV=dev mdbook serve --hostname 0.0.0.0"

Your local copy of HackTricks will beavailable athttp://localhost:3337 after <5 minutes (it needs to build the book, be patient).

STM Cyber is a great cybersecurity company whose slogan isHACK THE UNHACKABLE. They perform their own research and develop their own hacking tools tooffer several valuable cybersecurity services like pentesting, Red teams and training.

You can check theirblog inhttps://blog.stmcyber.com

STM Cyber also support cybersecurity open source projects like HackTricks :)

RootedCON is the most relevant cybersecurity event inSpain and one of the most important inEurope. Withthe mission of promoting technical knowledge, this congress is a boiling meeting point for technology and cybersecurity professionals in every discipline.

{{#ref}}https://www.rootedcon.com/{{#endref}}

Intigriti is theEurope's #1 ethical hacking andbug bounty platform.

Bug bounty tip:sign up forIntigriti, a premiumbug bounty platform created by hackers, for hackers! Join us athttps://go.intigriti.com/hacktricks today, and start earning bounties up to$100,000!

{{#ref}}https://go.intigriti.com/hacktricks{{#endref}}

UseTrickest to easily build andautomate workflows powered by the world'smost advanced community tools.

Get Access Today:

{{#ref}}https://trickest.com/?utm_campaign=hacktrics&utm_medium=banner&utm_source=hacktricks{{#endref}}

JoinHackenProof Discord server to communicate with experienced hackers and bug bounty hunters!

• Hacking Insights: Engage with content that delves into the thrill and challenges of hacking
• Real-Time Hack News: Keep up-to-date with fast-paced hacking world through real-time news and insights
• Latest Announcements: Stay informed with the newest bug bounties launching and crucial platform updates

Join us onDiscord and start collaborating with top hackers today!

Get a hacker's perspective on your web apps, network, and cloud

Find and report critical, exploitable vulnerabilities with real business impact. Use our 20+ custom tools to map the attack surface, find security issues that let you escalate privileges, and use automated exploits to collect essential evidence, turning your hard work into persuasive reports.

{{#ref}}https://pentest-tools.com/?utm_term=jul2024&utm_medium=link&utm_source=hacktricks&utm_campaign=spons{{#endref}}

SerpApi offers fast and easy real-time APIs toaccess search engine results. They scrape search engines, handle proxies, solve captchas, and parse all rich structured data for you.

A subscription to one of SerpApi’s plans includes access to over 50 different APIs for scraping different search engines, including Google, Bing, Baidu, Yahoo, Yandex, and more.
Unlike other providers,SerpApi doesn’t just scrape organic results. SerpApi responses consistently include all ads, inline images and videos, knowledge graphs, and other elements and features present in the search results.

Current SerpApi customers includeApple, Shopify, and GrubHub.
For more information check out theirblog, or try an example in theirplayground.
You cancreate a free accounthere.

Learn the technologies and skills required to perform vulnerability research, penetration testing, and reverse engineering to protect mobile applications and devices.Master iOS and Android security through our on-demand courses andget certified:

{{#ref}}https://academy.8ksec.io/{{#endref}}

WebSec is a professional cybersecurity company based inAmsterdam which helpsprotecting businessesall over the world against the latest cybersecurity threats by providingoffensive-security services with amodern approach.

WebSec is an intenational security company with offices in Amsterdam and Wyoming. They offerall-in-one security services which means they do it all; Pentesting,Security Audits, Awareness Trainings, Phishing Campagnes, Code Review, Exploit Development, Security Experts Outsourcing and much more.

Another cool thing about WebSec is that unlike the industry average WebSec isvery confident in their skills, to such an extent that theyguarantee the best quality results, it states on their website "If we can't hack it, You don't pay it!". For more info take a look at theirwebsite andblog!

In addition to the above WebSec is also acommitted supporter of HackTricks.

{{#ref}}https://www.youtube.com/watch?v=Zq2JycGDCPM{{#endref}}

Venacus is a data breach (leak) search engine.
We provide random string search (like google) over all types of data leaks big and small --not only the big ones-- over data from multiple sources.
People search, AI search, organization search, API (OpenAPI) access, theHarvester integration, all features a pentester needs.
HackTricks continues to be a great learning platform for us all and we're proud to be sponsoring it!

{{#ref}}https://venacus.com/?utm_medium=link&utm_source=hacktricks&utm_campaign=spons{{#endref}}

Built for the field. Built around you.
Cyber Helmets develops and delivers effective cybersecurity training built and led byindustry experts. Their programs go beyond theory to equip teams with deepunderstanding and actionable skills, using custom environments that reflect real-worldthreats. For custom training inquiries, reach out to ushere.

What sets their training apart:

• Custom-built content and labs
• Backed by top-tier tools and platforms
• Designed and taught by practitioners

{{#ref}}https://cyberhelmets.com/courses/?ref=hacktricks{{#endref}}

Last Tower Solutions delivers specialized cybersecurity services forEducation andFinTechinstitutions, with a focus onpenetration testing, cloud security assessments, andcompliance readiness (SOC 2, PCI-DSS, NIST). Our team includesOSCP and CISSPcertified professionals, bringing deep technical expertise and industry-standard insight toevery engagement.

We go beyond automated scans withmanual, intelligence-driven testing tailored tohigh-stakes environments. From securing student records to protecting financial transactions,we help organizations defend what matters most.

“A quality defense requires knowing the offense, we provide security through understanding.”

Stay informed and up to date with the latest in cybersecurity by visiting ourblog.

{{#ref}}https://www.lasttowersolutions.com/{{#endref}}

K8Studio IDE empowers DevOps, DevSecOps, and developers to manage, monitor, and secure Kubernetes clusters efficiently. Leverage our AI-driven insights, advanced security framework, and intuitive CloudMaps GUI to visualize your clusters, understand their state, and act with confidence.

Moreover, K8Studio iscompatible with all major kubernetes distributions (AWS, GCP, Azure, DO, Rancher, K3s, Openshift and more).

{{#ref}}https://k8studio.io/{{#endref}}

Check them in:

{{#ref}}welcome/hacktricks-values-and-faq.md{{#endref}}

{{#include ./banners/hacktricks-training.md}}