Repository files navigation

Hacktricks logos & motion design by@ppiernacho.

{% hint %}Welcome to the wiki where you will find each hacking trick/technique/whatever I have learnt from CTFs, real life apps, reading researches, and news.{% endhint %}

To get started follow this page where you will find thetypical flow thatyou should follow when pentesting one or moremachines:

{% content-ref url="generic-methodologies-and-resources/pentesting-methodology.md" %}pentesting-methodology.md{% endcontent-ref %}

Your company could be here.

STM Cyber is a great cybersecurity company whose slogan isHACK THE UNHACKABLE. They perform their own research and develop their own hacking tools tooffer several valuable cybersecurity services like pentesting, Red teams and training.

You can check theirblog inhttps://blog.stmcyber.com

STM Cyber also support cybersecurity open source projects like HackTricks :)

RootedCON is the most relevant cybersecurity event inSpain and one of the most important inEurope. Withthe mission of promoting technical knowledge, this congress is a boiling meeting point for technology and cybersecurity professionals in every discipline.

{% embed url="https://www.rootedcon.com/" %}

Intigriti is theEurope's #1 ethical hacking andbug bounty platform.

Bug bounty tip:sign up forIntigriti, a premiumbug bounty platform created by hackers, for hackers! Join us athttps://go.intigriti.com/hacktricks today, and start earning bounties up to$100,000!

{% embed url="https://go.intigriti.com/hacktricks" %}

UseTrickest to easily build andautomate workflows powered by the world'smost advanced community tools.

Get Access Today:

{% embed url="https://trickest.com/?utm_campaign=hacktrics&utm_medium=banner&utm_source=hacktricks" %}

Stay a step ahead in the cybersecurity game.

Intruder makes vulnerability management easy. Keep track of your attack surface, see where your company is vulnerable, and prioritize issues that leave your systems most exposed so you can focus on what matters most.

Run thousands of checks with a single platform that covers your entire tech stack from internal infrastructure to web apps, APIs and cloud systems. Integrate seamlessly withAWS, GCP, Azure and streamline DevOps so your team can implement fixes faster.

Intruder never rests. Round-the-clock protection monitors your systems 24/7. Want to learn more? Visit their site and take it for a spin witha free trial.

{% embed url="https://www.intruder.io/?utm_campaign=hacktricks&utm_source=referral" %}

JoinHackenProof Discord server to communicate with experienced hackers and bug bounty hunters!

Hacking Insights
Engage with content that delves into the thrill and challenges of hacking

Real-Time Hack News
Keep up-to-date with fast-paced hacking world through real-time news and insights

Latest Announcements
Stay informed with the newest bug bounties launching and crucial platform updates

Join us onDiscord and start collaborating with top hackers today!

WebSec is a professional cybersecurity company based inAmsterdam which helpsprotecting businessesall over the world against the latest cybersecurity threats by providingoffensive-security services with amodern approach.

WebSec is anall-in-one security company which means they do it all; Pentesting,Security Audits, Awareness Trainings, Phishing Campagnes, Code Review, Exploit Development, Security Experts Outsourcing and much more.

Another cool thing about WebSec is that unlike the industry average WebSec isvery confident in their skills, to such an extent that theyguarantee the best quality results, it states on their website "If we can't hack it, You don't pay it!". For more info take a look at theirwebsite andblog!

In addition to the above WebSec is also acommitted supporter of HackTricks.

{% embed url="https://www.youtube.com/watch?v=Zq2JycGDCPM" %}

DragonJAR is a leading offensive cybersecurity companylocated in Colombia. DragonJAR offerscomprehensive offensive cybersecurity services, such aspentesting in various areas and practicallyany technology,Red Team attack simulations,physical security testing,stress testing, social engineering, sourcecode security review, and cybersecurity training. Additionally, they organize theDragonJAR Security Conference,an international cybersecurity congress that has been held for over a decade, becoming a showcase for the latest security research in Spanish and of great relevance in the region.

DragonJAR es una empresa líder en ciberseguridad ofensivaubicada en Colombia, DragonJAR ofreceservicios integrales de seguridad informática ofensiva, comopentesting en diversas áreas y prácticamentecualquier tecnología, simulaciones de ataqueRed Team, pruebas de seguridadfísica,pruebas de estrés, ingeniería social, revisión de seguridad encódigo fuente y capacitación en seguridad informática. Asimismo, organiza laDragonJAR Security Conference,un congreso internacional de seguridad informática que se ha realizado durante más de una década, convirtiéndose en el escaparate para las últimas investigaciones de seguridad en español y de gran relevancia en la región.

Copyright © Carlos Polop 2023. Except where otherwise specified (the external information copied into the book belongs to the original authors), the text onHACK TRICKSby Carlos Polop is licensed under theAttribution-NonCommercial 4.0 International (CC BY-NC 4.0).
If you want to use it with commercial purposes, contact me.

{% hint %}This book, 'HackTricks,' is intended for educational and informational purposes only. The content within this book is provided on an 'as is' basis, and the authors and publishers make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability, or availability of the information, products, services, or related graphics contained within this book. Any reliance you place on such information is therefore strictly at your own risk.

The authors and publishers shall in no event be liable for any loss or damage, including without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits arising out of, or in connection with, the use of this book.

Furthermore, the techniques and tips described in this book are provided for educational and informational purposes only, and should not be used for any illegal or malicious activities. The authors and publishers do not condone or support any illegal or unethical activities, and any use of the information contained within this book is at the user's own risk and discretion.

The user is solely responsible for any actions taken based on the information contained within this book, and should always seek professional advice and assistance when attempting to implement any of the techniques or tips described herein.

By using this book, the user agrees to release the authors and publishers from any and all liability and responsibility for any damages, losses, or harm that may result from the use of this book or any of the information contained within it.{% endhint %}