Repository files navigation

Hacktricks logos & motion design by@ppiernacho.

{% hint %}Welcome to the wiki where you will find each hacking trick/technique/whatever I have learnt from CTFs, real life apps, reading researches, and news.{% endhint %}

To get started follow this page where you will find thetypical flow thatyou should follow when pentesting one or moremachines:

{% content-ref url="generic-methodologies-and-resources/pentesting-methodology.md" %}pentesting-methodology.md{% endcontent-ref %}

STM Cyber is a great cybersecurity company whose slogan isHACK THE UNHACKABLE. They perform their own research and develop their own hacking tools tooffer several valuable cybersecurity services like pentesting, Red teams and training.

You can check theirblog inhttps://blog.stmcyber.com

STM Cyber also support cybersecurity open source projects like HackTricks :)

RootedCON is the most relevant cybersecurity event inSpain and one of the most important inEurope. Withthe mission of promoting technical knowledge, this congress is a boiling meeting point for technology and cybersecurity professionals in every discipline.

{% embed url="https://www.rootedcon.com/" %}

Intigriti is theEurope's #1 ethical hacking andbug bounty platform.

Bug bounty tip:sign up forIntigriti, a premiumbug bounty platform created by hackers, for hackers! Join us athttps://go.intigriti.com/hacktricks today, and start earning bounties up to$100,000!

{% embed url="https://go.intigriti.com/hacktricks" %}

UseTrickest to easily build andautomate workflows powered by the world'smost advanced community tools.

Get Access Today:

{% embed url="https://trickest.com/?utm_campaign=hacktrics&utm_medium=banner&utm_source=hacktricks" %}

JoinHackenProof Discord server to communicate with experienced hackers and bug bounty hunters!

• Hacking Insights: Engage with content that delves into the thrill and challenges of hacking
• Real-Time Hack News: Keep up-to-date with fast-paced hacking world through real-time news and insights
• Latest Announcements: Stay informed with the newest bug bounties launching and crucial platform updates

Join us onDiscord and start collaborating with top hackers today!

Instantly available setup for vulnerability assessment & penetration testing. Run a full pentest from anywhere with 20+ tools & features that go from recon to reporting. We don't replace pentesters - we develop custom tools, detection & exploitation modules to give them back some time to dig deeper, pop shells, and have fun.

{% embed url="https://pentest-tools.com/" %}

SerpApi offers fast and easy real-time APIs toaccess search engine results. They scrape search engines, handle proxies, solve captchas, and parse all rich structured data for you.

A subscription to one of SerpApi’s plans includes access to over 50 different APIs for scraping different search engines, including Google, Bing, Baidu, Yahoo, Yandex, and more.
Unlike other providers,SerpApi doesn’t just scrape organic results. SerpApi responses consistently include all ads, inline images and videos, knowledge graphs, and other elements and features present in the search results.

Current SerpApi customers includeApple, Shopify, and GrubHub.
For more information check out theirblog, or try an example in theirplayground.
You cancreate a free accounthere.

{% embed url="https://discord.gg/tryhardsecurity" %}

WebSec is a professional cybersecurity company based inAmsterdam which helpsprotecting businessesall over the world against the latest cybersecurity threats by providingoffensive-security services with amodern approach.

WebSec is anall-in-one security company which means they do it all; Pentesting,Security Audits, Awareness Trainings, Phishing Campagnes, Code Review, Exploit Development, Security Experts Outsourcing and much more.

Another cool thing about WebSec is that unlike the industry average WebSec isvery confident in their skills, to such an extent that theyguarantee the best quality results, it states on their website "If we can't hack it, You don't pay it!". For more info take a look at theirwebsite andblog!

In addition to the above WebSec is also acommitted supporter of HackTricks.

{% embed url="https://www.youtube.com/watch?v=Zq2JycGDCPM" %}

WhiteIntel is adark-web fueled search engine that offersfree functionalities to check if a company or its customers have beencompromised bystealer malwares.

Their primary goal of WhiteIntel is to combat account takeovers and ransomware attacks resulting from information-stealing malware.

You can check their website and try their engine forfree at:

{% embed url="https://whiteintel.io" %}

Check them in:

{% content-ref url="welcome/hacktricks-values-and-faq.md" %}hacktricks-values-and-faq.md{% endcontent-ref %}

{% hint %}Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking:HackTricks Training GCP Red Team Expert (GRTE)