Temporary mirror. Link back to it at your own risk!
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
carlospolop 72e8e88eeb hacktricks twitch 2 days ago
.gitbook/assets GitBook: [#3669] No subject 4 days ago
.github Update FUNDING.yml 4 months ago
PyScript Pentesting Guide Update README.md 7 months ago
a.i.-exploiting/bra.i.nsmasher-presentation hacktricks twitch 2 days ago
backdoors hacktricks twitch 2 days ago
blockchain/blockchain-and-crypto-currencies hacktricks twitch 2 days ago
c2 GitBook: [#3580] No subject 2 months ago
courses-and-certifications-reviews hacktricks twitch 2 days ago
cryptography hacktricks twitch 2 days ago
ctf-write-ups hacktricks twitch 2 days ago
exploiting hacktricks twitch 2 days ago
forensics/basic-forensic-methodology hacktricks twitch 2 days ago
generic-methodologies-and-resources hacktricks twitch 2 days ago
linux-hardening hacktricks twitch 2 days ago
linux-unix/privilege-escalation hacktricks twitch 2 days ago
macos-hardening/macos-security-and-privilege-escalation hacktricks twitch 2 days ago
misc hacktricks twitch 2 days ago
mobile-pentesting hacktricks twitch 2 days ago
network-services-pentesting hacktricks twitch 2 days ago
pentesting hacktricks twitch 2 days ago
pentesting-web hacktricks twitch 2 days ago
physical-attacks hacktricks twitch 2 days ago
radio-hacking hacktricks twitch 2 days ago
reversing hacktricks twitch 2 days ago
stego hacktricks twitch 2 days ago
todo hacktricks twitch 2 days ago
welcome hacktricks twitch 2 days ago
windows-hardening hacktricks twitch 2 days ago
.gitignore a 7 months ago
1911-pentesting-fox.md hacktricks twitch 2 days ago
6881-udp-pentesting-bittorrent.md hacktricks twitch 2 days ago
LICENSE.md hacktricks twitch 2 days ago
Learning & Hacking.md fix mess 7 months ago
README.md hacktricks twitch 2 days ago
SUMMARY.md GitBook: [#3666] No subject 1 week ago
android-forensics.md hacktricks twitch 2 days ago
burp-suite.md hacktricks twitch 2 days ago
certificates.md hacktricks twitch 2 days ago
emails-vulns.md hacktricks twitch 2 days ago
external-recon-methodology.md hacktricks twitch 2 days ago
interesting-http.md hacktricks twitch 2 days ago
online-platforms-with-api.md hacktricks twitch 2 days ago
other-web-tricks.md hacktricks twitch 2 days ago
pentesting-dns.md hacktricks twitch 2 days ago
post-exploitation.md hacktricks twitch 2 days ago
stealing-sensitive-information-disclosure-from-a-web.md hacktricks twitch 2 days ago
tr-069.md hacktricks twitch 2 days ago

README.md

description
Welcome to the page where you will find each hacking trick/technique/whatever I have learnt from CTFs, real life apps, reading researches, and news.

HackTricks

Welcome to the page where you will find each hacking trick/technique/whatever I have learnt from CTFs, real life apps, reading researches, and news.

Here you can find a little introduction:

Pentesting Methodology

Here you will find the typical flow that you should follow when pentesting one or more machines.

Click on the title to start!

Corporate Sponsors

STM Cyber

STM Cyber is a great cybersecurity company whose slogan is HACK THE UNHACKABLE. They perform their own research and develop their own hacking tools to offer several valuable cybersecurity services like pentesting, Red teams and training.

You can check their blog in https://blog.stmcyber.com

STM Cyber also support cybersecurity open source projects like HackTricks :)

SYN CUBES

Security Skills as a Service platform bridges the current skill set gap by combining global offensive security talent with smart automation, providing real-time data you need to make informed decisions.

{% embed url="https://www.syncubes.com/" %}

RootedCON

RootedCON is the most relevant cybersecurity event in Spain and one of the most important in Europe. With the mission of promoting technical knowledge, this congress is a boiling meeting point for technology and cybersecurity professionals in every discipline.

{% embed url="https://www.rootedcon.com/" %}

Intigriti

Intigriti is the Europe's #1 ethical hacking and bug bounty platform.

Bug bounty tip: sign up for Intigriti, a premium bug bounty platform created by hackers, for hackers! Join us at https://go.intigriti.com/hacktricks today, and start earning bounties up to $100,000!

{% embed url="https://go.intigriti.com/hacktricks" %}

Trickest


Use Trickest to easily build and automate workflows powered by the world's most advanced community tools.

Get Access Today:

{% embed url="https://trickest.com/?utm_campaign=hacktrics&utm_medium=banner&utm_source=hacktricks" %}

HACKENPROOF

HackenProof is home to all crypto bug bounties.

Get rewarded without delays
HackenProof bounties launch only when their customers deposit the reward budget. You'll get the reward after the bug is verified.

Get experience in web3 pentesting
Blockchain protocols and smart contracts are the new Internet! Master web3 security at its rising days.

Become the web3 hacker legend
Gain reputation points with each verified bug and conquer the top of the weekly leaderboard.

Sign up on HackenProof to start earning from your hacks!

{% embed url="https://hackenproof.com/register?referral_code=i_E6M25i_Um9gB56o-XsIA" %}

WebSec

WebSec is a professional cybersecurity company based in Amsterdam which helps protecting businesses all over the world against the latest cybersecurity threats by providing offensive-security services with a modern approach.

WebSec is an all-in-one security company which means they do it all; Pentesting, Security Audits, Awareness Trainings, Phishing Campagnes, Code Review, Exploit Development, Security Experts Outsourcing and much more.

Another cool thing about WebSec is that unlike the industry average WebSec is very confident in their skills, to such an extent that they guarantee the best quality results, it states on their website "If we can't hack it, You don't pay it!". For more info take a look at their website and blog!

In addition to the above WebSec is also a committed supporter of HackTricks.

{% embed url="https://www.youtube.com/watch?v=Zq2JycGDCPM" %}

INE

INE is a great platform to start learning or improve your IT knowledge through their huge range of courses. I personally like and have completed many from the cybersecurity section. INE also provides with the official courses to prepare the certifications from eLearnSecurity.

INE also support cybersecurity open source projects like HackTricks :)

Courses and Certifications reviews

You can find my reviews of the certifications eMAPT and eWPTXv2 (and their respective preparation courses) on the following page:

{% content-ref url="courses-and-certifications-reviews/ine-courses-and-elearnsecurity-certifications-reviews.md" %} ine-courses-and-elearnsecurity-certifications-reviews.md {% endcontent-ref %}

License

Copyright © Carlos Polop 2022. Except where otherwise specified (the external information copied into the book belongs to the original authors), the text on HACK TRICKS by Carlos Polop is licensed under the Attribution-NonCommercial 4.0 International (CC BY-NC 4.0).
If you want to use it with commercial purposes, contact me.

🎙 HackTricks LIVE Twitch Wednesdays 5.30pm (UTC) 🎙 - 🎥 Youtube 🎥