hacktricks README

The project's README from github.com/HackTricks-wiki/hacktricks. As one markdown file: README.md.

HackTricks

Hacktricks logos & motion design by @ppieranacho.

Run HackTricks Locally

# Download latest version of hacktricks
git clone https://github.com/HackTricks-wiki/hacktricks

# Select the language you want to use
export HT_LANG="master" # Leave master for English
# "af" for Afrikaans
# "de" for German
# "el" for Greek
# "es" for Spanish
# "fr" for French
# "hi" for HindiP
# "it" for Italian
# "ja" for Japanese
# "ko" for Korean
# "pl" for Polish
# "pt" for Portuguese
# "sr" for Serbian
# "sw" for Swahili
# "tr" for Turkish
# "uk" for Ukrainian
# "zh" for Chinese

# Run the docker container indicating the path to the hacktricks folder
docker run -d --rm --platform linux/amd64 -p 3337:3000 --name hacktricks -v $(pwd)/hacktricks:/app ghcr.io/hacktricks-wiki/hacktricks-cloud/translator-image bash -c "mkdir -p ~/.ssh && ssh-keyscan -H github.com >> ~/.ssh/known_hosts && cd /app && git config --global --add safe.directory /app && git checkout $HT_LANG && git pull && MDBOOK_PREPROCESSOR__HACKTRICKS__ENV=dev mdbook serve --hostname 0.0.0.0"

Your local copy of HackTricks will be available at http://localhost:3337 after <5 minutes (it needs to build the book, be patient).

Alternatively, if you have Docker Compose you can just run the following from the repo root:

docker compose up

This uses the bundled docker-compose.yml to serve the branch currently checked out on the host at http://localhost:3337 with live reload. To change languages when using Compose, check out the desired language branch before starting the service.

HackTricks Partners

HackTricks Friends

STM Cyber

STM Cyber provides penetration testing, security audits, exploit and research work, tools, and security-awareness services. Its site describes a team of penetration testers, programmers, and security researchers with more than a decade of experience.[1]

You can check their blog at https://blog.stmcyber.com.

STM Cyber also support cybersecurity open source projects like HackTricks :)

Intigriti

Intigriti is a crowdsourced security provider offering bug bounty and penetration-testing services through a global researcher community. Its platform combines continuous bug bounty coverage with on-demand PTaaS and managed vulnerability disclosure programs.[2]

Bug bounty tip: Join Intigriti through https://go.intigriti.com/hacktricks and explore its bug bounty programs.

Modern Security – AI & Application Security Training Platform

Modern Security

Modern Security offers self-paced, hands-on AI security training for security engineers, AppSec professionals, and developers. Its AI Security Certification covers LLM and agent fundamentals, RAG and vector databases, threat modeling, prompt-injection and MCP attacks, and defensive architecture.[3]

👉 More details on the AI Security course:
https://www.modernsecurity.io/courses/ai-security-certification

SerpApi

SerpApi provides APIs for Google and other search engines, returning structured SERP data with features such as location-aware results, Maps, Shopping, and Knowledge Graph results.[4]

For more information, check out their blog, try an example in their playground, or create a free account.

8kSec Academy – In-Depth Mobile & AI Security Courses

8kSec Academy offers self-paced mobile and AI-security courses. Its catalog covers mobile application auditing and reversing with tools such as Ghidra, Frida, and LLDB, along with AI/LLM attack and defense labs.[5][6]

Browse the 8kSec Academy course catalog.

NaxusAI – AI Powered Security Scanner

Naxus markets an offensive-AI platform that maps code and infrastructure, then uses static and dynamic agents to find and validate exploitable weaknesses with proof-of-concept evidence and remediation guidance.[7]

Code security tip: Explore Naxus for code- and infrastructure-focused vulnerability discovery.

WebSec

WebSec provides penetration testing, security subscriptions, staffing, and vulnerability-assessment services. Its site says it operates internationally and covers offensive security, defensive security, and governance, risk, and compliance work.[8]

For more information, visit their website or blog.

In addition to the above WebSec is also a committed supporter of HackTricks.

CyberHelmets

cyberhelmets logo

Built for the field. Built around you.
Cyber Helmets provides expert-led cybersecurity training with custom-built content and labs grounded in real infrastructures. Its programs are tailored to organizational needs and span assessment through implementation.[9] For custom training inquiries, reach out here.

What sets their training apart:

Last Tower Solutions

lasttower logo

Last Tower Solutions focuses on cybersecurity consulting for Education and FinTech, including cloud assessments, internal and external penetration tests, vulnerability assessments, and compliance support.[10]

Stay informed and up to date with the latest in cybersecurity by visiting our blog.

K8Studio - The Smarter GUI to Manage Kubernetes.

k8studio logo

K8Studio is a desktop Kubernetes IDE with CloudMaps visualization, multi-cluster navigation, RBAC, Helm, logs, YAML, and terminal views. The vendor says it connects through kubeconfig without installing agents and supports macOS, Windows, Linux, and air-gapped clusters.[11]

License & Disclaimer

See the HackTricks Values & FAQ entry in References below.

Github Stats

HackTricks Github Stats

References

{{#include banners/hacktricks-training.md}}

hacktricks (HackTricks-wiki/hacktricks)

Searching Database…

12.6K ·GitHub
Hacktricks
What is this?A free, open wiki of hacking tricks and techniques — everything the author has learnt from CTFs, real-world apps and security research, organized into a browsable reference with 12.5k+ GitHub stars.
Is this a tool I run, or something I read?It's a wiki you read rather than software you run against targets — a large tree of technique pages served as a website. The repo holds the content plus the build and server setup for running your own copy.
Can I run my own copy of it, or is it online-only?Read it online for free, or self-host: the README has a 'Run HackTricks Locally' section, and the repo ships Docker and Docker Compose files to serve your own copy.
What do I need installed to self-host it?Docker is all you need — the repo includes a Dockerfile and a docker-compose file. Reading it online needs nothing but a browser; no database or API keys are involved.
I'm a developer, not a hacker — is this even for me?It's written for people doing offensive security — CTF players and working pentesters who want a quick reference during engagements and competitions.
Does it matter what OS I'm on?Not really — it's a website that works in any browser, and a self-hosted copy runs anywhere Docker does.
Is the content under a standard open-source license?No standard license is declared in the repo metadata. The README points to its 'HackTricks Values & FAQ' page for licensing and disclaimer terms — check that before reusing content.
Why does the README list so many security companies?They're the project's sponsors and supporters — vendors like STM Cyber, Intigriti, SerpApi, 8kSec Academy and WebSec back HackTricks, and the README thanks them explicitly.
What is PEASS?It's in the repo's own topic list: PEASS is the author's Privilege Escalation Awesome Scripts SUite — enumeration scripts for spotting local privilege escalation paths on Linux and Windows, closely tied to the wiki's privilege escalation sections.
Is the wiki still actively maintained?Yes — 12.5k+ GitHub stars, and a CI pipeline that rebuilds the site, syncs translations and even auto-merges approved pull requests, so content updates land continuously.
What are similar projects?Claude-Red, PayloadsAllTheThings, hacker-roadmap, redamon, bug-bounty-hunting-prompts, Claude-BugHunter, Sn1per, awesome-web-security
Which topics is it in?pentesting-tools, exploitation, recon, privilege-escalation, appsec, bugbounty, ethical-hacking, pentest, web-security, wiki, ctf, vulnerability
Creator
HackTricks-wiki
Size
1 GB
Stars
12.6K
Updated
CommitOct 17Releasesearchindex-jaOct 01
Age
6y
Commits · 90 Days