HackTricks

_Hacktricks logos & motion design by_ _@ppieranacho__._

Run HackTricks Locally

# Download latest version of hacktricks
git clone https://github.com/HackTricks-wiki/hacktricks

# Select the language you want to use
export HT_LANG="master" # Leave master for English
# "af" for Afrikaans
# "de" for German
# "el" for Greek
# "es" for Spanish
# "fr" for French
# "hi" for HindiP
# "it" for Italian
# "ja" for Japanese
# "ko" for Korean
# "pl" for Polish
# "pt" for Portuguese
# "sr" for Serbian
# "sw" for Swahili
# "tr" for Turkish
# "uk" for Ukrainian
# "zh" for Chinese

# Run the docker container indicating the path to the hacktricks folder
docker run -d --rm --platform linux/amd64 -p 3337:3000 --name hacktricks -v $(pwd)/hacktricks:/app ghcr.io/hacktricks-wiki/hacktricks-cloud/translator-image bash -c "mkdir -p ~/.ssh && ssh-keyscan -H github.com >> ~/.ssh/known_hosts && cd /app && git config --global --add safe.directory /app && git checkout $HT_LANG && git pull && MDBOOK_PREPROCESSOR__HACKTRICKS__ENV=dev mdbook serve --hostname 0.0.0.0"

Your local copy of HackTricks will be available at http://localhost:3337 after <5 minutes (it needs to build the book, be patient).

Alternatively, if you have Docker Compose you can just run the following from the repo root:

docker compose up

This uses the bundled docker-compose.yml to serve the branch currently checked out on the host at http://localhost:3337 with live reload. To change languages when using Compose, check out the desired language branch before starting the service.

HackTricks Partners

HackTricks Friends

STM Cyber

STM Cyber is a great cybersecurity company whose slogan is HACK THE UNHACKABLE. They perform their own research and develop their own hacking tools to offer several valuable cybersecurity services like pentesting, Red teams and training.

You can check their blog in https://blog.stmcyber.com

STM Cyber also support cybersecurity open source projects like HackTricks :)

Intigriti

Intigriti is the Europe's #1 ethical hacking and bug bounty platform.

Bug bounty tip: sign up for Intigriti, a premium bug bounty platform created by hackers, for hackers! Join us at https://go.intigriti.com/hacktricks today, and start earning bounties up to $100,000!

{{#ref}}
https://go.intigriti.com/hacktricks
{{#endref}}

Modern Security – AI & Application Security Training Platform

Modern Security delivers practical AI Security training with an engineering-first, hands-on lab approach. Our courses are built for security engineers, AppSec professionals, and developers who want to build, break, and secure real AI/LLM-powered applications.

The AI Security Certification focuses on real-world skills, including:

• Securing LLM and AI-powered applications
• Threat modeling for AI systems
• Embeddings, vector databases, and RAG security
• LLM attacks, abuse scenarios, and practical defenses
• Secure design patterns and deployment considerations

All courses are on-demand, lab-driven, and designed around real-world security tradeoffs, not just theory.

👉 More details on the AI Security course:
https://www.modernsecurity.io/courses/ai-security-certification

{{#ref}}
https://modernsecurity.io/
{{#endref}}

SerpApi

SerpApi offers fast and easy real-time APIs to access search engine results. They scrape search engines, handle proxies, solve captchas, and parse all rich structured data for you.

A subscription to one of SerpApi’s plans includes access to over 50 different APIs for scraping different search engines, including Google, Bing, Baidu, Yahoo, Yandex, and more.
Unlike other providers, SerpApi doesn’t just scrape organic results. SerpApi responses consistently include all ads, inline images and videos, knowledge graphs, and other elements and features present in the search results.

Current SerpApi customers include Apple, Shopify, and GrubHub.
For more information check out their blog, or try an example in their playground.
You can create a free account here.

8kSec Academy – In-Depth Mobile & AI Security Courses

8kSec Academy trains you in offensive mobile and AI security, taught by active researchers – the same team behind the CVE writeups and talks at Black Hat, HITB, and Zer0con. Courses are self-paced, built around labs on real targets, and backed by a hands-on certification.

The catalog runs two tracks:

Mobile Security – iOS and Android from the app layer down: reverse engineering with Ghidra and LLDB, ARM64 exploitation, kernel internals and modern mitigations (PAC, MTE, SELinux), jailbreak and rooting mechanics.

AI Security – two full courses spanning the field. Practical AI Security covers how LLMs, RAG pipelines, AI agents and MCP work, and how to attack and defend them. Advanced AI Security goes build-heavy at the frontier: red teaming AI systems at scale with Garak and PyRIT, exploiting MCP servers, planting and detecting model backdoors, and fine-tuning attacks and defenses on Apple Silicon.

Courses and certifications:

{{#ref}}
https://academy.8ksec.io/
{{#endref}}

NaxusAI – AI Powered Security Scanner

NaxusAI is an AI-powered security platform to find exploitable vulnerabilities before attackers do.

Code security tip: sign up for NaxusAI, a smart vulnerability monitoring platform built for developers and security teams! Join us today and start using AI for detecting, validating, and fixing real security risks before they reach production!

{{#ref}}
https://naxusai.com
{{#endref}}

WebSec

WebSec is a professional cybersecurity company based in Amsterdam which helps protecting businesses all over the world against the latest cybersecurity threats by providing offensive-security services with a modern approach.

WebSec is an intenational security company with offices in Amsterdam and Wyoming. They offer all-in-one security services which means they do it all; Pentesting, Security Audits, Awareness Trainings, Phishing Campagnes, Code Review, Exploit Development, Security Experts Outsourcing and much more.

Another cool thing about WebSec is that unlike the industry average WebSec is very confident in their skills, to such an extent that they guarantee the best quality results, it states on their website "If we can't hack it, You don't pay it!". For more info take a look at their website and blog!

In addition to the above WebSec is also a committed supporter of HackTricks.

{{#ref}}
https://www.youtube.com/watch?v=Zq2JycGDCPM
{{#endref}}

CyberHelmets

Built for the field. Built around you.
Cyber Helmets develops and delivers effective cybersecurity training built and led by
industry experts. Their programs go beyond theory to equip teams with deep
understanding and actionable skills, using custom environments that reflect real-world
threats. For custom training inquiries, reach out to us here.

What sets their training apart:

• Custom-built content and labs
• Backed by top-tier tools and platforms
• Designed and taught by practitioners

{{#ref}}
https://cyberhelmets.com/courses/?ref=hacktricks
{{#endref}}

Last Tower Solutions

Last Tower Solutions delivers specialized cybersecurity services for Education and FinTech
institutions, with a focus on penetration testing, cloud security assessments, and
compliance readiness (SOC 2, PCI-DSS, NIST). Our team includes **OSCP and CISSP
certified professionals**, bringing deep technical expertise and industry-standard insight to
every engagement.

We go beyond automated scans with manual, intelligence-driven testing tailored to
high-stakes environments. From securing student records to protecting financial transactions,
we help organizations defend what matters most.

_“A quality defense requires knowing the offense, we provide security through understanding.”_

Stay informed and up to date with the latest in cybersecurity by visiting our blog.

{{#ref}}
https://www.lasttowersolutions.com/
{{#endref}}

K8Studio - The Smarter GUI to Manage Kubernetes.

K8Studio IDE empowers DevOps, DevSecOps, and developers to manage, monitor, and secure Kubernetes clusters efficiently. Leverage our AI-driven insights, advanced security framework, and intuitive CloudMaps GUI to visualize your clusters, understand their state, and act with confidence.

Moreover, K8Studio is compatible with all major kubernetes distributions (AWS, GCP, Azure, DO, Rancher, K3s, Openshift and more).

{{#ref}}
https://k8studio.io/
{{#endref}}

License & Disclaimer

Check them in:

{{#ref}}
welcome/hacktricks-values-and-faq.md
{{#endref}}

Github Stats