> ## Documentation Index
> Fetch the complete documentation index at: https://mintlify.com/HackTricks-wiki/hacktricks/llms.txt
> Use this file to discover all available pages before exploring further.

# HackTricks

> The ultimate cybersecurity knowledge base — tricks, techniques, and methodologies from CTFs, real-world apps, and security research.

<CardGroup cols={2}>
  <Card title="Pentesting Methodology" icon="crosshairs" href="/generic-methodologies/pentesting-methodology">
    Start with a structured approach to penetration testing engagements
  </Card>

  <Card title="Web Vulnerabilities" icon="globe" href="/pentesting-web/web-vulnerabilities-methodology">
    XSS, SQLi, SSRF, SSTI, deserialization and more
  </Card>

  <Card title="Linux Privilege Escalation" icon="terminal" href="/linux-hardening/privilege-escalation">
    Techniques to escalate from low-privilege to root on Linux systems
  </Card>

  <Card title="Active Directory" icon="sitemap" href="/windows-hardening/active-directory-methodology">
    Complete methodology for attacking Windows AD environments
  </Card>
</CardGroup>

## What is HackTricks?

HackTricks is a comprehensive, community-driven cybersecurity knowledge base that documents hacking techniques, pentesting methodologies, and security research findings. Originally built from CTF experience and real-world penetration testing, it has grown into one of the most referenced resources in offensive security.

<Info>
  HackTricks covers everything from beginner-friendly Linux basics to advanced kernel exploitation, covering web, network, mobile, hardware, and cloud security domains.
</Info>

## Explore by Domain

<CardGroup cols={3}>
  <Card title="OS Security" icon="shield-halved" href="/linux-hardening/linux-basics">
    Linux, macOS, and Windows privilege escalation and hardening
  </Card>

  <Card title="Web & Network" icon="network-wired" href="/pentesting-web/web-vulnerabilities-methodology">
    Web application attacks and network service exploitation
  </Card>

  <Card title="Mobile" icon="mobile-screen" href="/mobile-pentesting/android-checklist">
    Android and iOS application pentesting
  </Card>

  <Card title="Binary Exploitation" icon="bug" href="/binary-exploitation/overview">
    Stack overflows, ROP chains, heap exploitation
  </Card>

  <Card title="Cryptography" icon="lock" href="/crypto/overview">
    Padding oracles, CBC bit flipping, hash attacks
  </Card>

  <Card title="AI Security" icon="robot" href="/ai-security/overview">
    LLM prompt injection and AI system attacks
  </Card>
</CardGroup>

## Key Topics

<AccordionGroup>
  <Accordion title="Pentesting Methodologies">
    Structured frameworks for conducting professional penetration tests — covering external recon, network enumeration, lateral movement, and reporting. Includes methodology for web apps, APIs, mobile apps, and network infrastructure.
  </Accordion>

  <Accordion title="Privilege Escalation">
    Comprehensive guides for escalating privileges on Linux (SUID, capabilities, sudo misconfigurations, kernel exploits), macOS (TCC, SIP bypasses, XPC vulnerabilities), and Windows (token abuse, ACL attacks, service misconfigs, Active Directory attacks).
  </Accordion>

  <Accordion title="Web Application Security">
    In-depth coverage of OWASP Top 10 and beyond — XSS, SQL Injection, SSRF, SSTI, XXE, CSRF, deserialization, file upload bypass, command injection, and advanced techniques like HTTP request smuggling and cache poisoning.
  </Accordion>

  <Accordion title="Network Services">
    Attack guides for 100+ network protocols — from common services (SSH, FTP, SMB, RDP) to industrial protocols (Modbus, BACnet, OPC-UA) and database services (MySQL, MSSQL, MongoDB, Redis, Elasticsearch).
  </Accordion>

  <Accordion title="Active Directory & Windows">
    Complete AD attack methodology including Kerberoasting, AS-REP Roasting, Pass-the-Hash, Pass-the-Ticket, DCSync, Golden/Silver Tickets, BloodHound enumeration, and certificate-based attacks (ESC1-ESC13).
  </Accordion>
</AccordionGroup>

## Run HackTricks Locally

Clone the repository and run with Docker to get a local copy with full search:

```bash theme={null}
git clone https://github.com/HackTricks-wiki/hacktricks
export LANG="master"  # or language code: es, fr, de, zh, ja...

docker run -d --rm --platform linux/amd64 \
  -p 3337:3000 \
  --name hacktricks \
  -v $(pwd)/hacktricks:/app \
  ghcr.io/hacktricks-wiki/hacktricks-cloud/translator-image \
  bash -c "cd /app && MDBOOK_PREPROCESSOR__HACKTRICKS__ENV=dev mdbook serve --hostname 0.0.0.0"
```

Your local copy will be available at `http://localhost:3337` after a short build time.

## Community & Contributions

HackTricks is open-source and community-driven. Contributions are welcome — new techniques, bug fixes, and translations are all appreciated.

<CardGroup cols={2}>
  <Card title="GitHub Repository" icon="github" href="https://github.com/HackTricks-wiki/hacktricks">
    Star the repo, submit PRs, or report issues
  </Card>

  <Card title="HackTricks Cloud" icon="cloud" href="https://cloud.hacktricks.wiki">
    Cloud and infrastructure pentesting (AWS, Azure, GCP, K8s)
  </Card>
</CardGroup>