HackTricks

Hacktricks logos & motion design by @ppieranacho.

Run HackTricks Locally

# Download latest version of hacktricks
git clone https://github.com/HackTricks-wiki/hacktricks

# Select the language you want to use
export HT_LANG="master" # Leave master for English
# "af" for Afrikaans
# "de" for German
# "el" for Greek
# "es" for Spanish
# "fr" for French
# "hi" for HindiP
# "it" for Italian
# "ja" for Japanese
# "ko" for Korean
# "pl" for Polish
# "pt" for Portuguese
# "sr" for Serbian
# "sw" for Swahili
# "tr" for Turkish
# "uk" for Ukrainian
# "zh" for Chinese

# Run the docker container indicating the path to the hacktricks folder
docker run -d --rm --platform linux/amd64 -p 3337:3000 --name hacktricks -v $(pwd)/hacktricks:/app ghcr.io/hacktricks-wiki/hacktricks-cloud/translator-image bash -c "mkdir -p ~/.ssh && ssh-keyscan -H github.com >> ~/.ssh/known_hosts && cd /app && git config --global --add safe.directory /app && git checkout $HT_LANG && git pull && MDBOOK_PREPROCESSOR__HACKTRICKS__ENV=dev mdbook serve --hostname 0.0.0.0"

Your local copy of HackTricks will be available at http://localhost:3337 after <5 minutes (it needs to build the book, be patient).

Alternatively, if you have Docker Compose you can just run the following from the repo root:

docker compose up

This uses the bundled docker-compose.yml to serve the branch currently checked out on the host at http://localhost:3337 with live reload. To change languages when using Compose, check out the desired language branch before starting the service.

HackTricks Partners

---

HackTricks Friends

STM Cyber

STM Cyber provides penetration testing, security audits, exploit and research work, tools, and security-awareness services. Its site describes a team of penetration testers, programmers, and security researchers with more than a decade of experience.^[1]

You can check their blog at https://blog.stmcyber.com.

STM Cyber also support cybersecurity open source projects like HackTricks :)

---

Intigriti

Intigriti is a crowdsourced security provider offering bug bounty and penetration-testing services through a global researcher community. Its platform combines continuous bug bounty coverage with on-demand PTaaS and managed vulnerability disclosure programs.^[2]

Bug bounty tip: Join Intigriti through https://go.intigriti.com/hacktricks and explore its bug bounty programs.

---

Modern Security – AI & Application Security Training Platform

Modern Security offers self-paced, hands-on AI security training for security engineers, AppSec professionals, and developers. Its AI Security Certification covers LLM and agent fundamentals, RAG and vector databases, threat modeling, prompt-injection and MCP attacks, and defensive architecture.^[3]

👉 More details on the AI Security course:
https://www.modernsecurity.io/courses/ai-security-certification

---

SerpApi

SerpApi provides APIs for Google and other search engines, returning structured SERP data with features such as location-aware results, Maps, Shopping, and Knowledge Graph results.^[4]

For more information, check out their blog, try an example in their playground, or create a free account.

---

8kSec Academy – In-Depth Mobile & AI Security Courses

8kSec Academy offers self-paced mobile and AI-security courses. Its catalog covers mobile application auditing and reversing with tools such as Ghidra, Frida, and LLDB, along with AI/LLM attack and defense labs.^[5][6]

Browse the 8kSec Academy course catalog.

---

NaxusAI – AI Powered Security Scanner

Naxus markets an offensive-AI platform that maps code and infrastructure, then uses static and dynamic agents to find and validate exploitable weaknesses with proof-of-concept evidence and remediation guidance.^[7]

Code security tip: Explore Naxus for code- and infrastructure-focused vulnerability discovery.

---

WebSec

WebSec provides penetration testing, security subscriptions, staffing, and vulnerability-assessment services. Its site says it operates internationally and covers offensive security, defensive security, and governance, risk, and compliance work.^[8]

For more information, visit their website or blog.

In addition to the above WebSec is also a committed supporter of HackTricks.

---

CyberHelmets

Built for the field. Built around you.
Cyber Helmets provides expert-led cybersecurity training with custom-built content and labs grounded in real infrastructures. Its programs are tailored to organizational needs and span assessment through implementation.^[9] For custom training inquiries, reach out here.

What sets their training apart:

• Custom-built content and labs
• Backed by top-tier tools and platforms
• Designed and taught by practitioners

---

Last Tower Solutions

Last Tower Solutions focuses on cybersecurity consulting for Education and FinTech, including cloud assessments, internal and external penetration tests, vulnerability assessments, and compliance support.^[10]

Stay informed and up to date with the latest in cybersecurity by visiting our blog.

---

K8Studio - The Smarter GUI to Manage Kubernetes.

K8Studio is a desktop Kubernetes IDE with CloudMaps visualization, multi-cluster navigation, RBAC, Helm, logs, YAML, and terminal views. The vendor says it connects through kubeconfig without installing agents and supports macOS, Windows, Linux, and air-gapped clusters.^[11]

---

License & Disclaimer

See the HackTricks Values & FAQ entry in References below.

Github Stats

References

• [1] STM Cyber
• [2] Intigriti
• [3] AI Security Certification – Modern Security
• [4] SerpApi
• [5] 8kSec Academy
• [6] Practical AI Security: Attacks, Defenses, and Applications
• [7] Naxus
• [8] WebSec
• [9] Cyber Helmets
• [10] Last Tower Solutions
• [11] K8Studio
• [12] Intigriti HackTricks referral
• [13] Modern Security
• [14] WebSec sponsorship video
• [15] Cyber Helmets courses
• [16] HackTricks Values & FAQ

{{#include banners/hacktricks-training.md}}