Skip to content

Back to the catalog

HackTricks-wiki/hacktricks
github.comrepo

HackTricks-wiki/hacktricks

HackTricks is a large, community-maintained wiki/repo of penetration-testing and hacking tradecraft covering web/API exploitation, privilege escalation, Active Directory attacks, cloud misconfigurations, and mobile hacking, served locally via mdbook/Docker. It's one of the most referenced practical hacking knowledge bases used by pentesters, red teamers, and CTF players for step-by-step technique notes and cheat sheets.

TL;DR A massive, continuously-updated open-source wiki of practical pentesting and hacking techniques (web, AD, cloud, mobile).
Document

What it is

The HackTricks repository README is mostly instructions for running the wiki offline. It is built with mdbook and served at http://localhost:3337. Each translation lives on its own git branch, and master is the English one. The page lists 16 other language codes: af, de, el, es, fr, hi, it, ja, ko, pl, pt, sr, sw, tr, uk and zh. The rest of the page is sponsor blurbs, which add no technical content.

Preconditions

  • Docker, with the linux/amd64 platform flag the command sets.
  • Outbound access to github.com, because the container runs ssh-keyscan and git pull on start.
  • The first build needs patience. The page says the book can take up to 5 minutes before it is available.

What to do

Clone the repo, pick a language branch, and start the container:

git clone https://github.com/HackTricks-wiki/hacktricks
export HT_LANG="master" # Leave master for English
docker run -d --rm --platform linux/amd64 -p 3337:3000 --name hacktricks -v $(pwd)/hacktricks:/app ghcr.io/hacktricks-wiki/hacktricks-cloud/translator-image bash -c "mkdir -p ~/.ssh && ssh-keyscan -H github.com >> ~/.ssh/known_hosts && cd /app && git config --global --add safe.directory /app && git checkout $HT_LANG && git pull && MDBOOK_PREPROCESSOR__HACKTRICKS__ENV=dev mdbook serve --hostname 0.0.0.0"

With Docker Compose, run this from the repo root:

docker compose up

Compose uses the bundled docker-compose.yml and serves whichever branch is checked out on the host, with live reload. To change language under Compose, check out the language branch before starting the service.

Caveats

  • The container image is ghcr.io/hacktricks-wiki/hacktricks-cloud/translator-image, which is the image the README names for this repo.
  • The container runs git pull on start, so content changes between runs.
  • The README does not describe the wiki's technique coverage, so the page gives no basis for judging content quality or how current it is.

Technologies named here

Techniques named here

  • Mobile application auditing and reverse engineering
  • Prompt-injection and MCP attacks