HackTricks Discord
Join the HackTricks Discord to stay up to date with technical security news summarized by AI, connect with the cybersecurity community, and get help around the HackTricks platforms.
Blue-CloudPEASS
Blue Team tool for auditing cloud security posture. Identifies risky IAM privileges, unused access, external trust relationships, and security misconfigurations across cloud platforms.
CloudPEASS
Red Team tool for finding permissions and privilege escalation paths across AWS, Azure, GCP, and Kubernetes. Enumerates permissions, identifies attack vectors, and suggests exploitation techniques.
Domain & DNS Auditor
Comprehensive DNS security analysis including DNSSEC validation, SPF/DKIM/DMARC email security, HTTP security headers, CSP evaluation, SSL/TLS certificate analysis, and domain configuration checks.
Host Checker
Check IPs and domains against multiple threat intelligence sources to spot malicious infrastructure quickly.
Clickjacking PoC
Generate client-side PoCs for HackTricks clickjacking techniques, including iframe sandbox flag combinations and UI redressing variants.
Fact Checker
A multi-agent verification workflow where AI verifiers research web sources, news, social networks, scientific papers, and patents, then deliberate structured voting rounds to produce a high-confidence yes/no verdict.
Wander
Plan a source-backed trip across different starting and return cities. Compare current flights, stays, reviews, events and conditions, then receive a budgeted day-by-day itinerary.
GitHub Leaks Scanner
Scan GitHub repositories, organizations, and users for accidentally exposed secrets, API keys, tokens, and credentials using multiple powerful scanning tools.
Public Repo Scanner
Launch a vulnerability scan for a public GitHub repository and get your report with the found vulnerabilities in your email.
HackTricks Research Request
Queue stale HackTricks pages for the autonomous HT researcher. The researcher will analyze the given page and research for new hacking techniques and vulnerabilities related to the contents of the page.
HackTricks AI Chatbot
Chat with an AI assistant powered by HackTricks knowledge base. Get instant answers to your security questions, pentesting techniques, and hacking methodologies.
Malware World
Aggregated threat intelligence: suspicious IPs, domains, ranges, phone numbers, app IDs, file hashes, certificate fingerprints and known exploited CVEs from 80+ active blacklists.
NaxusAI
LLM-powered, multi-agent analysis that reviews source code repositories to uncover vulnerabilities and security anti-patterns, including 0days, with actionable remediation guidance.