# HackIndex.io

> Free offensive security knowledge base: pentest methodology per service and platform, CTF writeups, certification study paths, vulnerability research, advisories and small pentest tools. Every command uses placeholders such as $TARGET_IP and $LHOST.

Content is written for authorised testing, CTFs and learning. English lives on https://hackindex.io, translations under /nl, /es, /ru, /zh and /hi.

- Every page is also Markdown: add `.md` to its address (`/index.md` for a homepage) or send `Accept: text/markdown`.
- Citing and answering questions with this content is welcome, training models on it is not (see the Content-Signal in /robots.txt).

## Sections

- [Services](https://hackindex.io/es/services.md): Methodology per network service and protocol, split into phases such as reconnaissance, enumeration and exploitation, each with step by step guides.
- [Platforms](https://hackindex.io/es/platforms.md): The same methodology per platform: web, Active Directory, Linux, Windows, cloud, AI and more.
- [Writeups](https://hackindex.io/es/writeups.md): Walkthroughs of HackTheBox, TryHackMe, Proving Grounds and other CTF machines.
- [Learn](https://hackindex.io/es/learn.md): Certification study paths with modules and practice machines.
- [Research](https://hackindex.io/es/research.md): Vulnerabilities and malware HackIndex found and disclosed.
- [Blog](https://hackindex.io/es/blog.md): Articles about pentesting and offensive security.
- [Vulnerabilities](https://hackindex.io/es/vulnerabilities.md): Advisories with CVSS scoring and affected versions.
- [Tools](https://hackindex.io/es/tools.md): Browser tools: Nmap service suggestions, command injection bypasses, Laravel and Flask cookie decoders, hashcat rules and more.
- [Authors](https://hackindex.io/es/authors.md): Who writes the content.

---

# Home

> Guías de pentesting práctico con fases de ataque claras, teoría mínima y comandos listos para copiar. Pensadas para auditorías de seguridad reales.

- **URL:** https://hackindex.io/es
- **Published:** 2025-12-28
- **Updated:** 2026-10-13

Explora por servicio o plataforma, o ve directamente a una fase de ataque: Reconocimiento, Enumeración, Explotación, Escalada de privilegios. Encuentra exactamente la cheatsheet o la técnica que necesitas. Una base de conocimiento estructurada para pentesters.

Servicios y plataformas Cada servicio incluye fases de ataque y cheatsheets de técnicas concretas.

Writeups recientes Guías paso a paso detalladas de máquinas de HTB y retos CTF.

Busca en nuestra base de datos de vulnerabilidades Exploit Index Explora CVE, avisos GHSA y exploits PoC seleccionados por nuestro equipo.