# HackIndex.io

> Free offensive security knowledge base: pentest methodology per service and platform, CTF writeups, certification study paths, vulnerability research, advisories and small pentest tools. Every command uses placeholders such as $TARGET_IP and $LHOST.

Content is written for authorised testing, CTFs and learning. English lives on https://hackindex.io, translations under /nl, /es, /ru, /zh and /hi.

- Every page is also Markdown: add `.md` to its address (`/index.md` for a homepage) or send `Accept: text/markdown`.
- Citing and answering questions with this content is welcome, training models on it is not (see the Content-Signal in /robots.txt).

## Sections

- [Services](https://hackindex.io/services.md): Methodology per network service and protocol, split into phases such as reconnaissance, enumeration and exploitation, each with step by step guides.
- [Platforms](https://hackindex.io/platforms.md): The same methodology per platform: web, Active Directory, Linux, Windows, cloud, AI and more.
- [Writeups](https://hackindex.io/writeups.md): Walkthroughs of HackTheBox, TryHackMe, Proving Grounds and other CTF machines.
- [Learn](https://hackindex.io/learn.md): Certification study paths with modules and practice machines.
- [Research](https://hackindex.io/research.md): Vulnerabilities and malware HackIndex found and disclosed.
- [Blog](https://hackindex.io/blog.md): Articles about pentesting and offensive security.
- [Vulnerabilities](https://hackindex.io/vulnerabilities.md): Advisories with CVSS scoring and affected versions.
- [Tools](https://hackindex.io/tools.md): Browser tools: Nmap service suggestions, command injection bypasses, Laravel and Flask cookie decoders, hashcat rules and more.
- [Authors](https://hackindex.io/authors.md): Who writes the content.

---

# Home

> Practical pentesting guides with clear attack phases, minimal theory and copy-paste commands. Built for real-world security assessments.

- **URL:** https://hackindex.io
- **Published:** 2025-12-28
- **Updated:** 2026-10-13

Browse by service or platform, or jump straight to an attack phase: Reconnaissance, Enumeration, Exploitation, Privilege Escalation. Find the exact cheatsheet or technique you need. A structured knowledge base for penetration testers.

Services & Platforms Each service contains attack phases and individual technique cheatsheets.

Recent Writeups Detailed walkthroughs of HTB machines and CTF challenges.

Search our vulnerability database Exploit Index Browse CVEs, GHSA advisories, and PoC exploits curated by our team.