# HackIndex.io

> Free offensive security knowledge base: pentest methodology per service and platform, CTF writeups, certification study paths, vulnerability research, advisories and small pentest tools. Every command uses placeholders such as $TARGET_IP and $LHOST.

Content is written for authorised testing, CTFs and learning. English lives on https://hackindex.io, translations under /nl, /es, /ru, /zh and /hi.

- Every page is also Markdown: add `.md` to its address (`/index.md` for a homepage) or send `Accept: text/markdown`.
- Citing and answering questions with this content is welcome, training models on it is not (see the Content-Signal in /robots.txt).

## Sections

- [Services](https://hackindex.io/zh/services.md): Methodology per network service and protocol, split into phases such as reconnaissance, enumeration and exploitation, each with step by step guides.
- [Platforms](https://hackindex.io/zh/platforms.md): The same methodology per platform: web, Active Directory, Linux, Windows, cloud, AI and more.
- [Writeups](https://hackindex.io/zh/writeups.md): Walkthroughs of HackTheBox, TryHackMe, Proving Grounds and other CTF machines.
- [Learn](https://hackindex.io/zh/learn.md): Certification study paths with modules and practice machines.
- [Research](https://hackindex.io/zh/research.md): Vulnerabilities and malware HackIndex found and disclosed.
- [Blog](https://hackindex.io/zh/blog.md): Articles about pentesting and offensive security.
- [Vulnerabilities](https://hackindex.io/zh/vulnerabilities.md): Advisories with CVSS scoring and affected versions.
- [Tools](https://hackindex.io/zh/tools.md): Browser tools: Nmap service suggestions, command injection bypasses, Laravel and Flask cookie decoders, hashcat rules and more.
- [Authors](https://hackindex.io/zh/authors.md): Who writes the content.

---

# Home

> 实战渗透测试指南：攻击阶段清晰，理论精简，命令可直接复制粘贴。专为真实环境中的安全评估打造。

- **URL:** https://hackindex.io/zh
- **Published:** 2025-12-28
- **Updated:** 2026-10-13

按服务或平台浏览，或直接跳转到某个攻击阶段：侦察、枚举、漏洞利用、权限提升。精准找到你需要的速查表或技术。 专为渗透测试人员打造的结构化知识库。

服务与平台 每个服务都包含攻击阶段和独立的技术速查表。

最新 Writeup HTB 靶机与 CTF 挑战的详细解题过程。

搜索我们的漏洞数据库 Exploit Index 浏览由我们团队精选的 CVE、GHSA 安全公告和 PoC 漏洞利用。