Links
The external references I keep open in a pinned tab on every engagement, methodology, living-off-the-land binaries, payload collections and the wordlists behind every fuzz on this site.
This is the short list of external references I re-open on every engagement. I would rather trust nine sources deeply than bookmark ninety, every entry below has earned its tab by being the page I actually landed on mid-box, not the one I meant to read later.
The arsenal
HackTricksmethodology
The methodology bible. When I do not know what the next step is, I start here, per-port, per-service, per-technology playbooks.
GTFOBinsprivesc · linux
Which Unix binary breaks out of a restricted context or abuses a SUID/sudo entry. First stop after
sudo -l.
LOLBASprivesc · windows
The Windows twin of GTFOBins, signed living-off-the-land binaries for download, execute and bypass.
PayloadsAllTheThingsweb · payloads
Copy-ready payloads and bypasses for every web bug class, SSTI, SQLi, XXE, file upload, deserialization.
revshells.comshells
Reverse-shell generator with the listener side included. I keep it open the moment I find RCE.
WADComswindows · ad
Interactive command reference for Windows / Active Directory, impacket, netexec, kerbrute, the lot.
SecListswordlists
The wordlists behind every ffuf, feroxbuster and password spray on this site.
HackTricks Cloudcloud · k8s
Same methodology treatment for AWS, GCP, Azure and Kubernetes attack surface.
explainshellreference
Paste any command and it breaks down every flag. How I audit a one-liner before I run it as root.