HackTricks — pentesting tricks and techniques from CTFs, real-world apps, and security research (book.hacktricks.xyz). Covers web, network, AD, cloud, mobile, reversing, and more. Referenced externally only, no content copied.
Installs into .claude/skills of the current project.
Are you the author of Hacktricks?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/smartworldarafath-hacktricks)
---
name: hacktricks
description: HackTricks — pentesting tricks and techniques from CTFs, real-world apps, and security research (book.hacktricks.xyz). Covers web, network, AD, cloud, mobile, reversing, and more. Referenced externally only, no content copied.
---
# HackTricks — Pentest Tricks & Techniques Reference
## Overview
This skill integrates **[HackTricks](https://book.hacktricks.xyz/)** — a comprehensive knowledge base of pentesting tricks and techniques learned from CTFs, real-life applications, and security research — into the REA_Skill agent ecosystem.
HackTricks covers techniques across:
- Web application penetration testing
- Network & infrastructure pentesting
- Active Directory & Windows domain attacks
- Cloud security (AWS, Azure, GCP)
- Mobile application security
- Reverse engineering & binary exploitation
- WiFi, Bluetooth, IoT, and hardware hacking
- CTF write-ups and methodology
**Referenced externally only.** This skill does **not** copy HackTricks content into REA_Skill. Use https://book.hacktricks.xyz/ for the full technique details.
## ⚠️ Security & Red Lines (read first)
- **Authorized use only:** Run HackTricks techniques exclusively against systems you own or have explicit, written permission to test.
- **No third-party targets:** Never apply techniques to systems you are not authorized to assess.
- **You are responsible** for obtaining authorization and complying with applicable law.
## ⚡ Integration with REA
Combine HackTricks techniques with REA skills:
- `offensive-active-directory`, `offensive-windows-boundaries` — AD/Windows attacks
- `offensive-api-security`, `offensive-web` — web app testing
- `offensive-cloud` — cloud pentesting
- `rea-binary-disassembly` — reverse engineering correlation