HackTricks Search Skill

Purpose

Use this skill to reliably discover and extract the most relevant HackTricks pages for a given technique, vulnerability class, bypass, or exploitation workflow across the main and cloud HackTricks properties, then pull the exact sections needed (payloads, prerequisites, caveats, and defensive notes). Keep this as a support skill for technique, payload, bypass, and edge-case research unless the current owner phase is explicitly research.

HackTricks can be inconsistently indexed across search engines. This skill therefore defines two search backends:

1. Primary: Exa-based web search with strict site scoping.
2. Secondary: DuckDuckGo dorks with strict site scoping and noise reduction.
3. Verification: GitHub repository search against the upstream HackTricks repositories.

Use the secondary backend when:

• Exa results are sparse or irrelevant.
• You need very tight matching by title/path/keyword.
• You want reproducible dork sets for common vuln classes.

Scope Guardrails