hackgraph.github.io/index.html at main · HackGraph/hackgraph.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
<!doctype html>
<htmllang="en" class="dark">
<head>
<metacharset="UTF-8" />
<linkrel="icon" type="image/svg+xml" href="favicon.svg" />
<metaname="viewport" content="width=device-width, initial-scale=1.0" />
<metaname="theme-color" content="#0c0a0b" />
<metaname="google-site-verification" content="Mig3N7VsWRpoeizKRhnflY8RkwdNVf-7cZx07smCMaU" />
<meta
name="description"
content="HackGraph is an interactive attack-path explorer. Click to expand each step from a foothold to Domain Admin or root, with the commands, tools, OPSEC notes, and cited primary sources for every technique."
/>
<linkrel="canonical" href="https://hackgraph.github.io/" />
<metaname="robots" content="index, follow, max-image-preview:large" />
<metaname="application-name" content="HackGraph" />
<metaname="author" content="HackGraph" />
<metaproperty="og:type" content="website" />
<metaproperty="og:site_name" content="HackGraph" />
<metaproperty="og:title" content="HackGraph | Interactive Attack-path Explorer" />
<meta
property="og:description"
content="An interactive, click-to-expand attack-path explorer, from a foothold to Domain Admin or root."
/>
<metaproperty="og:url" content="https://hackgraph.github.io/" />
<metaproperty="og:image" content="https://hackgraph.github.io/og-image.png" />
<metaproperty="og:image:width" content="1200" />
<metaproperty="og:image:height" content="630" />
<metaproperty="og:image:alt" content="HackGraph, interactive attack-path explorer" />
<metaname="twitter:card" content="summary_large_image" />
<metaname="twitter:title" content="HackGraph | Interactive Attack-path Explorer" />
<meta
name="twitter:description"
content="An interactive, click-to-expand attack-path explorer for offensive security."
/>
<metaname="twitter:image" content="https://hackgraph.github.io/og-image.png" />
<!-- Self-hosted latin subsets (only the weights actually used); preloaded so
 first paint uses the real face. Mono loads on demand (command blocks). -->
<linkrel="preload" href="engine/fonts/geist-sans-latin-400-normal.woff2" as="font" type="font/woff2" crossorigin/>
<linkrel="preload" href="engine/fonts/geist-sans-latin-500-normal.woff2" as="font" type="font/woff2" crossorigin/>
<linkrel="preload" href="engine/fonts/geist-sans-latin-600-normal.woff2" as="font" type="font/woff2" crossorigin/>
<linkrel="stylesheet" href="engine/style.css" />
<linkrel="stylesheet" href="src/data/domain/domain.css" />
<title>HackGraph | Interactive Attack-path Explorer</title>
<style>
html { background:#0c0a0b; }
html[data-theme='light'] { background:#f6f2f2; }
</style>
<script>
/* Apply the saved theme before first paint so there is no flash. Dark is the
 default identity; light is opt-in via the in-app settings toggle. */
(function(){
try{
vark=localStorage.getItem('hg-theme');
document.documentElement.dataset.theme=k==='light' ? 'light' : 'dark';
}catch(e){
document.documentElement.dataset.theme='dark';
}
})();
</script>
<scripttype="application/ld+json">
{
"@context": "https://schema.org",
"@graph": [
{
"@type": "WebSite",
"@id": "https://hackgraph.github.io/#website",
"url": "https://hackgraph.github.io/",
"name": "HackGraph",
"description": "Interactive attack-path explorer for offensive security."
},
{
"@type": "WebApplication",
"name": "HackGraph",
"url": "https://hackgraph.github.io/",
"applicationCategory": "SecurityApplication",
"operatingSystem": "Any (web browser)",
"browserRequirements": "Requires JavaScript.",
"inLanguage": "en",
"description": "An interactive, click-to-expand attack-path explorer, from a foothold to Domain Admin or root. Every technique includes commands, tools, OPSEC notes, and cited primary sources."
}
]
}
</script>
</head>
<body>
<!-- fg-fill is the engine's full-window helper: .fg is position:relative with a
 240px min-height, so an unsized host collapses to that instead of filling. -->
<divid="root" class="fg-fill"></div>
<noscript>
<divstyle="max-width: 680px; margin: 12vh auto; padding: 0 24px; font-family: system-ui, sans-serif; color: #f0eaec; background: #0c0a0b">
<h1>HackGraph</h1>
<p>
 HackGraph is an interactive, click-to-expand attack-path explorer. It traces the route from a foothold
 to Domain Admin or root, and needs JavaScript for the interactive graph; please enable it.
</p>
<p>
 Prefer text, or reading without JavaScript? The full
<ahref="reference.html">HackGraph reference</a> lists every technique, command, and source in plain HTML:
<ahref="reference/active-directory.html">Active Directory attack paths</a>,
<ahref="reference/windows-privilege-escalation.html">Windows privilege escalation</a>, and
<ahref="reference/linux-privilege-escalation.html">Linux privilege escalation</a>.
</p>
</div>
</noscript>
<scripttype="module" src="src/main.js"></script>
</body>
</html>