[RogueCoder]

Bro, the interface looks very nice to me.
I'm looking forward to see the finalized version.
Great Job bro!

Thanks. I will keep updating this post every now and then with info about what's new

I have nothing planned yet really. I work on it whenever I have time for it, which is limited with two kids and a fiance to please I'm going to create some more tools, and I haven't even started the practice section yet. It's just there as a reminder so I don't forget to make it

Looking forward to try it out Will check out your code as well then

Lol sounds familiar, hope you can find the time to finish it. Keep us updated when you're done, would love to try this and I'm surely not the only one.

Yeah hehe. I have time, just not as much as I would like :lol:

Great approach I like it. As for the layout, yes this is defintely bootstrap and I simply love it. It's so easy to create a simple layout.

Let me know if you need help with any of that, I'm programming/working with pretty much everything web related.

Thanks bro. It's my first time using bootstrap, and it's great! I'm not really much of a front-end guy Well you can fork it from bitbucket.org if you want. Right now the PhpStorm project folder is there as well, but I'm removing it on next push

[Anima Templi]

Well if you need any help with the front-end let me know. I have been working with bootstrap for quite a while now.

I'll "maybe" check it out later on if I get the time. I'm currently programming an IRC bot in PHP

[RogueCoder]

Well if you need any help with the front-end let me know. I have been working with bootstrap for quite a while now.

I'll "maybe" check it out later on if I get the time. I'm currently programming an IRC bot in PHP

Woho IRC I should really get back there Would you mind PM'ing me the required details to get in touch with you there?

---

I have a question for you guys... I'm finishing up the "add" functionality on the hash cracker. Now each word is hashed in 8 different ways using different combinations... When you look at the list below, do you have any other combinations you would suggest as well? I've been thinking about adding sha256/512 as well...

Total unique hashes: 4000
Total algorithm groups: 8
Algorithm groups:
- MD5 (500)
- MD5(SHA1) (500)
- MD5x2 (500)
- MD5x3 (500)
- SHA1 (500)
- SHA1(MD5) (500)
- SHA1x2 (500)
- SHA1x3 (500)

[RogueCoder]

-- Update --
Added basic vulnerability scanner that detects possible

• SQL Injection
  
• Cross-Site Scripting
  
• Cross-Site Request Forgery
  
• Remote File Inclusion
  
• Local File Inclusion
  
• Full Path Disclosure
  

Currently the existence of FPD is only detected through improperly handled SQLI errors.

-- Question ---
Methods to detect FPD outside SQLI. I know that by turning a parameter into an array, such as modifying ?id= to ?id[]=, can do the trick. Does anyone have any other good methods?

[RogueCoder]

-- Update --
Just pushed some changes
- Database schema and sqli table content
- Improved vulnerability scanner (not 100% complete yet, see original post for info and screenshots)

Other updates
- Updated with practice information in the original post (with screenshots)
- Prepared a dork scanner in the Toolkit menu. Will start this when the vuln scanner is complete

[MrGeek]

That's a very interesting project bro
I am really interested.
Looking forward to it.

[noize]

You made this all by yourself? The front-end too?

This is awesome. Well done, my friend.

Let me know if you need any help.

[RogueCoder]

That's a very interesting project bro
I am really interested.
Looking forward to it.

Thanks Feel free to fork it and help be test for bugs and and come with suggestions

You made this all by yourself? The front-end too?

This is awesome. Well done, my friend.

Let me know if you need any help.

Well I've made it all myself except Twitter Bootstrap

If you want to join the party you can just fork it and submit PR's

[RogueCoder]

-- Update --
Added the PHP-CGI exploit to the vulnerability scanner. Thanks @1llusion for informing me about this vulnerability

[RogueCoder]

Update
Been working quite a lot on this lately. I decided to do a large rewrite so I did it now before it became a way larger job. I've also added some new tools:
- Dork scanner (You can also use the scan link next to each result to run the it through the vulnerability scanner)
- Converters. This is a collection of tools that converts strings into hashes (md5 and sha1 at the moment), string <-> hex, string <-> binary and string <-> base64

I still putting some final touches before I will release the rewritten code. Will post some screenshots later today

This that is planned for the future
- Captcha detection in the dork scanner
- Proxy support
- Hints and descriptions in the practice section
- Educational section (This will hold tutorials, papers, links to external sources, etc)