[RogueCoder]

Hacker Toolkit

I've decided to make a web application that will provide a decent amount of tools to help aid in me when hacking. It will hold a toolkit and a practice area.

• The toolkit will contain things like hash cracker, vulnerability scanner, dork scanner, and other scanners.
  
• The practice area will provide different challenges such as sql injection, xss, etc, with multiple security levels
  

Fork it from BitBucket: https://bitbucket.org/shp0ngl3/hacker-toolkit/src

Database schema

Code:

delimiter $$ CREATE DATABASE `hackertoolkit` /*!40100 DEFAULT CHARACTER SET utf8 COLLATE utf8_unicode_ci */$$ delimiter $$ CREATE TABLE `hashcracker` ( `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT, `plaintext` varchar(255) COLLATE utf8_unicode_ci DEFAULT NULL, `hash` varchar(150) COLLATE utf8_unicode_ci DEFAULT NULL, `algorithm` varchar(15) COLLATE utf8_unicode_ci DEFAULT NULL, PRIMARY KEY (`id`), UNIQUE KEY `hash_UNIQUE` (`hash`), KEY `plaintext_INDEX` (`plaintext`), KEY `algorithm_INDEX` (`algorithm`) ) ENGINE=InnoDB AUTO_INCREMENT=12226752 DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci$$ delimiter $$ CREATE TABLE `sqli` ( `id` tinyint(3) unsigned NOT NULL AUTO_INCREMENT, `username` varchar(15) COLLATE utf8_unicode_ci DEFAULT NULL, `password` varchar(32) COLLATE utf8_unicode_ci DEFAULT NULL, `name` varchar(45) COLLATE utf8_unicode_ci DEFAULT NULL, `email` varchar(45) COLLATE utf8_unicode_ci DEFAULT NULL, PRIMARY KEY (`id`) ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci$$

Content of sqli table

Code:

delimitier $$ INSERT INTO `hackertoolkit`.`sqli` (`id`, `username`, `password`, `name`, `email`) VALUES ('1', 'jdoe', '22c14f311a60486b36f79f3bc962be66', 'Jane Doe', 'jdoe@hackertoolkit'), ('2', 'esmith', '12f9c46a2f99fa00a451f9d9db9d511c', 'Eric Smith', 'esmith@hackertoolkit')$$

Spoiler: Toolkit Menu

Spoiler: Practice Menu

Tools

• Hash cracker - Complete
  Functionality:
  - Hash lookup [complete]
  - Add hashes [not complete]
  - Statistics [not complete]
  
  Spoiler:

  
  
  
  
  
  
  
  
  
• Vulnerability Scanner - Work In Progress
  Functionality:
  - Checks all parameters in the URL for several vulnerabilities:
  -- sqli (complete),
  -- xss (complete),
  -- rfi (almost done),
  -- lfi (almost done),
  -- csrf (pending),
  -- fpd (only working together with sqli so far)
  -- PHP-CGI exploit
  - Returns info about which parameter which is vulnerable and what payloads that were successfully executed
  
  Spoiler:

  
  
  
  
  
  
  

Practice

• SQL Injection - Level 1 complete
  Functionality:
  - Bypass authentication
  - Extract data
  
  Spoiler: Bypass Authentication

  
  
  
  
  
  Spoiler: Extract Data

  
  
  
  
  

Future plans

• Add more tools
  
• Add more practice challenges
  
• Create a pentest manager
  

[zomgwtfbbq]

Great job, I love the simplicity of the layout and the practice category. What language did you use to create it?
I've created something similar btw, it's a pentest cms written in PHP and this weekend I will release the new version. You might want to check it out for some extra ideas.

[RogueCoder]

Great job, I love the simplicity of the layout and the practice category. What language did you use to create it?
I've created something similar btw, it's a pentest cms written in PHP and this weekend I will release the new version. You might want to check it out for some extra ideas.

Thanks, glad you like it I try to keep it as clean and minimalistic as possible. It's written in PHP

I tried the CMS a few days ago Looks really nice. Haven't looked at the code's yet though

[chmod]

That looks awesome looking forward to seeing the development of this

[TheShadow1]

Very nice. I really like the font!

[zomgwtfbbq]

Great job, I love the simplicity of the layout and the practice category. What language did you use to create it?
I've created something similar btw, it's a pentest cms written in PHP and this weekend I will release the new version. You might want to check it out for some extra ideas.

Thanks, glad you like it I try to keep it as clean and minimalistic as possible. It's written in PHP

I tried the CMS a few days ago Looks really nice. Haven't looked at the code's yet though

Nice, when are you planning to release the final version?

Thanks for trying my cms. The new version will be better though, cleaner layout, bug fixes and some extra features.

[RogueCoder]

That looks awesome looking forward to seeing the development of this

Thanks bro and so do I

Very nice. I really like the font!

Cool thanks It's stock Twitter Bootstrap

Great job, I love the simplicity of the layout and the practice category. What language did you use to create it?
I've created something similar btw, it's a pentest cms written in PHP and this weekend I will release the new version. You might want to check it out for some extra ideas.

Thanks, glad you like it I try to keep it as clean and minimalistic as possible. It's written in PHP

I tried the CMS a few days ago Looks really nice. Haven't looked at the code's yet though

Nice, when are you planning to release the final version?

Thanks for trying my cms. The new version will be better though, cleaner layout, bug fixes and some extra features.

I have nothing planned yet really. I work on it whenever I have time for it, which is limited with two kids and a fiance to please I'm going to create some more tools, and I haven't even started the practice section yet. It's just there as a reminder so I don't forget to make it

Looking forward to try it out Will check out your code as well then

[zero-uplink]

Bro, the interface looks very nice to me.
I'm looking forward to see the finalized version.
Great Job bro!

[zomgwtfbbq]

I have nothing planned yet really. I work on it whenever I have time for it, which is limited with two kids and a fiance to please I'm going to create some more tools, and I haven't even started the practice section yet. It's just there as a reminder so I don't forget to make it

Looking forward to try it out Will check out your code as well then

Lol sounds familiar, hope you can find the time to finish it. Keep us updated when you're done, would love to try this and I'm surely not the only one.

[Anima Templi]

Great approach I like it. As for the layout, yes this is defintely bootstrap and I simply love it. It's so easy to create a simple layout.

Let me know if you need help with any of that, I'm programming/working with pretty much everything web related.