Sinisterly
[WIP] Hacker Toolkit - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.li/Forum-Hacking-Tools)
+--- Thread: [WIP] Hacker Toolkit (/Thread-WIP-Hacker-Toolkit)

Pages: 1 2 3

RE: [WIP] Hacker Toolkit - RogueCoder - 06-21-2013

(06-21-2013, 03:16 PM)zero-uplink Wrote: Bro, the interface looks very nice to me.
I'm looking forward to see the finalized version.
Great Job bro!

Thanks. I will keep updating this post every now and then with info about what's new

(06-21-2013, 04:37 PM)zomgwtfbbq Wrote:
(06-21-2013, 02:42 PM)shp0ngl3 Wrote: I have nothing planned yet really. I work on it whenever I have time for it, which is limited with two kids and a fiance to please Biggrin I'm going to create some more tools, and I haven't even started the practice section yet. It's just there as a reminder so I don't forget to make it Biggrin

Looking forward to try it out Smile Will check out your code as well then Wink
Lol sounds familiar, hope you can find the time to finish it. Keep us updated when you're done, would love to try this and I'm surely not the only one.

Yeah hehe. I have time, just not as much as I would like :lol:

(06-21-2013, 05:07 PM)Anima Templi Wrote: Great approach I like it. As for the layout, yes this is defintely bootstrap and I simply love it. It's so easy to create a simple layout.

Let me know if you need help with any of that, I'm programming/working with pretty much everything web related.

Thanks bro. It's my first time using bootstrap, and it's great! I'm not really much of a front-end guy Smile Well you can fork it from bitbucket.org if you want. Right now the PhpStorm project folder is there as well, but I'm removing it on next push

RE: [WIP] Hacker Toolkit - Anima Templi - 06-21-2013

Well if you need any help with the front-end let me know. I have been working with bootstrap for quite a while now.

I'll "maybe" check it out later on if I get the time. I'm currently programming an IRC bot in PHP Smile

RE: [WIP] Hacker Toolkit - RogueCoder - 06-21-2013

(06-21-2013, 07:26 PM)Anima Templi Wrote: Well if you need any help with the front-end let me know. I have been working with bootstrap for quite a while now.

I'll "maybe" check it out later on if I get the time. I'm currently programming an IRC bot in PHP Smile

Woho IRC Biggrin I should really get back there Smile Would you mind PM'ing me the required details to get in touch with you there? Cool
I have a question for you guys... I'm finishing up the "add" functionality on the hash cracker. Now each word is hashed in 8 different ways using different combinations... When you look at the list below, do you have any other combinations you would suggest as well? I've been thinking about adding sha256/512 as well...

Total unique hashes: 4000
Total algorithm groups: 8
Algorithm groups:
- MD5 (500)
- MD5(SHA1) (500)
- MD5x2 (500)
- MD5x3 (500)
- SHA1 (500)
- SHA1(MD5) (500)
- SHA1x2 (500)
- SHA1x3 (500)

RE: [WIP] Hacker Toolkit - RogueCoder - 06-25-2013

-- Update --
Added basic vulnerability scanner that detects possible
  • SQL Injection
  • Cross-Site Scripting
  • Cross-Site Request Forgery
  • Remote File Inclusion
  • Local File Inclusion
  • Full Path Disclosure

Currently the existence of FPD is only detected through improperly handled SQLI errors.

-- Question ---
Methods to detect FPD outside SQLI. I know that by turning a parameter into an array, such as modifying ?id= to ?id[]=, can do the trick. Does anyone have any other good methods?

RE: [WIP] Hacker Toolkit - RogueCoder - 06-25-2013

-- Update --
Just pushed some changes
- Database schema and sqli table content
- Improved vulnerability scanner (not 100% complete yet, see original post for info and screenshots)

Other updates
- Updated with practice information in the original post (with screenshots)
- Prepared a dork scanner in the Toolkit menu. Will start this when the vuln scanner is complete

RE: [WIP] Hacker Toolkit - MrGeek - 06-25-2013

That's a very interesting project bro Smile
I am really interested.
Looking forward to it.

RE: [WIP] Hacker Toolkit - noize - 06-25-2013

You made this all by yourself? The front-end too?

This is awesome. Well done, my friend.

Let me know if you need any help.

RE: [WIP] Hacker Toolkit - RogueCoder - 06-25-2013

(06-25-2013, 05:53 PM)MrGeek Wrote: That's a very interesting project bro Smile
I am really interested.
Looking forward to it.

Thanks Smile Feel free to fork it and help be test for bugs and and come with suggestions Smile

(06-25-2013, 10:59 PM)noize Wrote: You made this all by yourself? The front-end too?

This is awesome. Well done, my friend.

Let me know if you need any help.

Well I've made it all myself except Twitter Bootstrap Smile

If you want to join the party you can just fork it and submit PR's Smile

RE: [WIP] Hacker Toolkit - RogueCoder - 06-28-2013

-- Update --
Added the PHP-CGI exploit to the vulnerability scanner. Thanks @1llusion for informing me about this vulnerability Smile
[Image: vulnscan_3_cgi.png]

RE: [WIP] Hacker Toolkit - RogueCoder - 07-05-2013

Update
Been working quite a lot on this lately. I decided to do a large rewrite so I did it now before it became a way larger job. I've also added some new tools:
- Dork scanner (You can also use the scan link next to each result to run the it through the vulnerability scanner)
- Converters. This is a collection of tools that converts strings into hashes (md5 and sha1 at the moment), string <-> hex, string <-> binary and string <-> base64

I still putting some final touches before I will release the rewritten code. Will post some screenshots later today

This that is planned for the future
- Captcha detection in the dork scanner
- Proxy support
- Hints and descriptions in the practice section
- Educational section (This will hold tutorials, papers, links to external sources, etc)