Sinisterly
[WIP] Hacker Toolkit - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.li/Forum-Hacking-Tools)
+--- Thread: [WIP] Hacker Toolkit (/Thread-WIP-Hacker-Toolkit)

Pages: 1 2 3

[WIP] Hacker Toolkit - RogueCoder - 06-21-2013

Hacker Toolkit

I've decided to make a web application that will provide a decent amount of tools to help aid in me when hacking. It will hold a toolkit and a practice area.
  • The toolkit will contain things like hash cracker, vulnerability scanner, dork scanner, and other scanners.
  • The practice area will provide different challenges such as sql injection, xss, etc, with multiple security levels

Fork it from BitBucket: https://bitbucket.org/shp0ngl3/hacker-toolkit/src

Database schema
Code:
delimiter $$ CREATE DATABASE `hackertoolkit` /*!40100 DEFAULT CHARACTER SET utf8 COLLATE utf8_unicode_ci */$$ delimiter $$ CREATE TABLE `hashcracker` ( `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT, `plaintext` varchar(255) COLLATE utf8_unicode_ci DEFAULT NULL, `hash` varchar(150) COLLATE utf8_unicode_ci DEFAULT NULL, `algorithm` varchar(15) COLLATE utf8_unicode_ci DEFAULT NULL, PRIMARY KEY (`id`), UNIQUE KEY `hash_UNIQUE` (`hash`), KEY `plaintext_INDEX` (`plaintext`), KEY `algorithm_INDEX` (`algorithm`) ) ENGINE=InnoDB AUTO_INCREMENT=12226752 DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci$$ delimiter $$ CREATE TABLE `sqli` ( `id` tinyint(3) unsigned NOT NULL AUTO_INCREMENT, `username` varchar(15) COLLATE utf8_unicode_ci DEFAULT NULL, `password` varchar(32) COLLATE utf8_unicode_ci DEFAULT NULL, `name` varchar(45) COLLATE utf8_unicode_ci DEFAULT NULL, `email` varchar(45) COLLATE utf8_unicode_ci DEFAULT NULL, PRIMARY KEY (`id`) ) ENGINE=InnoDB AUTO_INCREMENT=3 DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci$$

Content of sqli table
Code:
delimitier $$ INSERT INTO `hackertoolkit`.`sqli` (`id`, `username`, `password`, `name`, `email`) VALUES ('1', 'jdoe', '22c14f311a60486b36f79f3bc962be66', 'Jane Doe', 'jdoe@hackertoolkit'), ('2', 'esmith', '12f9c46a2f99fa00a451f9d9db9d511c', 'Eric Smith', 'esmith@hackertoolkit')$$

Spoiler: Toolkit Menu
[Image: toolkit_menu.png]

Spoiler: Practice Menu
[Image: practice_menu.png]



Tools
  • Hash cracker - Complete
    Functionality:
    - Hash lookup [complete]
    - Add hashes [not complete]
    - Statistics [not complete]
    Spoiler:
    [Image: hc_search.png]

    [Image: hc_lookup_result.png]

    [Image: hc_add_new.png]

    [Image: hc_stats.png]

  • Vulnerability Scanner - Work In Progress
    Functionality:
    - Checks all parameters in the URL for several vulnerabilities:
    -- sqli (complete),
    -- xss (complete),
    -- rfi (almost done),
    -- lfi (almost done),
    -- csrf (pending),
    -- fpd (only working together with sqli so far)
    -- PHP-CGI exploit
    - Returns info about which parameter which is vulnerable and what payloads that were successfully executed
    Spoiler:
    [Image: vulnscan.png]

    [Image: vulnscan_2.png]

    [Image: vulnscan_3_cgi.png]


Practice
  • SQL Injection - Level 1 complete
    Functionality:
    - Bypass authentication
    - Extract data
    Spoiler: Bypass Authentication
    [Image: sqli_login_1.png]

    [Image: sqli_login_2.png]

    Spoiler: Extract Data
    [Image: sqli_extract_1.png]

    [Image: sqli_extract_2.png]


Future plans
  • Add more tools
  • Add more practice challenges
  • Create a pentest manager


RE: [WIP] Hacker Toolkit - zomgwtfbbq - 06-21-2013

Great job, I love the simplicity of the layout and the practice category. What language did you use to create it?
I've created something similar btw, it's a pentest cms written in PHP and this weekend I will release the new version. You might want to check it out for some extra ideas.

RE: [WIP] Hacker Toolkit - RogueCoder - 06-21-2013

(06-21-2013, 01:50 PM)zomgwtfbbq Wrote: Great job, I love the simplicity of the layout and the practice category. What language did you use to create it?
I've created something similar btw, it's a pentest cms written in PHP and this weekend I will release the new version. You might want to check it out for some extra ideas.

Thanks, glad you like it Smile I try to keep it as clean and minimalistic as possible. It's written in PHP Smile

I tried the CMS a few days ago Smile Looks really nice. Haven't looked at the code's yet though Biggrin

RE: [WIP] Hacker Toolkit - chmod - 06-21-2013

That looks awesome looking forward to seeing the development of this

RE: [WIP] Hacker Toolkit - TheShadow1 - 06-21-2013

Very nice. I really like the font!

RE: [WIP] Hacker Toolkit - zomgwtfbbq - 06-21-2013

(06-21-2013, 02:17 PM)shp0ngl3 Wrote:
(06-21-2013, 01:50 PM)zomgwtfbbq Wrote: Great job, I love the simplicity of the layout and the practice category. What language did you use to create it?
I've created something similar btw, it's a pentest cms written in PHP and this weekend I will release the new version. You might want to check it out for some extra ideas.

Thanks, glad you like it Smile I try to keep it as clean and minimalistic as possible. It's written in PHP Smile

I tried the CMS a few days ago Smile Looks really nice. Haven't looked at the code's yet though Biggrin
Nice, when are you planning to release the final version?

Thanks for trying my cms. The new version will be better though, cleaner layout, bug fixes and some extra features.

RE: [WIP] Hacker Toolkit - RogueCoder - 06-21-2013

(06-21-2013, 02:26 PM)chmod Wrote: That looks awesome looking forward to seeing the development of this

Thanks bro and so do I Biggrin

(06-21-2013, 02:30 PM)TheShadow1 Wrote: Very nice. I really like the font!

Cool thanks Smile It's stock Twitter Bootstrap Smile

(06-21-2013, 02:32 PM)zomgwtfbbq Wrote:
(06-21-2013, 02:17 PM)shp0ngl3 Wrote:
(06-21-2013, 01:50 PM)zomgwtfbbq Wrote: Great job, I love the simplicity of the layout and the practice category. What language did you use to create it?
I've created something similar btw, it's a pentest cms written in PHP and this weekend I will release the new version. You might want to check it out for some extra ideas.

Thanks, glad you like it Smile I try to keep it as clean and minimalistic as possible. It's written in PHP Smile

I tried the CMS a few days ago Smile Looks really nice. Haven't looked at the code's yet though Biggrin
Nice, when are you planning to release the final version?

Thanks for trying my cms. The new version will be better though, cleaner layout, bug fixes and some extra features.

I have nothing planned yet really. I work on it whenever I have time for it, which is limited with two kids and a fiance to please Biggrin I'm going to create some more tools, and I haven't even started the practice section yet. It's just there as a reminder so I don't forget to make it Biggrin

Looking forward to try it out Smile Will check out your code as well then Wink

RE: [WIP] Hacker Toolkit - zero-uplink - 06-21-2013

Bro, the interface looks very nice to me.
I'm looking forward to see the finalized version.
Great Job bro!

RE: [WIP] Hacker Toolkit - zomgwtfbbq - 06-21-2013

(06-21-2013, 02:42 PM)shp0ngl3 Wrote: I have nothing planned yet really. I work on it whenever I have time for it, which is limited with two kids and a fiance to please Biggrin I'm going to create some more tools, and I haven't even started the practice section yet. It's just there as a reminder so I don't forget to make it Biggrin

Looking forward to try it out Smile Will check out your code as well then Wink
Lol sounds familiar, hope you can find the time to finish it. Keep us updated when you're done, would love to try this and I'm surely not the only one.

RE: [WIP] Hacker Toolkit - Anima Templi - 06-21-2013

Great approach I like it. As for the layout, yes this is defintely bootstrap and I simply love it. It's so easy to create a simple layout.

Let me know if you need help with any of that, I'm programming/working with pretty much everything web related.