All-in-One Hacking Tool for Security Researchers & Pentesters
|
| Command | Action | Works in |
|---|---|---|
/query |
Search — find tools instantly by keyword | Main menu |
t |
Tags — filter by osint, scanner, c2, cloud, mobile... | Main menu |
r |
Recommend — "I want to do X" → matching tools | Main menu |
? |
Help — quick reference card | Everywhere |
q |
Quit — exit from any depth | Everywhere |
97 |
Install All — batch install all tools in category | Category |
99 |
Back — return to previous menu | Everywhere |
| # | Category | Tools | # | Category | Tools |
|---|---|---|---|---|---|
| 1 | 🛡 Anonymously Hiding | 2 | 11 | 🧰 Exploit Framework | 4 |
| 2 | 🔍 Information Gathering | 26 | 12 | 🔁 Reverse Engineering | 5 |
| 3 | 📚 Wordlist Generator | 7 | 13 | ⚡ DDOS Attack | 5 |
| 4 | 📶 Wireless Attack | 13 | 14 | 🖥 RAT | 1 |
| 5 | 🧩 SQL Injection | 7 | 15 | 💥 XSS Attack | 9 |
| 6 | 🎣 Phishing Attack | 17 | 16 | 🖼 Steganography | 4 |
| 7 | 🌐 Web Attack | 20 | 17 | 🏢 Active Directory | 6 |
| 8 | 🔧 Post Exploitation | 10 | 18 | ☁ Cloud Security | 4 |
| 9 | 🕵 Forensics | 8 | 19 | 📱 Mobile Security | 3 |
| 10 | 📦 Payload Creation | 8 | 20 | ✨ Other Tools | 24 |
- Network Map (nmap)
- Dracnmap
- Port scanning
- Host to IP
- Xerosploit
- RED HAWK
- ReconSpider
- IsItDown
- Infoga
- ReconDog
- Striker
- SecretFinder
- Shodanfy
- rang3r
- Breacher
- theHarvester ★
- Amass ★
- Masscan ★
- RustScan ★
- Holehe ★
- Maigret ★
- httpx ★
- SpiderFoot ★
- Subfinder ★
- TruffleHog ★
- Gitleaks ★
- WiFi-Pumpkin
- pixiewps
- Bluetooth Honeypot (bluepot)
- Fluxion
- Wifiphisher
- Wifite
- EvilTwin
- Fastssh
- Howmanypeople
- Airgeddon ★
- hcxdumptool ★
- hcxtools ★
- Bettercap ★
- Autophisher
- PyPhisher
- AdvPhishing
- Setoolkit
- SocialFish
- HiddenEye
- Evilginx3
- I-See-You
- SayCheese
- QR Code Jacking
- BlackEye
- ShellPhish
- Thanos
- QRLJacking
- Maskphish
- BlackPhish
- dnstwist
- Web2Attack
- Skipfish
- Sublist3r
- CheckURL
- Sub-Domain TakeOver
- Dirb
- Nuclei ★
- ffuf ★
- Feroxbuster ★
- Nikto ★
- wafw00f ★
- Katana ★
- Gobuster ★
- Dirsearch ★
- OWASP ZAP ★
- testssl.sh ★
- Arjun ★
- Caido ★
- mitmproxy ★
- Vegile
- Chrome Keylogger
- pwncat-cs ★
- Sliver ★
- Havoc ★
- PEASS-ng (LinPEAS/WinPEAS) ★
- Ligolo-ng ★
- Chisel ★
- Evil-WinRM ★
- Mythic ★
- Autopsy
- Wireshark
- Bulk extractor
- Guymager
- Toolsley
- Volatility 3 ★
- Binwalk ★
- pspy ★
- SteganoHide
- StegoCracker
- Whitespace
- BloodHound ★
- NetExec (nxc) ★
- Impacket ★
- Responder ★
- Certipy ★
- Kerbrute ★
- Prowler ★
- ScoutSuite ★
- Pacu ★
- Trivy ★
- Terminal Multiplexer (tilix)
- Crivo
Title:
[Tool Request] ToolName — Category
Use the Tool Request template.
Required: tool name, GitHub URL, category, OS, install command, reason.
Title:
[New Tool] ToolName — Category
Use the PR template checklist.
Required: class in tools/*.py, TITLE, DESCRIPTION, INSTALL/RUN commands, SUPPORTED_OS, test locally.
Issues or PRs that don't follow the title format will be closed without review.
# Build docker build -t hackingtool . # Run (direct) docker run -it --rm hackingtool # Run (Compose — recommended) docker compose up -d docker exec -it hackingtool bash # Dev mode (live source mount) docker compose --profile dev up docker exec -it hackingtool-dev bash # Stop docker compose down # stop container docker compose down -v # also remove data volume
| Dependency | Version | Needed for |
|---|---|---|
| Python | 3.10+ | Core |
| Go | 1.21+ | nuclei, ffuf, amass, httpx, katana, dalfox, gobuster, subfinder |
| Ruby | any | haiti, evil-winrm |
| Docker | any | Mythic, MobSF (optional) |
pip install -r requirements.txt
If this project helps you, consider buying me a coffee:
For authorized security testing only. Thanks to all original authors of the tools included in hackingtool.
Your favourite tool is not listed? Suggest it here