You've already forked hackingtool
mirror of
https://github.com/Z4nzu/hackingtool.git
synced 2026-06-09 00:16:18 +02:00
Hardik Zinzuvadiya
2ad5587517
Phase 4 (core.py — largely done in Phase 1, completed here): - HackingTool: add ARCHIVED, ARCHIVED_REASON, SUPPORTED_OS, REQUIRES_* fields - HackingTool: remove INSTALLATION_DIR (unused) - HackingToolsCollection: add _active_tools(), _archived_tools(), _incompatible_tools() - HackingToolsCollection: add _show_archived_tools() (option 98 sub-menu) - HackingToolsCollection.show_options(): filter by OS and ARCHIVED flag - OS-incompatible tools show count but are hidden from menu - Archived tools accessible via option 98 with reason displayed Phase 5 (all 22 remaining tool files): - Remove local console = Console() and _theme = Theme() from all 22 files - Remove P_COLOR and PURPLE_STYLE local constants - Add `from core import HackingTool, HackingToolsCollection, console` everywhere - Remove show_options() overrides from all collection classes (500+ lines deleted) - Remove pretty_print() overrides from all collection classes - Remove _get_attr() / _get_attr_fallback() helpers from all collection classes - Replace super(ClassName, self).__init__() → super().__init__() in all files - Remove # coding=utf-8 headers from all files - Fix remaining PURPLE_STYLE usages → "bold magenta" literal All 28 tool modules import cleanly. Zero local console instances remain.
126 lines
3.9 KiB
Python
126 lines
3.9 KiB
Python
import subprocess
|
|
from core import HackingTool, HackingToolsCollection, console
|
|
|
|
from rich.panel import Panel
|
|
from rich.prompt import Prompt
|
|
|
|
|
|
class Web2Attack(HackingTool):
|
|
TITLE = "Web2Attack"
|
|
DESCRIPTION = "Web hacking framework with tools, exploits by python"
|
|
INSTALL_COMMANDS = [
|
|
"sudo git clone https://github.com/santatic/web2attack.git"
|
|
]
|
|
RUN_COMMANDS = ["cd web2attack && sudo python3 w2aconsole"]
|
|
PROJECT_URL = "https://github.com/santatic/web2attack"
|
|
|
|
|
|
class Skipfish(HackingTool):
|
|
TITLE = "Skipfish"
|
|
DESCRIPTION = (
|
|
"Skipfish – Fully automated, active web application "
|
|
"security reconnaissance tool \n "
|
|
"Usage: skipfish -o [FolderName] targetip/site"
|
|
)
|
|
RUN_COMMANDS = [
|
|
"sudo skipfish -h",
|
|
'echo "skipfish -o [FolderName] targetip/site"|boxes -d headline | lolcat'
|
|
]
|
|
|
|
def __init__(self):
|
|
super().__init__(installable=False)
|
|
|
|
|
|
class SubDomainFinder(HackingTool):
|
|
TITLE = "SubDomain Finder"
|
|
DESCRIPTION = (
|
|
"Sublist3r is a python tool designed to enumerate "
|
|
"subdomains of websites using OSINT \n "
|
|
"Usage:\n\t[1] python3 sublist3r.py -d example.com \n"
|
|
"[2] python3 sublist3r.py -d example.com -p 80,443"
|
|
)
|
|
INSTALL_COMMANDS = [
|
|
"sudo pip3 install requests argparse dnspython",
|
|
"sudo git clone https://github.com/aboul3la/Sublist3r.git",
|
|
"cd Sublist3r && sudo pip3 install -r requirements.txt"
|
|
]
|
|
RUN_COMMANDS = ["cd Sublist3r && python3 sublist3r.py -h"]
|
|
PROJECT_URL = "https://github.com/aboul3la/Sublist3r"
|
|
|
|
|
|
class CheckURL(HackingTool):
|
|
TITLE = "CheckURL"
|
|
DESCRIPTION = (
|
|
"Detect evil urls that uses IDN Homograph Attack.\n\t"
|
|
"[!] python3 checkURL.py --url google.com"
|
|
)
|
|
INSTALL_COMMANDS = ["sudo git clone https://github.com/UndeadSec/checkURL.git"]
|
|
RUN_COMMANDS = ["cd checkURL && python3 checkURL.py --help"]
|
|
PROJECT_URL = "https://github.com/UndeadSec/checkURL"
|
|
|
|
|
|
class Blazy(HackingTool):
|
|
TITLE = "Blazy(Also Find ClickJacking)"
|
|
DESCRIPTION = "Blazy is a modern login page bruteforcer"
|
|
INSTALL_COMMANDS = [
|
|
"sudo git clone https://github.com/UltimateHackers/Blazy.git",
|
|
"cd Blazy && sudo pip2.7 install -r requirements.txt"
|
|
]
|
|
RUN_COMMANDS = ["cd Blazy && sudo python2.7 blazy.py"]
|
|
PROJECT_URL = "https://github.com/UltimateHackers/Blazy"
|
|
|
|
|
|
class SubDomainTakeOver(HackingTool):
|
|
TITLE = "Sub-Domain TakeOver"
|
|
DESCRIPTION = (
|
|
"Sub-domain takeover vulnerability occur when a sub-domain "
|
|
"\n (subdomain.example.com) is pointing to a service "
|
|
"(e.g: GitHub, AWS/S3,..)\nthat has been removed or deleted.\n"
|
|
"Usage:python3 takeover.py -d www.domain.com -v"
|
|
)
|
|
INSTALL_COMMANDS = [
|
|
"git clone https://github.com/edoardottt/takeover.git",
|
|
"cd takeover;sudo python3 setup.py install"
|
|
]
|
|
PROJECT_URL = "https://github.com/edoardottt/takeover"
|
|
|
|
def __init__(self):
|
|
super().__init__(runnable=False)
|
|
|
|
|
|
class Dirb(HackingTool):
|
|
TITLE = "Dirb"
|
|
DESCRIPTION = (
|
|
"DIRB is a Web Content Scanner. It looks for existing "
|
|
"(and/or hidden) Web Objects.\n"
|
|
"It basically works by launching a dictionary based "
|
|
"attack against \n a web server and analyzing the response."
|
|
)
|
|
INSTALL_COMMANDS = [
|
|
"sudo git clone https://gitlab.com/kalilinux/packages/dirb.git",
|
|
"cd dirb;sudo bash configure;make"
|
|
]
|
|
PROJECT_URL = "https://gitlab.com/kalilinux/packages/dirb"
|
|
|
|
def run(self):
|
|
uinput = input("Enter Url >> ")
|
|
subprocess.run(["sudo", "dirb", uinput])
|
|
|
|
|
|
class WebAttackTools(HackingToolsCollection):
|
|
TITLE = "Web Attack tools"
|
|
DESCRIPTION = ""
|
|
TOOLS = [
|
|
Web2Attack(),
|
|
Skipfish(),
|
|
SubDomainFinder(),
|
|
CheckURL(),
|
|
Blazy(),
|
|
SubDomainTakeOver(),
|
|
Dirb()
|
|
]
|
|
|
|
if __name__ == "__main__":
|
|
tools = WebAttackTools()
|
|
tools.show_options()
|