LasCC/HackTools
HackTools
HackTools is a browser extension pentesting toolkit designed for offensive security professionals. It serves as a centralized collection of tools for generating payloads, managing penetration testing workflows, and accessing security reference materials within a web-based interface.
The project provides specialized utilities for generating attack strings for XSS, SQL injection, and reverse shells to identify and exploit web vulnerabilities. It includes a data encoding and hashing utility to convert information between various formats for the purpose of bypassing security filters or verifying data integrity.
The toolkit also incorporates a vulnerability search tool that queries CVE databases and aggregates security advisories via RSS feeds. Additionally, it features a web-based security cheat sheet containing curated Linux commands for system auditing and remote data exfiltration.
Features
- Pentesting Toolkits - Serves as a centralized browser-based toolkit for generating payloads and managing pentesting workflows.
- Security Tool Collections - Aggregates a suite of specialized security tools and reference materials into a single browser-based interface.
- Attack Payloads and Wordlists - Generates a wide range of attack payloads for XSS, SQL injection, and file inclusion.
- Web Injection Template Engines - Generates attack strings for XSS and SQL injection by injecting target parameters into predefined patterns.
- CVE Vulnerability Search Engines - Implements a utility for querying CVE databases and aggregating security advisories via RSS feeds.
- Reverse Shell Payloads - Provides language-specific execution strings designed to establish remote command-line access on target systems.
- Security Payload Generators - Automates the creation of XSS, SQL injection, and reverse shell payloads.
- Web Application Penetration Testing - Provides tools for generating payloads to identify and validate vulnerabilities in web applications.
- Browser-Based Interfaces - Integrates various security utilities into a unified dashboard rendered within a web browser.
- Security Cheat Sheets - Includes a centralized reference of common Linux commands and security payloads.
- Data Exfiltration - Facilitates the extraction of sensitive files from remote machines using various transfer methods.
- RSS Feed Aggregators - Aggregates security advisories from external RSS feeds into a centralized vulnerability list.
- Offensive Command Repositories - Provides a library of pre-defined Linux system commands for auditing and remote execution.
- Remote System Exploitation - Includes tools and methods for running remote commands to exfiltrate sensitive data.
- Security Cheat Sheets - Includes a web-based collection of curated Linux commands and security payloads for system auditing.
- Offensive Security Cheatsheets - Provides curated security cheat sheets and reference materials for offensive security tasks.
- Remote Command Execution - Provides a curated list of Linux commands for remote system auditing and administrative tasks.
