Skip to content

README.md

Latest commit

 

History

History
238 lines (176 loc) · 5.37 KB

README.md

File metadata and controls

238 lines (176 loc) · 5.37 KB
Raw

🛠 Hacking Tools Collection

A single-file Python toolkit for CTF players, pentesting students, and security hobbyists. It combines utilities for:

  • Encoding/decoding
  • Crypto attacks and helpers
  • Reverse engineering triage
  • Web testing payload helpers
  • Forensics helpers
  • OSINT helpers
  • Networking quick checks
  • General CTF utilities

Main script: hacking.py

📦 Installation

git clone https://github.com/CodeRabbit-byte/Hacking-tools.git
cd Hacking-tools
python3 -m venv .venv
source .venv/bin/activate
pip install -U pip
pip install pycryptodome gmpy2 requests owiener pyperclip

The tool still runs without optional packages, but some features will be limited.

🚀 Quick Start

1) Launch interactive mode

python3 hacking.py

This opens the main menu where you can navigate by entering the numbered options.

2) Decode a string directly from CLI

python3 hacking.py --magic "ZmxhZ3t0b29sa2l0fQ=="

3) Auto-triage a file from CLI

python3 hacking.py --auto ./sample.bin

🧭 Elaborate Usage Guide

1. Encoding / Magic Decoder

Best for

  • Unknown encoded strings
  • CTF flags hidden through layered encoding

Workflow

  1. Choose Encoding / Magic Decoder from main menu.
  2. Paste your input.
  3. Review all decode attempts (Base64, Base32, Base85, hex, binary, ROT13, Caesar, decimal ASCII, morse, URL, HTML).
  4. If a flag-like pattern is found, it is highlighted automatically.

Tip

If a result looks partially readable, feed that output back into magic decode again.

2. Cryptography Attacks

Included

  • RSA small exponent
  • RSA common modulus
  • RSA Wiener attack
  • RSA Fermat factorization
  • Manual RSA decrypt
  • Vigenère crack
  • XOR crack
  • Hash identify + wordlist brute-force
  • AES-ECB pattern analysis
  • Padding-oracle concept demo

Typical RSA solve path

  1. Try Small exponent first when e=3 and plaintext was unpadded.
  2. If same n appears with two exponents, try Common modulus.
  3. If d suspected small, try Wiener.
  4. If p≈q, try Fermat.
  5. Fall back to Manual decrypt when parameters are known.

Example: hash brute force

python3 hacking.py
# Crypto -> Hash brute force
# Enter target hash + wordlist + algo

3. Reverse Engineering Toolkit

Included

  • Full recon sweep
  • String extraction with regex filters
  • Function disassembly wrapper
  • Binary byte patching
  • Anti-debug pattern checks
  • ELF header parser
  • RE checklist

Recommended workflow

  1. Run full recon.
  2. Extract strings and search flag|key|pass|secret.
  3. Disassemble suspicious functions (main, check_flag, etc.).
  4. Patch conditional jumps if needed.
  5. Re-run and compare behavior.

4. Web Security Toolkit

Included

  • SQLi probes (error/boolean/time style checks)
  • XSS payload bank
  • LFI helper
  • JWT helper actions
  • Directory brute helper
  • SSRF payload generator
  • Parameter fuzzer
  • Raw HTTP requester

Practical usage

  • Use it as a payload + workflow assistant, not a scanner replacement.
  • Keep legal scope boundaries strict (CTF/labs/authorized targets only).

5. Forensics Toolkit

Included

  • File-type and metadata checks
  • Steganography helper commands
  • PCAP analysis helper
  • File carving helper
  • Hex viewer
  • PNG LSB extractor
  • Entropy calculator

Workflow

  1. Start with file analysis and entropy.
  2. Pull metadata.
  3. Try strings/hex/LSB.
  4. Carve with binwalk if suspicious archive data exists.

6. OSINT Toolkit

Included

  • Domain/IP recon helper
  • Email header analyzer
  • Image metadata guidance
  • Username search guidance
  • Geolocation helper
  • Google dork builder

Note

Some modules provide command/query templates so you can execute quickly with your preferred tools.

7. Networking Toolkit

Included

  • Port scanner
  • Banner grabber
  • Netcat helper
  • Nmap wrapper
  • Protocol/hex decode helper

Suggested order

  1. Basic port scan.
  2. Banner grab on live ports.
  3. Deepen with nmap scripts and service versioning.

8. Utilities

Included

  • Number base conversion
  • String/byte/int conversion
  • Flag finder regex helper
  • URL encode/decode
  • Random payload generator
  • Flag format validator
  • ROT brute
  • Frequency analysis
  • One-liner cheatsheet

Good use cases

  • Quickly validate candidate flags.
  • Convert challenge values across decimal/hex/binary.
  • Generate test payloads for local exploit prototyping.

🧪 Running the test suite

A local automated unit test suite is included.

python3 -m unittest -v tests/test_hacking.py
python3 -m py_compile hacking.py tests/test_hacking.py

The tests cover key deterministic behavior such as decoding helpers, conversion tools, hash identification flow, command execution wrapper behavior, and auto-triage text handling. They also include an in-repo local test website (tests/example.py) used to exercise web/network features like SQLi, LFI, parameter fuzzing, and HTTP request handling in a controlled environment.

⚠️ Important Notes

  • This project is intended for CTFs, labs, and authorized security testing only.
  • Some modules call external binaries (strings, objdump, readelf, nmap, etc.). Install those tools for full functionality.
  • Optional Python dependencies are auto-detected at runtime.

⭐ Purpose

Reduce repetitive CTF workflow friction so you can focus on analysis and solving.