Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.
Awesome Lists | Featured Topics | Projects
https://github.com/hueristiq/web-hacking-toolkit

A web hacking toolkit (docker image).
https://github.com/hueristiq/web-hacking-toolkit
bug-bounty bugbounty bugbounty-tool docker docker-image docker-images dockerhub hacker-tools hacking nmap osint penetration-testing pentesting recon reconnaissance web-hacking web-hacking-tool web-hacking-toolkit web-security
Last synced: about 1 month ago
JSON representation
A web hacking toolkit (docker image).
Host: GitHub
URL: https://github.com/hueristiq/web-hacking-toolkit
Owner: hueristiq
License: mit
Created: 2021-10-16T15:47:52.000Z (about 3 years ago)
Default Branch: main
Last Pushed: 2023-01-31T10:11:30.000Z (almost 2 years ago)
Last Synced: 2024-08-05T17:39:34.498Z (4 months ago)
Topics: bug-bounty, bugbounty, bugbounty-tool, docker, docker-image, docker-images, dockerhub, hacker-tools, hacking, nmap, osint, penetration-testing, pentesting, recon, reconnaissance, web-hacking, web-hacking-tool, web-hacking-toolkit, web-security
Language: Makefile
Homepage: https://hub.docker.com/r/hueristiq/web-hacking-toolkit
Size: 223 MB
Stars: 159
Watchers: 2
Forks: 30
Open Issues: 1
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
Awesome Lists containing this project

awesome-hacking-lists - hueristiq/web-hacking-toolkit - A web hacking toolkit (docker image). (Makefile)
README

        
Web Hacking ToolKit




	

		

	

	

		

	

	

		

	

	

		

	

	

		

	





	

		

	

	

		

	

	

		

	

	

		

	



A web hacking toolkit (docker image).

## Resources

* [Installation](#installation)

	* [Docker](#docker)

	* [Docker Compose](#docker-compose)

	* [Build from Source](#build-from-source)

* [GUI Support](#gui-support)

	* [Using SSH with X11 forwarding](#using-ssh-with-x11-forwarding)

* [Toolkit Setup](#toolkit-setup)

	* [System](#system)

	* [Tools](#tools)

	* [Wordlists](#wordlists)

* [Contribution](#contribution)

## Installation

### Docker

Pull the image from Docker Hub:

```bash

docker pull hueristiq/web-hacking-toolkit

```

Run a container and attach a shell:

```bash

docker run \

	-it \

	--rm \

	--shm-size="2g" \

	--name web-hacking-toolkit \

	--hostname web-hacking-toolkit \

	-p 22:22 \

	-v $(pwd)/data:/root/data \

	hueristiq/web-hacking-toolkit \

	/bin/zsh -l

```

### Docker Compose

Docker-Compose can also be used.

```yaml

version: "3.9"

services:

    web-hacking-toolkit:

        image: hueristiq/web-hacking-toolkit

        container_name: web-hacking-toolkit

        hostname: web-hacking-toolkit

        stdin_open: true

        shm_size: 2gb # increase shared memory size to prevent firefox from crashing

        ports:

            - "22:22" # exposed for GUI support sing SSH with X11 forwarding

        volumes:

            - ./data:/root/data

        restart: unless-stopped

```

Build and run container:

```bash

docker-compose up

```

Attach shell:

```bash

docker-compose exec web-hacking-toolkit /bin/zsh -l

```

### Build from Source

Clone this repository and build the image:

```bash

git clone https://github.com/hueristiq/web-hacking-toolkit.git && \

cd web-hacking-toolkit && \

make build-image

```

Run a container and attach a shell:

```bash

make run

```

## GUI Support

By default, no GUI tools can be run in a Docker container as no X11 server is available. To run them, you must change that. What is required to do so depends on your host machine. If you:

* run on Linux, you probably have X11

* run on Mac OS, you need Xquartz (`brew install Xquartz`)

* run on Windows, you have a problem

### Using SSH with X11 forwarding

Use X11 forwarding through SSH if you want to go this way. Run `start_ssh` inside the container to start the server, make sure you expose port 22 when starting the container: `docker run -p 127.0.0.1:22:22 ...`, then use `ssh -X ...` when connecting (the script prints the password).

## Tookit Setup

* System Setup

	* Terminal

		* Shell ([ZSH](https://www.zsh.org/))

		* Session Manager ([TMUX](https://github.com/tmux/tmux))

	* Browser

		* [Chrome](https://www.google.com/chrome/)

		* [Firefox](https://www.mozilla.org/en-US/firefox/new/)

			

			Installed Addons

			| Addons | Description |

			| :------- | :---------- |

			| [Privacy Badger](https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/) | Automatically learns to block invisible trackers. |

			| [Disable WebRTC](https://addons.mozilla.org/en-US/firefox/addon/happy-bonobo-disable-webrtc/) | WebRTC leaks your actual IP addresses from behind your VPN, by default. |

			| [Shodan](https://addons.mozilla.org/en-US/firefox/addon/shodan-addon/) | The Shodan plugin tells you where the website is hosted (country, city), who owns the IP and what other services/ ports are open. |

			| [Wappalyzer](https://addons.mozilla.org/en-US/firefox/addon/wappalyzer/) | Identify technologies on websites. |

			| [Bulk URL Opener](https://addons.mozilla.org/en-GB/firefox/addon/bulkurlopener/) | Allows user to open a list of url in one click. |

			| [TWP - Translate Web Pages](https://addons.mozilla.org/en-US/firefox/addon/traduzir-paginas-web/) | Translate your page in real time using Google or Yandex. |

			| [User-Agent Switcher and Manager](https://addons.mozilla.org/en-US/firefox/addon/user-agent-string-switcher/) | Spoof websites trying to gather information about your web navigation—like your browser type and operating system—to deliver distinct content you may not want. |

			| [HTTP Header Live](https://addons.mozilla.org/en-US/firefox/addon/http-header-live) | Displays the HTTP header. Edit it and send it. |

			| [Cookie-Editor](https://addons.mozilla.org/en-US/firefox/addon/cookie-editor/) | Cookie-Editor lets you efficiently create, edit and delete a cookie for the current tab. Perfect for developing, quickly testing or even manually managing your cookies for your privacy. |

			| [TempMail](https://addons.mozilla.org/en-US/firefox/addon/temp-mail/) | Temporary disposable email address. Protect your email from spam, bots and phishing with Temp-Mail. |

			| [FoxyProxy](https://addons.mozilla.org/en-US/firefox/addon/foxyproxy-standard/) | FoxyProxy is an advanced proxy management tool that completely replaces Firefox's limited proxying capabilities. |

			| [Firefox Multi-Account Containers](https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers/) | Firefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs. Cookies are separated by container, allowing you to use the web with multiple accounts and integrate Mozilla VPN for an extra layer of privacy. |

			

	* Remote Connection

		* SSH

* Development

	* Text Editor

		* [vim](https://www.vim.org/)

	* Programming Languages

		* [Go (Golang)](https://go.dev/)

		* [python3](https://www.python.org/downloads/)

Tools

| Name | Description |

| :--- | :---------- |

| [amass](https://github.com/OWASP/Amass) | In-depth Attack Surface Mapping and Asset Discovery |

| [anew](https://github.com/tomnomnom/anew) | A tool for adding new lines to files, skipping duplicates |

| [arjun](https://github.com/s0md3v/Arjun) | HTTP parameter discovery suite. |

| [Burp Suite Community](https://portswigger.net/burp) | The BurpSuite Project  community edition. |

| [cdncheck](https://github.com/enenumxela/cdncheck) | A CLI wrapper for ProjectDiscovery's cdncheck library - "Helper library that checks if a given IP belongs to known CDN ranges (akamai, cloudflare, incapsula and sucuri)". |

| [cero](https://github.com/glebarez/cero) | Scrape domain names from SSL certificates of arbitrary hosts |

| [commix](https://github.com/commixproject/commix) | Automated All-in-One OS Command Injection Exploitation Tool. |

| [crlfuzz](https://github.com/dwisiswant0/crlfuzz) | A fast tool to scan CRLF vulnerability written in Go |

| [crobat](https://github.com/cgboal/sonarsearch) | A rapid API for the Project Sonar dataset |

| [curl](https://github.com/curl/curl) | A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, MQTT, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features |

| [dalfox](https://github.com/hahwul/dalfox) | waning_crescent_moonfox_face DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang |

| dnsutils | - |

| [dnsvalidator](https://github.com/vortexau/dnsvalidator) | Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses. |

| [dnsx](https://github.com/projectdiscovery/dnsx) | dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers. |

| [dotdotpwn](https://github.com/wireghoul/dotdotpwn) | DotDotPwn - The Directory Traversal Fuzzer |

| [duplicut](https://github.com/nil0x42/duplicut) | Quickly dedupe massive wordlists, without changing the order |

| [ffuf](https://github.com/ffuf/ffuf) | Fast web fuzzer written in Go |

| [findomain](https://github.com/Edu4rdSHL/findomain) | The fastest 

| [gin](https://github.com/sbp/gin) | Git index file parser, using python3 |

| [gowitness](https://github.com/sensepost/gowitness) | gowitness - a golang, web screenshot utility using Chrome Headless |

| [gotator](https://github.com/Josue87/gotator) | Gotator is a tool to generate DNS wordlists through permutations. |

| [grep](https://www.gnu.org/software/grep/) | Grep searches one or more input files for lines containing a match to a specified pattern. |

| [hakrevdns](https://github.com/hakluke/hakrevdns) | Small, fast, simple tool for performing reverse DNS lookups en masse. |

| [hqcrawl3r](https://github.com/hueristiq/hqcrawl3r) | A fast web crawler. |

| [hqnotifi3r](https://github.com/hueristiq/hqnotifi3r) | A helper utility to send messages from CLI to Slack.. |

| [hqsubfind3r](https://github.com/hueristiq/hqsubfind3r) | A subdomain discovery tool - it gathers a list of subdomains passively using various online sources. |

| [hqs3scann3r](https://github.com/hueristiq/hqs3scann3r) | A tool to scan AWS S3 bucket permissions. |

| [hqurl](https://github.com/hueristiq/hqurl) | A go(golang) utility for URLs parsing & pull out bits of the URLS. |

| [hqurlfind3r](https://github.com/hueristiq/hqurlfind3r) | A passive reconnaissance tool for known URLs discovery - it gathers a list of URLs passively using various online sources. |

| [hqurlscann3r](https://github.com/hueristiq/hqurlscann3r) | A web application attack surface mapping tool. It takes in a list of urls then performs numerous probes |

| [httpx](https://github.com/projectdiscovery/httpx) | httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. |

| [interlace](https://github.com/codingo/Interlace) | Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support. |

| [joomscan](https://github.com/OWASP/joomscan) | OWASP Joomla Vulnerability Scanner Project |

| [jq](https://github.com/stedolan/jq) | Command-line JSON processor |

| [mapcidr](https://github.com/projectdiscovery/mapcidr) | Small utility program to perform multiple operations for a given subnet/CIDR ranges. |

| [masscan](https://github.com/robertdavidgraham/masscan) | TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. |

| [massdns](https://github.com/blechschmidt/massdns) | A high-performance DNS stub resolver. |

| [naabu](https://github.com/projectdiscovery/naabu) | A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests |

| net-tools | - |

| [nmap](https://github.com/nmap/nmap) | Nmap - the Network Mapper. Github mirror of official SVN repository. |

| [nmap-utils](https://github.com/enenumxela/nmap-utils) | Scripts to process nmap results. |

| [nuclei](https://github.com/projectdiscovery/nuclei) | Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use. |

| [ping](https://github.com/iputils/iputils) | Tools to test the reachability of network hosts. |

| [ps.sh](https://github.com/enenumxela/ps.sh) | A wrapper around tools used for port scanning(nmap, naabu & masscan), the goal being reducing scan time, increasing scan efficiency and automating the workflow. |

| [puredns](https://github.com/d3mondev/puredns) | Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.  |

| [sqlitebrowser](https://sqlitebrowser.org/) | A high quality, visual, open source tool to create, design, and edit database files compatible with SQLite. |

| [sqlmap](https://github.com/sqlmapproject/sqlmap) | Automatic SQL injection and database takeover tool |

| [subdomains.sh](https://github.com/hueristiq/subdomains.sh) | A wrapper around tools used for subdomain enumeration, to automate the workflow, on a given domain, written in bash. |

| [subfinder](https://github.com/projectdiscovery/subfinder) | Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing. |

| [waf00f](https://github.com/EnableSecurity/wafw00f) | The Web Application Firewall Fingerprinting Tool. |

| [webanalyze](https://github.com/rverton/webanalyze) | Port of [Wappalyzer](https://github.com/AliasIO/Wappalyzer) (uncovers technologies used on websites) to automate mass scanning. |

| whois | whois - client for the whois directory service |

| [whatweb](https://github.com/urbanadventurer/WhatWeb) | Next generation web scanner. |

| [whois](https://github.com/rfc1036/whois) | client for the whois directory service |

| [wpscan](https://github.com/wpscanteam/wpscan) | WordPress Security Scanner |

| [wuzz](https://github.com/asciimoo/wuzz) | Interactive cli tool for HTTP inspection |

| [Zed Attack Proxy (ZAP)](https://www.zaproxy.org/) | an open-source web application security scanner. |

Lists

| Wordlist | Description |

| :------- | :---------- |

| [lists](https://github.com/hueristiq/lists.git) | A collection of lists for asset and content discovery. |

## Contribution

[Issues](https://github.com/hueristiq/web-hacking-toolkit/issues) and [Pull Requests](https://github.com/hueristiq/web-hacking-toolkit/pulls) are welcome!