z4nzu/hackingtool
ALL IN ONE Hacking Tool For Hackers
How hackingtool is put together
hackingtool is a Python 3.10+ terminal application (src-layout package) that acts as a launcher/console for 215 curated security-testing tools across 21 categories. Tool metadata lives as declarative YAML catalogs and Python classes under src/hackingtool/tools/, while the interactive REPL (prompt_toolkit/rich) resolves user intent to tools, optionally using an AI layer (Ollama or OpenAI-compatible endpoints) that maps plain-English requests to documented commands without auto-executing them. External tools are installed/run via shell commands, background execution is delegated to a dedicated detached tmux session, and per-user state (config.json plus a 0600 .env for secrets) lives under ~/.hackingtool/. There are no servers, databases, or network services in this repo itself; it is a local CLI orchestrator.
Languages
Frameworks
Infrastructure
Major components
CLI entrypoint & REPL (cli.py, repl.py, prompt.py)
Provides the `hackingtool` console command, slash-command palette (/config, /find, /goal, /run), and interactive REPL loop.
Tool model & collections (core.py)
Defines HackingTool and HackingToolsCollection base classes carrying TITLE, DESCRIPTION, INSTALL_COMMANDS, RUN_COMMANDS, PROJECT_URL, SUPPORTED_OS.
Catalog & registry (registry.py, catalog/*.yaml)
Loads the 21 YAML category catalogs shipped as package data and resolves tools at runtime via __file__.
Category tool modules (tools/*.py)
One module per category (cloud_security, mobile_security, wireless_attack, etc.) declaring concrete tool wrappers with pinned install/run commands.
AI layer (ai_command.py, ai_goal.py, ai_recommend.py, ai_report.py, ai_summary.py)
Maps plain-English intent to tools/commands, plans objectives step-by-step, searches GitHub for missing tools (/find), and drafts engagement reports against Ollama or OpenAI-compatible providers.
Configuration system (config.py, config_ui.py)
Persists validated settings to ~/.hackingtool/config.json, scaffolds first-run files, and offers a full-screen modal settings editor where the API key is set via masked input into .env only.
Background execution (session.py)
Wraps tmux to open labeled windows in one detached 'hackingtool' session for /run <tool> &, using list-form subprocess only.
Engagement workflow (engagement.py, findings.py, report.py, orchestrator.py, skill.py)
Tracks findings across an authorized engagement, orchestrates multi-step pipelines (pipelines/recon.yaml), and generates reports informed by packaged methodology docs.
A single maintenance change added a configuration file for external integrations.
The past few weeks saw a major overhaul of the project, culminating in a 3.0.0 release that introduced an AI operator console with 215 curated tools and a new discovery feature. Housekeeping followed, including image optimizations and removal of the old changelog. Most recently, a configuration file was added to support external tooling integration.
Week by week
2026-08-17A single maintenance change added a configuration file for external integrations.latest1 change
Chore
Added context7.json
A new context7.json file was added containing a URL and public key, likely to help external tools or services connect to the project.
2026-07-20The project shipped its biggest update yet: version 3.0.0 with a brand-new AI-powered console.4 changes
Feature
AI operator console (v2.0.0 rework)
A redesigned interface was built around an AI layer that organizes 215 curated tools and lets users discover them through a /find search command.
Chore
Released version 3.0.0
The project cut a major new release marking the completion of this rework.
Docs
Removed CHANGELOG.md
The old changelog file was dropped from the documentation, likely in favor of automated release notes.
Refactor
Optimized images
An automated bot compressed the repository's images to reduce file sizes without visible quality loss.
Dependencies and code review
Dependency advisories
Security Watch
No known advisories across 0 scanned dependencies.
No known advisories in the scanned dependencies.
Code review
No concrete code-level issues confirmed.
Get this report every week for your repos.
GitZoid learns each repo, reports what changed, and flags what needs attention. One flat price for the whole team.
$19 a month, flat · First 10 outputs free · No card required