sundowndev/hacker-roadmap

A collection of hacking tools, resources and references to practice ethical hacking.

hacker-roadmap's Issues

Blank

Private Web Hacking tools list

Issue with the content : No

Related content : Tools

Feature or enhancement request : Yes

Post Exploitation tools list

Issue with the content : No

Related content : Tools

Feature or enhancement request : Yes

Submit to the security tools list

Name: Cyclops
Language: c++
Support:win 10/Linux/Mac
Description: The Cyclops is a web browser with XSS detection feature, it is chromium-based xss detection that used to find the flows from a source to a sink.
github:https://github.com/v8blink/Chromium-based-XSS-Taint-Tracking/blob/main/README-en.md

1

(Please read CONTRIBUTING.md before posting issues)

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions you've considered.

Additional context
Add any other context or screenshots about the improvement request here.

Yol

Yy6

(Please read CONTRIBUTING.md before posting issues)

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions you've considered.

Additional context
Add any other context or screenshots about the improvement request here.

Exploitation tools list

Issue with the content : No

Related content : Tools

Feature or enhancement request : Yes

Password Attacks tools list

Issue with the content : No

Related content : Tools

Feature or enhancement request : Yes

Wireless Testing tools list

Issue with the content : No

Related content : Tools

Feature or enhancement request : Yes

Web Hacking tools list

Issue with the content : No

Related content : Tools

Feature or enhancement request : Yes

Namebot for Diablo 2

Can someone make me a Namebot for Diablo 2? I'll pay you (also I want to learn how to code)

Sniffing & Spoofing tools list

Issue with the content : No

Related content : Tools

Feature or enhancement request : Yes

Cool

Ethical hacks

Information Gathering tools list

Issue with the content : No

Related content : Tools

Feature or enhancement request : Yes

hacker-roadmap ethical is a dangerous words that uses magic.

On at least the one page Dangerous words you have in use the word ethical. The word ethics has been modified magically with aweful intentions. I will get straight to the point. Ethical is a scam. Anyone that says they are ethical are forced to have bad thoughts go through their head about scamming and stealing. For example, I had $500 in my pocket when I went grocery shopping and I chose Ethical Coffee to buy and when I went through the checkout with maybe $40 worth of stuff I was stuck with a $500 bill due exactly. I knew right away it was the coffee because she stopped running my groceries through and demanded $500 which I gave to her and she handed me the coffee and stopped bagging the rest of my groceries. The stuck the $500 down her pants in her underwear and there was nothing I could do about it. Also after I graduated and was handing out resumes with an seeking employment school and a well informed manager of one of the businesses told me he would never hire anyone with ethical on their resume because it enforces a scam. I was having thoughts of slacking and making it rich and asking for lots of money with the intention of doing nothing. Also he noticed I had grade 11 math and he says (which is true and I already knew this) is that education past grade 10 makes it impossible to solve real world problems such as real math equations not just formulas that produce non legitimate answers. And he would not hire anyone past grade 10 math. Luckily for me I was in a speed course and I was 2 weeks away from graduating and with my grade 11 university entrance course. My math teachers told me already they could see the problems starting where I could no longer solve real world problems. I could feel it in my mind as I tried to solve some of the more difficult problems without using the formulas provided as I usually tried to do. Any, that is school, I am talking about using the word Ethical. Ethical means you will rip people off and scam them. If you have ethics you have the intention of scamming and ripping people off. On you page which I attempted to link to it says the following:

"This repository is an overview of what you need to learn penetration testing and a collection of hacking tools, resources and references to practice ethical hacking. Most of the tools are UNIX compatible, free and open source."

This is going to cause your tools to be used to damage the victims of the computer systems they are used on. All you need to do is drop the word ethical. maybe "mindful" would be a better choice of words. Certainly more safer. Anyway, this msg is long enough. So good luck and please take me seriously, I am trying to help against bad magic. It is possible to connect genes to words and objects that may be how ethical got so screwed up. Those who practice black magic often on the first attempt end up with a large deformity like a giant puss bubble or large cancer pocket coming off their face. Even in video games when you use black magic your player gets attacked by a giant puss bubble on the face. I have seen incredibly viscous attacks gone wrong on bars and establishments where people would walk by everyday and use black magic on the establishment. In one case I investigated an entire biker gang was destroyed and is now reseeded as serial killers interested only in hunting and eating nipples when they were once beautiful, lawful, and organized.

Even if it is just pretend black magic. I've seen it happen first hand. Anyway, good luck replacing all your ethical words. If you need further proof talk to people who took ethical hacking courses and ask them what they learned and how much it cost them. The answers you get put the person in tears.

This project needs a clean-up

Is your feature request related to a problem? Please describe.
Just by going through 3-5 random repos listed here, I've found some awful, awful code that absolutely don't meet the CONTRIBUTING.md rule of

Please don't submit unverified or untested tools. We only want to share tools that have good community of contributors. If you've created a tool, be sure the code is stable and will be maintained.

(emphasis mine)

Describe the solution you'd like

• A higher standard to hold repo code quality to, or
• A sort though currently listed repos and removing poor quality repos.

Additional context
I've found multiple issues looking through only a fraction of the repos listed. The worst offender is probably https://github.com/Manisso/Crips. Here are a few of the problems with it, including in the opening lines

d3=os.system("curl http://ipinfo.io/ip")
os.system("clear && clear && clear")

• I assume this call is to get the IP address of the user? Not only is this outside of the scope of the tool and otherwise unnecessary, there much better ways to use it than shelling out to a platform-dependent program accessing a random host via http.
• As stated previously, not only is curl effectively exclusively available on UNIX/UNIX-like platforms, it doesn't, as far as i'm aware, come with macOS, limiting this script to most Linux distros. On top of that, this isn't the only call to curl, and clearly not the only use of os.system. But of course, the creator still gives install instructions for Windows, never mentioning the curl dependency. curl is generally used throughout the file, rather than say, request.
• os.system("clear && clear && clear"). Seriously? I get that they're trying to make an epikx hax0r tool but please, please leave clearing the screen up to the user. And again, the use of clear through a fucking shell call restricts this to UNIX/UNIX-like systems.
  And that's just in the first two lines.
• Its install and update scripts are written in Bash, rather than being remotely competent and using pip, the tool packaged with Python for this EXACT job.
• Oh and of course its filled with gamer ascii art and "greetz" (with facebook links!) to the "fsociety team", including in the update.sh script that not only spams clear but uses rm -rf on a directory created by the user. Jesus. Fucking. Christ.

---

Reading through some of this code makes your intro to your repo incredibly ironic:

Read books, manuals, articles, be curious and not just a script kiddie.
Because it seems like half of these tools were written by them.

If you're interested in cleaning up the repo, I'd gladly go through and remove blatantly poorly written code. Regardless, this project is on the trending for today section on GitHub, please consider having a higher barrier for entry.

Road map overview

Issue with the content : No

Related content : Guide

Feature or enhancement request : Yes

An overview of languages, tools and requirements to learn pen testing.