Z4nzu/hackingtool

What it solves

It simplifies the process of finding, installing, and running security testing tools. Instead of manually searching for repositories and remembering complex command-line arguments, users can manage a curated library of 215 tools across 21 categories (such as OSINT, wireless, and web attacks) through a single console.

How it works

The project provides a unified interface that maps plain-English requests to specific tools and commands. It uses an optional AI layer (via OpenAI-compatible endpoints or local Ollama models) to translate user intent into a plan of action or tool recommendations. It also integrates with the GitHub API to suggest new tools for needs not met by the catalog. For long-running tasks, it uses tmux to run tools in background panes.

Who it’s for

It is designed for authorized security professionals, including penetration testers, red teamers, blue-team/SOC analysts, bug-bounty hunters, and security students working on systems they own or are authorized to test.

Highlights

• AI-Guided Workflow: Translates natural language descriptions of goals into specific tool recommendations and step-by-step execution plans.
• Curated Tool Catalog: Access to 215 vetted tools across 21 categories with a fixed tag taxonomy for easy discovery.
• Safe Execution: Uses pinned downloads with SHA-256 verification and list-form subprocesses to avoid curl | bash patterns.
• Background Management: Integration with tmux allows users to run long scans in detached panes without blocking the main console.
• Headless Mode: An orchestrator that can normalize tool output into JSON and generate deterministic or AI-summarized reports.