hackingtool

AI-guided, all-in-one toolkit for authorized security testing

219 curated tools across 21 categories — recon, OSINT, web, wireless, phishing, forensics, post-exploitation and more — with an AI layer that turns plain English into the right tool and the exact command.

Built for penetration testers · red teamers · blue-team/SOC and DFIR analysts · OSINT researchers · bug-bounty hunters · CTF players · security researchers and students — all working legally, on systems they own or are authorised to test.

_{Sponsored by}


Go beyond manual recon. WebVetted turns an email, phone or username into a complete identity investigation with deep OSINT enrichment, breach intel, AI analysis, and an interactive identity graph.

Start an Investigation →

       

     

Contents

• Why hackingtool
• Tool Categories
• Installation
  • From source with pipx (recommended)
  • For development
  • Docker
  • Optional runtimes
• Quick Commands
  • Command reference
• Features
  • 🔎 /find — a tool for a need you don't have yet
  • 🎯 /goal — plan an objective, run it one step at a time
  • 🧠 Recommendations — say what you want in plain English
  • 🏷 Tags and search
  • ▶ Background panes (tmux)
  • ⚙ Settings and the AI layer
  • 📋 Headless engagements
• Documentation
• Contributing
• Support & Sponsor
• Social

Why hackingtool

• 🧠 AI-guided workflow — describe what you want ("find subdomains of example.com") and it maps your intent to the right tools, hands you the exact documented command, plans an objective step by step, then summarizes findings and drafts an engagement report. Bring your own key or run a local model — nothing auto-executes and nothing is fabricated.
• 🗂 219 curated tools, one interactive console — type to search every tool, then install and run across 21 categories without hunting down Git repos; a fixed tag taxonomy (63 tags in use) makes every tool discoverable.
• 🔎 It knows what it doesn't have — /find searches your catalog first, then the GitHub API, and shows real maintained projects with the reason each was ranked.
• 🛡 Safe by default — standard installs, no curl | bash, downloads pinned + SHA-256 verified, list-form subprocess, no forced sudo, and signed releases with an SBOM.
• 🎯 For the whole spectrum — red team, blue team, OSINT, bug bounty, CTF/THM, forensics/IR — all on authorized targets only.

_{The interactive console on launch — browse categories, type to search every tool, and / opens the command palette.}

Tool Categories

219 tools across 21 categories — the full list, with links and tags, is in docs/TOOLS.md.