Trix-Framework

More Than 195 Web Hacking Tools 🔫

Usage:-

git clone https://github.com/TrixSec/Trix-Framework/
cd Trix-Framework
python3 frameworkcli.py

CVE Identifier: CVE-2015-57115

Description: Certain PHP applications are vulnerable to a path traversal attack, allowing attackers to access files outside the intended directory by exploiting vulnerabilities in the URL handling or file processing mechanisms.

Impact: Unauthorized access to sensitive files on the server, which could include configuration files, environment variables, or logs.

Affected Software: This vulnerability affects various PHP applications, particularly those with improper path handling or file access controls.

Checker

New tool soon

Waymap - Web Vulnerability Scanner

Version: 1.0.3
Author: Trix Cyrus
Copyright: © 2024 Trixsec Org

What is Waymap?

Waymap is a fast and optimized web vulnerability scanner built for penetration testers. It helps in identifying vulnerabilities such as SQL Injection and Command Injection by testing against various payloads.

Installation and Usage

1. Clone the repository:

git clone https://github.com/TrixSec/waymap.git

2. Install the required dependencies:

pip install .

3. Run Waymap:

python waymap.py --crawl 1 --scan sql --target https://example.com

python waymap.py -h

---
Follow Us on Telegram

Stay updated with the latest tools and hacking resources.

Happy Hacking!

~ TrixSec

#sqlinjection #commandinjection #hacking #vulnscanner

Demo video waymap

https://github.com/TrixSec/waymap

v2.4.1
added new scanning module: --scan crlf(Carriage Return and Line Feed)
added custom threading count in crlf
added a more advanced crawler to waymap can crawl at any depth
added custom threading in crawling
added new user-agents in ua.txt
fixed major bugs/errors

Give a Star to repo if you haven't yet

Mass url checker

Check / seperate/ save url with code 200

Useful in cracking logs

CVE-2019-16172:

A stored XSS vulnerability in LimeSurvey allows attackers to execute arbitrary JavaScript by exploiting improperly validated user input when creating survey groups.

Scanner: CVE-2019-16172

https://navy.mil.bd/ dbs hacked

Http proxies

Fast proxy checker

Save proxy in proxy.txt before starting
Output will be in http.txt

Mass url checker V2

#threading

Author and Contributions
Author: Trix Cyrus
Developed by: TrixSec Org
Current Version: v1.1
Maintained: Yes


Hash-Hammer 🔨
Hash-Hammer is a multi-threaded hash-cracking tool designed for security testing and educational purposes.It supports both brute-force and dictionary-based password cracking modes.

Features
- Multi-threaded: Speed up hash cracking by using multiple threads.
- Two cracking modes:
- Brute-force Mode: Generate password combinations based on a defined character set.
- Dictionary/Password File Mode: Use a custom password file to find the matching hash.
- Real-time statistics: Display checked passwords, remaining attempts, and speed.

-- Currently Supported Hash Algorithm
- MD5

## Version 1.1
- Added Hash Algo - MD5
- Multi Threading
- Dictonary Based Cracking
- Bruteforce Based Cracking

--------- More - Updates - Soon ----------

Usage
Clone the Repository

git clone https://github.com/TrixSec/Hash-Hammer.git

cd Hash-Hammer

Compile
You’ll need to have OpenSSL and GCC installed to compile the tool. To compile:

gcc -o hash-hammer hash_hammer.c -lssl -lcrypto -pthread

Run
To execute the tool:

./hash-hammer

Requirements
- Libraries: OpenSSL (for MD5 hashing), pthread (for multi-threading)
- Compiler: GCC or compatible C compiler

Disclaimer
This tool is intended for educational purposes and authorized security testing only. Unauthorized use on third-party systems is illegal and punishable by law.

Destructive Linux Commands

1. :

> /dev/sda

This command directly writes empty data to the specified drive (/dev/sda), completely erasing everything on it. Similar to dd but potentially faster at causing damage.

2.

mv / /dev/null

Redirects the root directory (/) to /dev/null, effectively deleting the entire filesystem by moving it to a "black hole."

3.

chmod -R 000 /

This recursively sets all files and directories in the root directory to have no permissions (000), making everything on the system inaccessible, including essential system files.

4.

chown -R nobody:nogroup /

Changes ownership of every file on the system to nobody:nogroup, which can render the entire system unstable and unusable, as permissions would be invalidated.

5.

find / -type f -exec shred -n 5 -z -u {} \;

This command locates every file (-type f) on the system and overwrites each file with random data five times (-n 5), then zeroes out (-z) and deletes (-u) each file. This is almost impossible to recover from.

6.

yes > /dev/sda

Continuously writes the text “yes” to the specified drive until it’s full, resulting in data corruption and data loss on that drive.

7.

rm -rf --no-preserve-root /

Similar to rm -rf /, but the --no-preserve-root option disables the failsafe that usually prevents the deletion of the root directory.

8.

iptables -F && iptables -X && iptables -t nat -F && iptables -t nat -X

Flushes all firewall rules and policies, leaving the system vulnerable to external attacks with no network filtering or protections.

9.

echo 1 > /proc/sys/kernel/panic

Modifies the kernel to cause an immediate kernel panic, forcing the system to crash and restart. This doesn’t delete data but can lead to an unstable system and possible data corruption.

10.

rm -rf /

This command recursively removes (-r) all files (-f) starting from the root directory /, effectively deleting everything on the system.

11.

:(){ :|: & };:

Known as a "fork bomb," this command creates a large number of processes very quickly, consuming system resources and causing the system to freeze or crash.

12.

mkfs.ext4 /dev/sda

This command reformats the drive specified (in this case, /dev/sda). Running this on an active partition, such as your root or home partition, will erase all data on that drive.

13.

dd if=/dev/zero of=/dev/sda

This command overwrites the specified drive (/dev/sda) with zeros, effectively wiping all data on it.

14.

> filename

This command replaces the contents of the specified file (filename) with nothing, effectively deleting its content. If run on critical system files, it could render the system unusable.

Join : https://t.me/Trixsecchat

---

🚀 Introducing IPVulnScout!🚀

Hey everyone! I’m excited to share my latest project, IPVulnScout. This tool helps you quickly check for vulnerabilities in IP addresses and fetch detailed information about CVEs.

🔍 Features:
- IP Vulnerability Checking
- CVE Information Retrieval

🔧 Get started by cloning the repo and installing the required packages. Check it out here: IPVulnScout

Your feedback is appreciated! Let’s enhance our security together! 🔐

---

Tap to get tool