Z4nzu / hackingtool

### AI-guided, all-in-one toolkit for authorized security testing
**219 curated tools across 21 categories** — recon, OSINT, web, wireless, phishing,
forensics, post-exploitation and more — with an **AI layer that turns plain English
into the right tool and the exact command**.
**Built for** penetration testers · red teamers · blue-team/SOC and DFIR analysts ·
OSINT researchers · bug-bounty hunters · CTF players · security researchers and
students — all working **legally, on systems they own or are authorised to test**.
 Sponsored by 
 Go beyond manual recon. WebVetted turns an email, phone or username into a complete identity investigation with deep OSINT enrichment, breach intel, AI analysis, and an interactive identity graph. 
 Start an Investigation → 
---
## Contents
- Why hackingtool
- Tool Categories
- Installation
 - From source with pipx (recommended)
 - For development
 - Docker
 - Optional runtimes
- Quick Commands
 - Command reference
- Features
 - 🔎 `/find` — a tool for a need you don't have yet
 - 🎯 `/goal` — plan an objective, run it one step at a time
 - 🧠 Recommendations — say what you want in plain English
 - 🏷 Tags and search
 - ▶ Background panes (tmux)
 - ⚙ Settings and the AI layer
 - 📋 Headless engagements
- Documentation
- Contributing
- Support & Sponsor
- Social
---
## Why hackingtool
- **🧠 AI-guided workflow** — describe what you want ("find subdomains of example.com")
 and it maps your intent to the right tools, hands you the exact documented command,
 plans an objective step by step, then summarizes findings and drafts an engagement
 report. Bring your own key or run a local model — nothing auto-executes and nothing
 is fabricated.
- **🗂 219 curated tools, one interactive console** — type to search every tool, then
 install and run across 21 categories without hunting down Git repos; a fixed tag
 taxonomy (63 tags in use) makes every tool discoverable.
- **🔎 It knows what it doesn't have** — `/find` searches your catalog first, then the
 GitHub API, and shows real maintained projects with the reason each was ranked.
- **🛡 Safe by default** — standard installs, **no `curl | bash`**, downloads pinned +
 SHA-256 verified, list-form `subprocess`, no forced `sudo`, and
 signed releases with an SBOM.
- **🎯 For the whole spectrum** — red team, blue team, OSINT, bug bounty, CTF/THM,
 forensics/IR — all on **authorized targets only**.
 The interactive console on launch — browse categories, type to search every tool, and / opens the command palette. 
---
## Tool Categories
**219 tools across 21 categories** — the full list, with links and tags, is in
**docs/TOOLS.md**.
| # | Category | Tools | | # | Category | Tools |
|:---:|---|:---:|---|:---:|---|:---:|
| 1 | 🛡 Anonymously Hiding Tools | 5 | | 12 | 🔁 Reverse engineering tools | 10 |
| 2 | 🔍 Information gathering tools | 26 | | 13 | ⚡ DDOS Attack Tools | 7 |
| 3 | 📚 Wordlist Generator | 8 | | 14 | 🖥 Remote Administrator Tools (RAT) | 4 |
| 4 | 📡 Wireless attack tools | 17 | |