Skip to content

HackHound makes web security testing visual and simple. Built with React and Python, it automatically hunts for vulnerabilities while showing real-time results. Features include directory fuzzing, subdomain discovery, and API testing - all in one modern interface.

License

Notifications You must be signed in to change notification settings

aayushman-singh/HackHound

Repository files navigation

Hackhound - Advanced Web Security Testing Tool

A powerful web application security testing tool built with React and Python, designed for security researchers and penetration testers. Hackhound combines modern frontend technologies with robust backend fuzzing capabilities to provide comprehensive web application security testing.


🚀 Getting Started

Prerequisites

  • Node.js (v20 or later)
  • Python 3.10 or later
  • npm or yarn package manager

Local Development Setup

  1. Clone the repository

    git clone https://github.com/yourusername/hackhound.git
    cd hackhound
  2. Install Dependencies

    # Install frontend dependencies
    npm install
    
    # Install Python dependencies
    pip install -r requirements.txt

Starting the Application

You can start the application in several ways:

  1. Start everything (recommended)

    npm start

    This will run both frontend and backend concurrently

  2. Start frontend only

    npm run start:frontend

    Frontend will be available at http://localhost:5173

  3. Start backend only

    npm run start:backend

    API will be available at http://localhost:5000

Open Using Daytona

  1. Install Daytona: Follow the Daytona installation guide.
  2. Create the Workspace:
    daytona create <https://github.com/aayushman-singh/HackHound> 

✨ Features

  • Multi-Mode Fuzzing

    • Directory fuzzing
    • Subdomain enumeration
    • Virtual host discovery
    • API endpoint fuzzing
  • Advanced Security Testing

    • Parameter injection testing
    • Header manipulation
    • Authentication bypass attempts
    • Custom payload support
  • Modern Tech Stack

    • React frontend with Vite
    • FastAPI backend
    • Real-time updates
    • Responsive UI
    • Customizable wordlists
  • Developer Experience

    • Hot reloading
    • Concurrent frontend/backend development
    • Standardized development environment
    • Comprehensive logging
    • Easy deployment

🛠 Tech Stack

Frontend

  • React 18
  • Vite
  • React Router DOM
  • Axios
  • Firebase Authentication
  • Lucide React Icons

Backend

  • Python 3.10
  • FastAPI
  • CORS middleware
  • Pydantic for validation

📄 API Documentation

The API documentation is available at http://localhost:5000/docs when running the backend server.

Key endpoints:

  • POST /fuzz: Main fuzzing endpoint
  • GET /health: Health check endpoint

👥 Contributing

  1. Fork the repository
  2. Create your feature branch (git checkout -b feature/amazing-feature)
  3. Commit your changes (git commit -m 'Add some amazing feature')
  4. Push to the branch (git push origin feature/amazing-feature)
  5. Open a Pull Request

📝 License

This project is licensed under the MIT License - see the LICENSE file for details.

About

HackHound makes web security testing visual and simple. Built with React and Python, it automatically hunts for vulnerabilities while showing real-time results. Features include directory fuzzing, subdomain discovery, and API testing - all in one modern interface.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published