Hackode is one of the best applications for people who want to hack their android devices. The hacker’s Toolbox is an application for penetration tester, Ethical hackers, IT administrator and Cyber security professional to perform different tasks like Google Hacking, Reconnaissance, DNS Dig, Exploits, Security RSS Feed and much more.

How To Use Hackode App?

[appbox googleplay com.techfond.hackode&hl=en]

It is an android app developed by Ravi Kumar for penetration testers, ethical hackers and cyber security professionals. It contains various modules including Reconnaissance, Scanning, Exploits and Security Feed. But at the time of writing this article, there are only three modules available "Reconnaissance", "Scanning" and "Security Feed".

[caption id="" align="aligncenter" width="223"] How To Use Hackode App[/caption]

What Are The Options Available In Reconnaissance Module?

[caption id="" align="aligncenter" width="222"] How To Use Hackode App[/caption]

 

Google Hacking - This module allows you to find the vulnerable sites using Google dorks. There are six Google Dorks available in it:

1. PhpMyAdmin


2. PhpConfig


3. SQL Injection


4. MySQL Server


5. Login Portals


6. Passwords

[caption id="" align="aligncenter" width="222"] How To Use Hackode App[/caption]

I have checked the Google dorks, it is a quiet good collection for a security researcher.

PhpMyAdmin:

Tap on the "PhpMyAdmin" button... It will open up a Google search result containing vulnerable sites. This Google dork allows you bypass the admin username and password. You can get information schema tables of vulnerable websites by using this Google query.

PhpConfig:

The "PhpConfig" button is to get a Google search result containing vulnerable sites that a may allow attackers to include malicious remote files (php remote file include vulnerability).

SQL Injection:

The "SQL Injection" button allows you to get a search result containing sites vulnerable to SQL injection attacks.

MySQL Server:

It allows you to get a search result that may help you to get sensitive information of the target MySQL server, uid and password in web.config through FTP.

Login Portals:

It allows you to get a search result that contains simple SAMLphp login pages.

Passwords:

It allows you to get files containing SQL instructions where the administrator set a password for a database user.

Google hacking part is over, now let's go back and open the "who-is-lookup" tool.

Who Is Lookup - This module allows you to gather information about a domain name. Who Is LookUp will provide you with the information about the owner of the site, created date, IP addresses, email etc.

[caption id="" align="aligncenter" width="223"] How To Use Hackode App[/caption]

What Are the Tools available in Scanning?

This module helps you to find basic information about the target. It contains the following options for information gathering.

[caption id="" align="aligncenter" width="223"] How To Use Hackode App[/caption]

Ping -  It allows you to test the reachability of a host and to measure the round-trip time for messages sent from the originating host to a destination device.

[caption id="" align="aligncenter" width="223"] How To Use Hackode App[/caption]

TraceRoute -  It allows you to identify the intermediate devices and the connection speed.

[caption id="" align="aligncenter" width="223"] How To Use Hackode App[/caption]

Mx Record - It allows you to get information about the target's mail server responsible for accepting email messages on behalf of a recipient's domain.

[caption id="" align="aligncenter" width="223"] How To Use Hackode App[/caption]

DNS Dig - It can be used to find Information about the target website's DNS server.

[caption id="" align="aligncenter" width="222"] How To Use Hackode App[/caption]

Now the scanning part is also over. So let's jump into the "Security Feed".

Security Feed -  Yeah, you know it, it helps you to stay updated.

[caption id="" align="aligncenter" width="223"] How To Use Hackode App[/caption]

Overall, it is a good application for beginners in hacking. It is also a good android app because it doesn't need access to your private information to run.  If you want to try it, go ahead, I strongly recommend it.