hackversity

A tiered, defensive & read-only recon / scanning toolkit for cybersecurity students, distributed as a single PyPI package named hackversity.

Only test systems you own or have explicit written permission to test.

Every tool is read-only. There is no exploit, payload, packet-spoofing, or injection code anywhere in this package — in any tier. Every scan/probe command requires an explicit target (there are no default targets and no bundled lists of real-world hosts) and prints the authorisation notice above before running.

Install

pip install hackversity

This installs two equivalent console commands: hackversity and the short alias hv.

Command tree

Commands are grouped by verb and tagged by difficulty tier.

Run hv --help or hv <verb> --help for full help with examples on every command.

Scope enforcement (opt-in)

Point HACKVERSITY_SCOPE_FILE at an allowlist (hv scope init scope.txt) and every scan/probe command refuses targets outside it — a guardrail against accidentally testing something you're not authorised to touch:

hv scope init scope.txt        # edit it to list your authorised domains/CIDRs
export HACKVERSITY_SCOPE_FILE=scope.txt
hv scan port evil.com          # refused — not in scope.txt

With no scope file configured, every target is treated as in scope (unchanged behaviour) — enforcement is entirely opt-in.

Use as a Python library

Every tool is importable as a plain function:

from hackversity.tools.beginner import scan_ports, find_subdomains, whois_lookup

results = scan_ports("127.0.0.1", ports=[22, 80, 443])
open_ports = [r.port for r in results if r.is_open]

Development

pip install -e ".[test]"
pytest

License

MIT