Features of HconSTF:

• Categorized and comprehensive toolset 
• Contains hundreds of tools and features and script for different tasks like SQLi,XSS,Dorks,OSINT to name a few 

• HconSTF webUI with online tools (same as the Aqua base version of HconSTF) 
• Each option is configured for penetration testing and Vulnerability assessments 
• Specially configured and enhanced for gaining easy & solid anonymity 
• Works for web app testing assessments specially for owasp top 10 
• Easy to use & collaborative Operating System like interface 

• Multi-Language support (feature in heavy development translators needed) 
• Hacker Friendly
• Fully Customizable, Versatile in Usage can be used in many Web related hacking needs, Simple and easy to use interface, small in size and light on resources. contains hundreds of features for :
   
• Web Penetration Testing 

• Web Exploits Development 
• Web Malware Analysis 
• OSINT & Cyber spying
   
• Very comprehensive and plenty of tools for exploitation and supports verbose debugging features for Web Exploit Development.
   
• HconSTF contains blend of online and offline tools for Pentesting called ‘WebUI‘.
  includes scanners, encoders, and much more
    
• IDB is Integrated database with huge amount of Web payloads like :
   

• Xss 
• Sqli 
• LDAP 
• Command execution

• Helps in many Open source intelligence based tasks like
   
• Passive Web & Network Reconnaissance 
• Doxing
   
• Cyber Spying 

• Hash cracking
   
• Huge amount of Plugins more than 165
   
•  
• Encoding / Decoding & hashing Features and tools, supports wide variety of formats, character set and algorithms for making payloads undetectable
   
•  

• Darknets and proxies integrated, Spoofing tools. supports integration with many decoy options, includes many tools for proxies and anonymizing networks
  readily configured for:
   
• Tor 
• AdvOR 
• I2P 
• Https, Socks 4 / 
    

• Contains many integrated useful reporting features like :
   
• Screenshots 
• Note taking 
• Session saving & exporting 

• Custom Url Logging 
• Automated Request logging
   
• Includes Hackery-Hybrid, collection of huge amount of learning bookmarks for learning any techniques, tools. 
• Available for both all Windows and Linux based systems

• Easy to use & collaborative Operating System like interface 
• Includes Custom scripts for doing many pentesting tasks 
• Includes Cleaner for running HconSTF smoothly
   
• Light on Hardware Resources & Small in size
   
• Portable – no need to install, can work from any USB storage device
   

• Multi-Language support (Partial)
   
• Works side-by-side with your normal web browser without any conflict issues
   
• Works on both architectures x86 & x64 on windows XP, Vista, 7 and on Linux with Wine
   
• Netbook compatible – User interface is designed for using framework on small screen sizes
   
• Free & Open source
   

• Recon / Mapping
   
• Editors / Debuggers 
• Exploitation / Audit 
• Anonymity 

• Passwords 
• Cryptography 
• Database 
• Scripting / Automation 
• Network Utilities 

• Reporting

Major Features of HconSTF:

• Installation Instructions For Windows

Installation Instructions For Windows

Note: How to find PublicDNS in AWS

Step 1) RDP  Connection: To connect to the deployed instance, Please follow Instructions to Connect to Windows  instance on AWS Cloud

1) Connect to the virtual machine using following RDP credentials:

• Hostname: PublicDNS  / IP of machine
• Port : 3389

Username: To connect to the operating system, use RDP and the username is Administrator.
Password: Please Click here to know how to get password .

Step 2) Click the Windows “Start” button and select “All Programs” and then point to HconSTF

Step 3) Other Information:

1.Default installation path: will be in your root folder “C:\HconSTFPortable”
2.Default ports:

• Windows Machines:  RDP Port – 3389
• Http: 80
• Https: 443

Configure custom inbound and outbound rules using this link

Installation Step by Step Screenshots