Initial commit: project scaffolding with directory conventions and .gitignore

.gitignore

@@ -0,0 +1,81 @@
+# ============================================
+# Hack Project — .gitignore
+# ============================================
+
+# --- Temporary & Scratch ---
+temp/
+*.tmp
+*.bak
+*.swp
+*~
+
+# --- Logs ---
+logs/
+*.log
+*.log.*
+
+# --- Scan Output (regenerated per engagement) ---
+scans/
+*.nmap
+*.gnmap
+*.xml.scan
+
+# --- Loot / Captured Data (NEVER commit) ---
+loot/
+*.creds
+*.hashes
+*.shadow
+*.passwd
+*.ntds
+*.lsass
+*.dmp
+
+# --- Evidence ---
+evidence/
+*.pcap
+*.pcapng
+
+# --- Generated Payloads ---
+payloads/generated/
+payloads/shellcode/
+*.bin
+*.shellcode
+*.encrypted
+
+# --- Sensitive Configs ---
+config/*.env
+config/*secret*
+config/*key*
+config/*token*
+*.pem
+*.key
+*.pfx
+*.p12
+*.kdbx
+*.keystore
+
+# --- Reports (engagement-specific) ---
+reports/final/
+
+# --- OS / Editor Junk ---
+.DS_Store
+Thumbs.db
+desktop.ini
+__pycache__/
+*.pyc
+*.pyo
+.venv/
+venv/
+env/
+*.egg-info/
+node_modules/
+.idea/
+.vscode/
+*.code-workspace
+
+# --- Large binary wordlists (use curated/ locally, don't push) ---
+wordlists/curated/
+*.gz
+*.zip
+*.7z
+*.tar