Commands Guide

█ IMPORTANT

Before running a command you first have to install the package. Please read Installing Packages from Documentation.

After install Python or Ruby, as root create symbolic links because that's the reason of 100% of the issues when a tool dont runs. Example:

For Python 2.7:

$ doas ln -sf /usr/local/bin/python2.7 /usr/local/bin/python
$ doas ln -sf /usr/local/bin/python2.7-2to3 /usr/local/bin/2to3
$ doas ln -sf /usr/local/bin/python2.7-config /usr/local/bin/python-config
$ doas ln -sf /usr/local/bin/pydoc2.7 /usr/local/bin/pydoc

For Ruby 2.6:

$ doas ln -sf ${PREFIX}/bin/ruby26 ${PREFIX}/bin/ruby
$ doas ln -sf ${PREFIX}/bin/erb26 ${PREFIX}/bin/erb
$ doas ln -sf ${PREFIX}/bin/irb26 ${PREFIX}/bin/irb
$ doas ln -sf ${PREFIX}/bin/rdoc26 ${PREFIX}/bin/rdoc
$ doas ln -sf ${PREFIX}/bin/ri26 ${PREFIX}/bin/ri
$ doas ln -sf ${PREFIX}/bin/rake26 ${PREFIX}/bin/rake
$ doas ln -sf ${PREFIX}/bin/gem26 ${PREFIX}/bin/gem
$ doas ln -sf ${PREFIX}/bin/bundle26 ${PREFIX}/bin/bundle
$ doas ln -sf ${PREFIX}/bin/bundler26 ${PREFIX}/bin/bundler

█ Commands Guide

$ ad-ldap-enum -h
$ afl-fuzz
$ aide -h
$ aircrack-ng --help
$ amap
$ amass -h
$ anew -h
$ anti-burl -h
$ doas angst -h
$ apktool -h
$ aquatone
$ arirang
$ arjun -h
$ armitage
$ arp-scan -h
$ arping -h
$ arpwatch -h
$ asnlookup -h
$ perl /usr/local/share/atscan/atscan.pl -h
$ automater -h
$ python /usr/local/share/backfuzz/backfuzz.py -h
$ barmie -h
$ barq
$ bbqsql
$ bed
$ bfac
$ bfbtester
$ blacknurse
$ blackwidow -h
$ breacher -h
$ brutespray
$ bsd-airtools is a suite: $dstumbler $dwepdump $prism2ctl $prism2dump $dweputils $dwepcrack $dweputils $dwepkeygen
$ burpsuite
$ cadaver -h
$ cardpwn
$ ccrypt --help
$ cewl -h
$ cgichk
$ chameleon --help
$ chntpw -h
$ cmseek -h
$ doas cnupm -h
$ commix -h
$ corstest -h
$ corsy -h
$ cppcheck -h
$ cr3d0v3r -h
$ creddump is a suite: $creddump-cachedump $creddump-lsadump $creddump-pwdump
$ crawl
$ crlfuzz -h
$ crossweb -h
$ cryptcat -h
$ cryptonark -h
$ cloudbrute -h
$ cloudsplaining
$ csmith -h
$ ctunnel
$ cupp
$ cvechecker --help
$ davtest
$ doas despoof -h
$ dex2jar
$ dhcdrop -h
$ dhcpdump
$ doas dhcping
$ dicepassc -h
$ dirb
$ dirsearch -h
$ dnsenum -h
$ dnsmap
$ dnsmasq --help
$ dnsrecon -h
$ dnstop
$ dnstracer
$ dnswalk
$ domlink -h
$ perl /usr/local/share/dotdotpwn/dotdotpwn.pl -h
$ dsfs -h
$ doas dsniff -h
$ dsss -h
$ dsxs -h
$ dumpzilla
$ echoping
$ endpoint-finder -h
$ doas etherape
$ doas ettercap -h
$ ettu -h
$ evilurl is a suite: $ evilurl and $ evilurl-cli -h
$ exploit-pattern
$ exploitdb run command $ searchsploit -h
$ fastnetmon --help
$ fcrackzip --help
$ fierce -h
$ fimap -h
$ finalrecon -h
$ ffuf -h
$ flasm -h
$ flawfinder -h
$ floss -h
$ foremost -h
$ fpdns -h
$ fping -h
$ fragroute
$ fragrouter -h
$ fuxploider -h
$ geany
$ gau -h
$ gf -h
$ doas ghidraRun
$ gitjacker -h
$ gitleaks -h
$ gitrob -h
$ gmapsapiscanner -h
$ goaltdns --help
$ golinkfinder -h
$ golismero -h
$ goofile -h
$ gopherus -h
$ gospider -h
$ gowitness -h
$ gron -h
$ hakrawler -h
$ hashbuster -h
$ hcxtools is a suite, binaries are: $hcxessidtool -h $hcxhash2cap -h $hcxhashcattool -h $hcxhashtool -h $hcxmactool -h $hcxpcapngtool -h $hcxpcaptool -h $hcxpmkidtool -h $hcxpsktool -h $hcxwltool -h $whoismac -h $wlancap2wpasec -h $wlanhcx2john -h $wlanhcx2ssid -h $wlanhcxcat -h $wlanhcxinfo -h $wlanjohn2hcx -h $wlanpmk2hcx -h
$ hosthunter -h
$ doas hostile-subbrute-forcer
$ hping -h
$ html-tool
$ httprobe -h
$ hydra -h
$ xhydra
$ icmpinfo -h
$ ident-user-enum -h
$ iis-shortname -h
$ ike-scan -h
$ infoga -h
$ inspy -h
$ integrit -h
$ interlace -h
$ iodine -h
$ ipaudit
$ ipcalc
$ iperf3 -h
$ iperf -h
$ doas ipguard -h
$ IPv6 Toolkit is a suite: $addr6 -h $doas blackhole6 $flow6 $frag6 $icmp6 $jumbo6 $na6 $ni6 $ns6 $ns6 $path6 $ra6 $rd6 $rs6 $scan6 $script6 $tcp6 $udp6
$ doas isic -h
$ jadx -h
$ crlfuzz -h
$ jadx-gui
$ jaeles -h
$ jadx-gui
$ jaeles -h
$ javasnoop
$ jd-gui
$ jnettop -h
$ john
$ joomscan -h
$ jsparser: To execute go to /usr/local/share/jsparser/ and run $ doas python3 handler.py and then open browser http://127.0.0.1:8008
$ doas kismet -h
$ knockpy -h
$ konan -h
$ kubolt -h
$ lazys3
$ leaklooker -h
$ linkfinder -h
$ doas lynis
$ masscan -h
$ massdns -h
$ medusa -h
$ meg -h
$ metagoofil -h
$ metasploit: To execute run msfconsole
$ mongoaudit
$ mtr -h
$ nbaudit
$ nbtscan -h
$ nemesis -h
$ netfwd -h
$ netpipe -h
$ netpipes is a suite: $faucet -h $hose -h $encapsulate -h $sockdown $getpeername $getsockname $timelimit
$ netrate: to execute run $ netreceive --help
$ netsed -h
$ nfsshell
$ ngrep -h
$ nikto -h
$ nload -h
$ nmap -h
$ nmap GUI run command $ doas xnmap
$ nosqlmap -h
$ nsping
$ ntopng -h
$ nuclei -h
$ nylon -h
$ nyx -h
$ oledump -h
$ oletools is a suite: $ezhexviewer $mraptor $msodde $olebrowse $oledir $oleid $olemap $olemeta $oleobj $oletimes $olevba $pyxswf $rtfobj
$ onesixtyone -h
$ ophcrack -h
$ outguess -h
$ doas p0f3 -h
$ doas p0f -h
$ pack is a suite: $maskgen $policygen $rulegen $statsgen
$ padbuster -h
$ parameth -h
$ parsero -h
$ pdfid -h
$ photon -h
$ plushs -h
$ poink
$ portscanner
$ portsentry
$ ppgen -h
$ pwndb -h
$ pwnedornot -h
$ pwn -h
$ qrljacker -h
$ qsfuzz -h
$ qsreplace -h
$ queso
$ r3con1z3r -h
$ radare2 -h
$ doas radiusniff -h
$ rarcrack
$ rats -h
$ rdp
$ reaver
$ recon-ng is a suite: $recon-ng -h $recon-cli -h $recon-web $recon-rpc -h
$ reconnoitre -h
$ rip.pl
$ ROPgadget -h
$ routersploit run command $ rsf.py
$ rsmangler -h
$ s3bucketeers
$ samdump2
$ sandcastle -h
$ scapy
$ seclists are wordlist can found on /usr/local/share/seclists
$ shhgit -h
$ sing -h
$ sipcalc -h
$ siphon
$ sipsak
$ sipvicious is a suite: $svcrack -h $svcrash smtpscan-h $svmap -h $svreport -h $svwar -h
$ sleuthkit is a suite: tsk_recover $tsk_comparedir $tsk_gettimes $tsk_loaddb $blkcat $blkls $blkstat $jcat $jls $mmls $mmstat $mmcat $img_stat $img_cat $hfind $mactime $sorter $sigfind
$ slurpie
$ smbmap -h
$ doas smbsniff -h
$ smtp-user-enum
$ smtpscan
$ doas smurflog -h
$ sn0int
$ snallygaster -h
$ snort -h
$ social-engineer-toolkit go to /usr/local/share/setoolkit and run $ doas python3 setoolkit
$ socialscan -h
$ spiderfoot web version: Go to /usr/local/share/spiderfoot and run $ doas python3 sf.py -l 127.0.0.1:5001 and then open your browser http://127.0.0.1:5001
$ spiderfoot CLI version: $ doas python3 /usr/local/share/spiderfoot/sf.py -h
$ spiped
$ spoofcheck
$ sqlmap -h
$ sqlninja
$ ssdeep -h
$ ssldump -h
$ sslscan -h
$ sslScanner -h
$ sslsniffer -h
$ sslsplit -h
$ ssrf-testing: $ip -h $dns -h
$ ssrfmap -h
$ stegdetect -help
$ steghide --help
$ strobe -h
$ sub-domains-brute -h
$ subfinder -h
$ subjack -h
$ subjs -h
$ sublist3r -h
$ subscraper -h
$ subzy -h
$ suricata -h
$ swaks
$ takeover
$ tcpdpriv -h
$ tcpflow -h
$ tcpreen -h
$ tcpreplay -h
$ tcpshow -h
$ tcpslice -h
$ tcpstat -h
$ tcptrace -h
$ tcptraceroute
$ teensyloader
$ testdisk -h
$ theHarvester
$ tko-subs -h
$ tor
$ tplmap -h
$ tshark -h
$ ua-tester -h
$ unfurl -h
$ urlcrazy -h
$ urlhunter -h
$ urlinsane -h
$ valgrind --help
$ vinetto -h
$ virtual-host-discovery -h
$ vol.py -h
$ vulnx -h
$ wafw00f -h
$ wapiti -h
$ waybackurls -h
$ doas ws
$ webscarab
$ weevely -h
$ wes -h
$ wfuzz
$ whatweb -h
$ wig -h
$ wireshark
$ wpbullet -h
$ wpscan -h
$ wuzz
$ xprobe2
$ xsstrike -h
$ yara -h
$ zaproxy
$ zebedee --help
$ zephrfish are wordlist can found on /usr/local/share/zephrfish-wordlists