🔴 Manage Reverse Shells with DrShell

DrShell is a sleek tool for managing and handling multiple reverse shell sessions efficiently.

✅ Requirements:

* Linux or Termux
* Python (installed via the package)

🛠 Quick Install:

wget -O drshell.deb \
  https://github.com/DrDataYE/DrShell/releases/download/drshell/drshell_1.0.1_all_linux_beta.deb \
  && sudo dpkg -i drshell.deb

⚡️ Run Command:

drshell -h

Displays options to configure:

* Port for main server (-p)
* Ports for signal Shell, Netcat, file-smuggler handlers (-x, -n, -f)

🔄 Key Features:

* Switch between multiple active shell sessions
* Custom signal and Netcat handler support
* Built-in HTTP file smuggling module to transfer files

⚠️ Important:
Only use DrShell on systems you own or have been authorized to test. Unauthorized activity is illegal.

📸 Output & workflow screenshots are shown above 🔺 #TryHacking

🔴 Run Any Linux App Through Tor with Oniux

Oniux isolates apps in their own network namespace to force all traffic through Tor, preventing leaks—even from misconfigured tools.

✅ Requirements:

* Linux
* Rust + Cargo

🛠 Install:

cargo install --git https://gitlab.torproject.org/tpo/core/oniux oniux@0.5.0

⚡️ Run Example:

oniux curl ipinfo.io

🔐 Kernel-level isolation, DNS leak protection, no clearnet fallback.
⚠️ For privacy use only. Still experimental.

📸 Output shown in the screenshot above 🔺 #TryHacking

🎯 Course Title: TCM Security – Practical API Hacking

👤 Published by: @TryHacking

🗣 Language: English

💾 Size: 2.7 GB

📥 Download: From Here

🔥 Master the art of API hacking with one of the most practical courses by TCM Security! A must-have for any aspiring bug bounty hunter or ethical hacker.

#Courses #TCM #Tryhacking

📡 SS7 & SigPloit – Telecom Exploitation Tool

🔹 SS7: A telecom protocol with serious vulnerabilities — allows location tracking, SMS interception, and call hijacking.

🔹 SigPloit: Open-source tool to exploit SS7 flaws for testing and research.

🛠 Quick Install (Linux):

git clone https://github.com/SigPloiter/SigPloit.git

cd SigPloit

sudo pip2 install -r requirements.txt

python2 sigploit.py

⚙️ Key Features:
- Track phone location
- Intercept SMS & calls
- Simulate fake MSC/HLR

🔐 Stay Safe:
- Avoid SMS-based 2FA
- Use encrypted apps (Signal, Telegram)
- Telcos should deploy SS7 firewalls

🔗 GitHub:
https://github.com/SigPloiter/SigPloit

#Tools #SS7 #TryHacking #KaliLinux

🎣 Zphisher – Phishing Tool (Termux & Linux)

Zphisher is a powerful tool for automated phishing attacks.
It helps generate fake login pages for popular sites like Facebook, Instagram, Gmail, and more.

📦 Features:
- 30+ templates
- Auto-generate phishing links
- Captures usernames & passwords
- Supports ngrok for link forwarding

📲 Install on Termux:

apt update 

apt install git php curl -y

git clone https://github.com/htr-tech/zphisher.git

cd zphisher

bash zphisher.sh 

⚠️ For educational and ethical hacking only. Unauthorized use is illegal.

🔗 GitHub:
https://github.com/htr-tech/zphisher

#Tools #Phishing #TryHacking #KaliLinux

Hashcat — Fast CPU/GPU Password-Recovery Tool

🔹 What: High-performance password recovery supporting 300+ hash types and multiple attack modes.

🛠 Quick install (Linux / Kali):

sudo apt install hashcat 

(Install GPU drivers/OpenCL/CUDA/ROCm first).

⚙️ Key features:
- Dictionary, mask, hybrid, rule, and PRINCE attacks.
- GPU-accelerated kernels and benchmarking (hashcat -b).
- Session restore and utilities.

🔧 Quick demo commands:

# benchmark 
hashcat -b 

# dictionary 
hashcat -m 1000 -a 0 hashes.txt wordlist.txt -o cracked.txt 

# mask (example) 
hashcat -m 1000 -a 3 hashes.txt ?l?l?l?l?d?d 

# show cracked 
hashcat --show -m <mode> hashes.txt

(Use hashcat.net/wiki to find correct -m mode).

🔐 Legal note:
Only test hashes/systems you are authorized to audit. Unauthorized cracking is illegal.

🔗 Repo / docs:
https://github.com/hashcat/hashcat https://hashcat.net/hashcat/

#Hashcat #TryHacking #KaliLinux

John the Ripper — Advanced Password Auditing Tool 🔐

🔹 What: A powerful password auditing and recovery tool supporting many hash types and CPU/GPU cracking (Jumbo version).

🛠 Quick install (Linux / Kali):

sudo apt install john

⚙️ Key features:
Supports many hash types (Linux, NTLM, MD5, SHA, ZIP, RAR).
Dictionary, rule-based, and incremental attacks.
Automatic hash format detection.
Session restore (resume attacks after interruption).

🔧 Quick demo commands:

# basic crack
john hashes.txt

# dictionary attack
john --wordlist=wordlist.txt hashes.txt

# show cracked passwords
john --show hashes.txt

# incremental attack
john --incremental hashes.txt

🔐 Legal note:
Only test passwords or systems you are explicitly authorized to audit. Unauthorized use is illegal.

🔗 Repo / docs:
https://github.com/openwall/john
https://www.openwall.com/john/
#JohnTheRipper #PasswordAuditing #KaliLinux #CyberSecurity

🐧 fd — Fast Linux File Search

fd is a modern and simple alternative to the classic find command.

It helps you search for files and directories quickly with clean output, smart defaults, and .gitignore support.

Install on Debian / Ubuntu / Kali

sudo apt update
sudo apt install fd-find -y

Basic Usage

fdfind config
fdfind .py
fdfind nginx /etc

Use fd when you want to quickly locate files in Linux systems, code projects, configuration folders, or log directories.

GitHub: https://github.com/sharkdp/fd

#Linux #fd #Terminal #SysAdmin #KaliLinux #TryHacking

🐧 RTK — Token-Saving CLI Proxy

RTK is a newer GitHub-trending Rust CLI tool that acts as a lightweight proxy for AI/dev commands.

Its goal is to reduce token usage on repeated development workflows, making terminal-based AI coding and automation cheaper and faster.

Why it is interesting

- Single Rust binary
- Zero-dependency style
- Built for modern AI CLI workflows
- Useful for developers using terminal agents

Install

cargo install rtk

Basic Usage

rtk --help
rtk proxy

Use RTK if you experiment with AI coding tools, terminal agents, or local automation and want to optimize repeated command context.

GitHub: https://github.com/rtk-ai/rtk

#Linux #RTK #CLI #Rust #AItools #TryHacking

RustNet — per-process network visibility

RustNet is a new Rust TUI for watching live TCP/UDP/QUIC connections and mapping each flow to the process that owns it. It is interesting because it combines Linux eBPF attribution, DPI hints, GeoIP, filters, and sandboxing in one terminal workflow.

brew install rustnet
sudo rustnet
# or: cargo install rustnet-monitor

Use it to spot noisy services, unknown egress, DNS/QUIC activity, or stale lab connections. Legal note: monitor only systems and traffic you own or are authorized to inspect.

GitHub: https://github.com/domcyrus/rustnet

#Linux #CLI #Networking #eBPF #CyberSecurity

🐧 Binsider — Analyze ELF Binaries

Binsider is a terminal tool for inspecting Linux ELF binaries with a clean TUI, hex view, strings, symbols, headers, and sections.

🔹 Why it is useful:
- Understand unknown Linux executables faster
- Explore symbols, sections, and binary metadata
- Practice reverse engineering basics from the terminal

🛠 Install:

cargo install binsider

⚡ Basic usage:

binsider ./program

🎯 Use it for:
Learning ELF internals before moving to heavier tools like Ghidra or radare2.

🔗 GitHub:
https://github.com/orhun/binsider

⚖️ Analyze only binaries you own or are authorized to inspect.

#Linux #Terminal #ReverseEngineering #EthicalHacking #TryHacking

Kali Linux Toolkit — 5 Essential Tools

Kali is powerful, but the tool matters more than the distro. Start with these legal-lab basics:

1. Nmap
Network discovery and port scanning.

nmap -sV 192.168.1.10

2. Gobuster
Find hidden web paths and DNS names.

gobuster dir -u http://target -w wordlist.txt

3. Wireshark
Inspect packets and understand traffic behavior.

4. Hydra
Password-audit logins in authorized labs only.

5. Metasploit
Learn exploitation flow and validation in test environments.

Practice rule: scan only your own machines, CTF boxes, or targets where you have written permission.

#KaliLinux #Linux #CyberSecurity #EthicalHacking #TryHacking

🕷️ Katana — Web Crawling for Recon

Katana is a fast crawling and spidering tool from ProjectDiscovery. It helps you discover URLs, endpoints, JavaScript files, forms, and hidden paths during authorized web recon.

🔹 Why it is useful:
- Builds a larger attack surface map
- Extracts URLs from pages and scripts
- Works well with other tools like httpx and nuclei

🛠 Install:

go install github.com/projectdiscovery/katana/cmd/katana@latest

⚡ Basic usage:

katana -u https://example.com -d 2

🎯 Use it for:
Finding endpoints before testing for misconfigurations or vulnerabilities.

🔗 GitHub:
https://github.com/projectdiscovery/katana

⚖️ Crawl only sites you own or have permission to test.

#Linux #KaliLinux #WebSecurity #Recon #TryHacking

Inner Warden — Guardrails for AI agents on Linux

Inner Warden is a newer self-hosted security layer for AI agents. It can screen risky terminal or MCP/tool actions before they run, watch what really happens on the Linux host with eBPF, and keep the audit trail local.

Install:

curl -fsSL https://www.innerwarden.com/install | sudo bash

Basic usage:

innerwarden setup
sudo innerwarden agent scan

Use it when coding or ops agents can touch real machines and you want visibility before a bad prompt becomes damage.

GitHub:
https://github.com/InnerWarden/innerwarden

⚖️ Monitor only systems you own or are authorized to manage.

#Linux #Security #AIAgents #eBPF #CLI #TryHacking