📡 SS7 & SigPloit – Telecom Exploitation Tool

🔹 SS7: A telecom protocol with serious vulnerabilities — allows location tracking, SMS interception, and call hijacking.

🔹 SigPloit: Open-source tool to exploit SS7 flaws for testing and research.

🛠 Quick Install (Linux):

git clone https://github.com/SigPloiter/SigPloit.git

cd SigPloit

sudo pip2 install -r requirements.txt

python2 sigploit.py

⚙️ Key Features:
- Track phone location
- Intercept SMS & calls
- Simulate fake MSC/HLR

🔐 Stay Safe:
- Avoid SMS-based 2FA
- Use encrypted apps (Signal, Telegram)
- Telcos should deploy SS7 firewalls

🔗 GitHub:
https://github.com/SigPloiter/SigPloit

#Tools #SS7 #TryHacking #KaliLinux

🎣 Zphisher – Phishing Tool (Termux & Linux)

Zphisher is a powerful tool for automated phishing attacks.
It helps generate fake login pages for popular sites like Facebook, Instagram, Gmail, and more.

📦 Features:
- 30+ templates
- Auto-generate phishing links
- Captures usernames & passwords
- Supports ngrok for link forwarding

📲 Install on Termux:

apt update 

apt install git php curl -y

git clone https://github.com/htr-tech/zphisher.git

cd zphisher

bash zphisher.sh 

⚠️ For educational and ethical hacking only. Unauthorized use is illegal.

🔗 GitHub:
https://github.com/htr-tech/zphisher

#Tools #Phishing #TryHacking #KaliLinux

Hashcat — Fast CPU/GPU Password-Recovery Tool

🔹 What: High-performance password recovery supporting 300+ hash types and multiple attack modes.

🛠 Quick install (Linux / Kali):

sudo apt install hashcat 

(Install GPU drivers/OpenCL/CUDA/ROCm first).

⚙️ Key features:
- Dictionary, mask, hybrid, rule, and PRINCE attacks.
- GPU-accelerated kernels and benchmarking (hashcat -b).
- Session restore and utilities.

🔧 Quick demo commands:

# benchmark 
hashcat -b 

# dictionary 
hashcat -m 1000 -a 0 hashes.txt wordlist.txt -o cracked.txt 

# mask (example) 
hashcat -m 1000 -a 3 hashes.txt ?l?l?l?l?d?d 

# show cracked 
hashcat --show -m <mode> hashes.txt

(Use hashcat.net/wiki to find correct -m mode).

🔐 Legal note:
Only test hashes/systems you are authorized to audit. Unauthorized cracking is illegal.

🔗 Repo / docs:
https://github.com/hashcat/hashcat https://hashcat.net/hashcat/

#Hashcat #TryHacking #KaliLinux

John the Ripper — Advanced Password Auditing Tool 🔐

🔹 What: A powerful password auditing and recovery tool supporting many hash types and CPU/GPU cracking (Jumbo version).

🛠 Quick install (Linux / Kali):

sudo apt install john

⚙️ Key features:
Supports many hash types (Linux, NTLM, MD5, SHA, ZIP, RAR).
Dictionary, rule-based, and incremental attacks.
Automatic hash format detection.
Session restore (resume attacks after interruption).

🔧 Quick demo commands:

# basic crack
john hashes.txt

# dictionary attack
john --wordlist=wordlist.txt hashes.txt

# show cracked passwords
john --show hashes.txt

# incremental attack
john --incremental hashes.txt

🔐 Legal note:
Only test passwords or systems you are explicitly authorized to audit. Unauthorized use is illegal.

🔗 Repo / docs:
https://github.com/openwall/john
https://www.openwall.com/john/
#JohnTheRipper #PasswordAuditing #KaliLinux #CyberSecurity

🐧 fd — Fast Linux File Search

fd is a modern and simple alternative to the classic find command.

It helps you search for files and directories quickly with clean output, smart defaults, and .gitignore support.

Install on Debian / Ubuntu / Kali

sudo apt update
sudo apt install fd-find -y

Basic Usage

fdfind config
fdfind .py
fdfind nginx /etc

Use fd when you want to quickly locate files in Linux systems, code projects, configuration folders, or log directories.

GitHub: https://github.com/sharkdp/fd

#Linux #fd #Terminal #SysAdmin #KaliLinux #TryHacking

🐧 RTK — Token-Saving CLI Proxy

RTK is a newer GitHub-trending Rust CLI tool that acts as a lightweight proxy for AI/dev commands.

Its goal is to reduce token usage on repeated development workflows, making terminal-based AI coding and automation cheaper and faster.

Why it is interesting

- Single Rust binary
- Zero-dependency style
- Built for modern AI CLI workflows
- Useful for developers using terminal agents

Install

cargo install rtk

Basic Usage

rtk --help
rtk proxy

Use RTK if you experiment with AI coding tools, terminal agents, or local automation and want to optimize repeated command context.

GitHub: https://github.com/rtk-ai/rtk

#Linux #RTK #CLI #Rust #AItools #TryHacking

RustNet — per-process network visibility

RustNet is a new Rust TUI for watching live TCP/UDP/QUIC connections and mapping each flow to the process that owns it. It is interesting because it combines Linux eBPF attribution, DPI hints, GeoIP, filters, and sandboxing in one terminal workflow.

brew install rustnet
sudo rustnet
# or: cargo install rustnet-monitor

Use it to spot noisy services, unknown egress, DNS/QUIC activity, or stale lab connections. Legal note: monitor only systems and traffic you own or are authorized to inspect.

GitHub: https://github.com/domcyrus/rustnet

#Linux #CLI #Networking #eBPF #CyberSecurity

🐧 Binsider — Analyze ELF Binaries

Binsider is a terminal tool for inspecting Linux ELF binaries with a clean TUI, hex view, strings, symbols, headers, and sections.

🔹 Why it is useful:
- Understand unknown Linux executables faster
- Explore symbols, sections, and binary metadata
- Practice reverse engineering basics from the terminal

🛠 Install:

cargo install binsider

⚡ Basic usage:

binsider ./program

🎯 Use it for:
Learning ELF internals before moving to heavier tools like Ghidra or radare2.

🔗 GitHub:
https://github.com/orhun/binsider

⚖️ Analyze only binaries you own or are authorized to inspect.

#Linux #Terminal #ReverseEngineering #EthicalHacking #TryHacking

Kali Linux Toolkit — 5 Essential Tools

Kali is powerful, but the tool matters more than the distro. Start with these legal-lab basics:

1. Nmap
Network discovery and port scanning.

nmap -sV 192.168.1.10

2. Gobuster
Find hidden web paths and DNS names.

gobuster dir -u http://target -w wordlist.txt

3. Wireshark
Inspect packets and understand traffic behavior.

4. Hydra
Password-audit logins in authorized labs only.

5. Metasploit
Learn exploitation flow and validation in test environments.

Practice rule: scan only your own machines, CTF boxes, or targets where you have written permission.

#KaliLinux #Linux #CyberSecurity #EthicalHacking #TryHacking

🕷️ Katana — Web Crawling for Recon

Katana is a fast crawling and spidering tool from ProjectDiscovery. It helps you discover URLs, endpoints, JavaScript files, forms, and hidden paths during authorized web recon.

🔹 Why it is useful:
- Builds a larger attack surface map
- Extracts URLs from pages and scripts
- Works well with other tools like httpx and nuclei

🛠 Install:

go install github.com/projectdiscovery/katana/cmd/katana@latest

⚡ Basic usage:

katana -u https://example.com -d 2

🎯 Use it for:
Finding endpoints before testing for misconfigurations or vulnerabilities.

🔗 GitHub:
https://github.com/projectdiscovery/katana

⚖️ Crawl only sites you own or have permission to test.

#Linux #KaliLinux #WebSecurity #Recon #TryHacking

Inner Warden — Guardrails for AI agents on Linux

Inner Warden is a newer self-hosted security layer for AI agents. It can screen risky terminal or MCP/tool actions before they run, watch what really happens on the Linux host with eBPF, and keep the audit trail local.

Install:

curl -fsSL https://www.innerwarden.com/install | sudo bash

Basic usage:

innerwarden setup
sudo innerwarden agent scan

Use it when coding or ops agents can touch real machines and you want visibility before a bad prompt becomes damage.

GitHub:
https://github.com/InnerWarden/innerwarden

⚖️ Monitor only systems you own or are authorized to manage.

#Linux #Security #AIAgents #eBPF #CLI #TryHacking

TInjA — Template Injection Analyzer now in Kali Linux 2025.2

TInjA is a CLI tool for detecting template injection vulnerabilities in web pages. It can identify SSTI and CSTI cases, recognize many popular template engines, and route traffic through a proxy like Burp Suite for deeper testing.

Why it matters:
- Finds server-side and client-side template injection faster
- Supports dozens of template engines across multiple languages
- Accepts raw HTTP requests, custom headers, cookies, POST data, and JSONL input
- Useful for web app pentesting and bug bounty recon

Install on Kali:

sudo apt update && sudo apt install tinja -y

Basic example:

tinja url -u 'https://target.example/search?q=FUZZ'

Use it only on systems you own or are authorized to test.

Source: Kali Linux 2025.2 + Hackmanit/TInjA