- by x32x01 ||
👨💻 If you're into hacking, bug bounty, or cybersecurity, mastering terminal/CLI commands is 🔑 essential. Here's a powerful collection of Hacker Pro Commands with usage & examples!
📌 Owner info, domain age, name servers, etc.
🌐 Get domain’s IP address.
🧭 Resolve DNS records.
🕵️ Find subdomains (Install subfinder first)
🔎 Scan for open ports, services, versions, and use default scripts.
⚡ Fast port scanning (be careful, can be noisy).
🛡️ Scan for basic web vulnerabilities.
💉 Auto detect & exploit SQL injection.
📁 Find hidden directories/files.
📂 Another powerful brute-forcer.
🧪 Intercept & modify HTTP/HTTPS traffic.
mitmproxy
🕸️ Man-in-the-middle proxy for deep traffic inspection.
💣 Launch Metasploit Framework – 1000s of exploits.
searchsploit wordpress
📚 Search for public exploits in Exploit-DB.
🔍 Check open ports.
📡 Sniff network packets.
htop
📊 Monitor system performance in real-time.
---
🔐 Base64 encode.
🔑 Generate MD5 hash.
💾 Convert binary to hex.
📁 Search for config files (often contain secrets).
🔍 Search for passwords inside PHP files.
⚠️ Important Note
🔒 These commands are for educational & authorized testing only.
🚫 Never use them on unauthorized systems.
🧠 1. Recon Commands (Information Gathering)
🔍 Collect information about target websites/networks.whois example.com📌 Owner info, domain age, name servers, etc.
dig example.com +short🌐 Get domain’s IP address.
nslookup example.com🧭 Resolve DNS records.
subfinder -d example.com🕵️ Find subdomains (Install subfinder first)
🛠️ 2. Port Scanning & Service Detection
nmap -sC -sV -T4 -Pn example.com🔎 Scan for open ports, services, versions, and use default scripts.
masscan -p1-65535 192.168.1.0/24 --rate=1000⚡ Fast port scanning (be careful, can be noisy).
🔐 3. Web Vulnerability Scanning
nikto -h http://example.com🛡️ Scan for basic web vulnerabilities.
sqlmap -u "http://example.com/index.php?id=1" --batch💉 Auto detect & exploit SQL injection.
📂 4. File & Directory Bruteforcing
ffuf -u https://example.com/FUZZ -w /usr/share/wordlists/dirb/common.txt📁 Find hidden directories/files.
gobuster dir -u http://example.com -w /usr/share/wordlists/dirbuster/directory-list-2.3-small.txt📂 Another powerful brute-forcer.
🛠️ 5. Intercept & Modify Requests
burpsuite🧪 Intercept & modify HTTP/HTTPS traffic.
mitmproxy
🕸️ Man-in-the-middle proxy for deep traffic inspection.
🎯 6. Exploitation Frameworks
msfconsole💣 Launch Metasploit Framework – 1000s of exploits.
searchsploit wordpress
📚 Search for public exploits in Exploit-DB.
🛡️ 7. System & Network Monitoring
netstat -tuln🔍 Check open ports.
tcpdump -i eth0📡 Sniff network packets.
htop
📊 Monitor system performance in real-time.
---
🧰 8. Encoding, Hashing & Conversion
echo -n "admin" | base64🔐 Base64 encode.
echo -n "admin" | md5sum🔑 Generate MD5 hash.
xxd -p input.bin💾 Convert binary to hex.
🔍 9. Useful Linux One-Liners for Hackers
find / -name "*.conf" 2>/dev/null📁 Search for config files (often contain secrets).
grep -i "password" /var/www/html/*.php🔍 Search for passwords inside PHP files.
⚠️ Important Note
🔒 These commands are for educational & authorized testing only.
🚫 Never use them on unauthorized systems.