Pentest Commander is a comprehensive, all-in-one penetration testing command-line interface designed specifically for Kali Linux. This tool streamlines your pentesting workflow by providing a centralized interface to the most essential security testing tools, organized according to the MITRE ATT&CK framework.
- 🎯 MITRE ATT&CK Aligned: Organized according to the industry-standard framework
- 🔧 Comprehensive Tool Integration: Access to 100+ pentesting tools from a single interface
- 📦 Easy Installation: Automated installation of missing tools
- 📊 Logging System: Automatic logging of all scan results
- 🎨 Professional Interface: Clean, intuitive menu system
- 🛡️ Regular Updates: Continuously updated with new tools and features
- theHarvester: Email & subdomain enumeration
- Recon-ng: Web reconnaissance framework
- Amass: In-depth DNS enumeration
- dnsrecon: DNS reconnaissance tool
- nmap: Advanced network scanning (15+ scan types)
- nikto: Web server vulnerability scanner
- sqlmap: SQL injection testing
- gobuster: Directory brute forcing
- whatweb: Web fingerprinting
- wpscan: WordPress scanner
- dnsgen: DNS wordlist generator
- gitrob: Find sensitive files in GitHub
- SecretFinder: Find API keys/secrets
- SET: Social-Engineer Toolkit
- Gophish: Email phishing platform
- Metasploit Framework: Exploitation framework
- Payload Generator: Create reverse shells
- Netcat: Backdoor listener
- SSH Tunnel: Secure tunneling
- Mimikatz: Credential dumping
- LinPEAS: Linux privilege escalation
- WinPEAS: Windows privilege escalation
- LaZagne: Password recovery
- Hashcat: Password cracking
- BloodHound: Active Directory analysis
- enum4linux: SMB enumeration
- CrackMapExec: Post-exploitation
- Responder: LLMNR/NBT-NS poisoner
- Sliver C2: Cross-platform C2
- DNS Tunneling: dnscat2
- Kali Linux 2026+ (recommended)
- Root/sudo privileges
- Internet connection
git clone https://github.com/Rootx202/pentest-commander.git
cd pentest-commander
chmod +x pentest-commander.sh
sudo ./pentest-commander.sh# Clone the repository
git clone https://github.com/Rootx202/pentest-commander.git
# Navigate to the directory
cd pentest-commander
# Make the script executable
chmod +x pentest-commander.sh
# Run with sudo privileges (recommended)
sudo ./pentest-commander.shsudo ./pentest-commander.sh- Use numeric options to navigate menus
- Press Enter to execute selected option
- Use "Back to main menu" to return to the main screen
- Press Ctrl+C to interrupt processes (returns to main menu)
- Start with Reconnaissance to gather intelligence
- Move to Web Security Scanners for web application testing
- Proceed with Initial Access to gain entry
- Use Execution tools to run payloads
- Apply Persistence techniques if authorized
- Perform Privilege Escalation to gain higher access
- Extract credentials with Credential Access
- Conduct Discovery to map the network
- Execute Lateral Movement to spread access
- Establish Command & Control if needed
The application automatically creates configuration directories:
$HOME/.pentest-commander/tools- Downloaded tools$HOME/.pentest-commander/logs- Scan logs and results$HOME/.pentest-commander/session.ptr- Session data
- Always obtain written authorization before testing
- Comply with all applicable laws and regulations
- Use responsibly and ethically
- Respect privacy and data protection laws
- Additional tool integrations
- Bug fixes
- Documentation improvements
- Translation support
Stay connected with the project and community:
- 🐙 GitHub Repository: Rootx202/pentest-commander
- 👤 Developer Profile: Rootx202
- 🎵 TikTok: @rootx.202
- 💬 Telegram: @rootx.202
This project is licensed under the MIT License - see the LICENSE file for details.
- Thanks to the Kali Linux team for providing excellent pentesting tools
- Special recognition to the open-source security community
- MITRE ATT&CK framework for the organizational structure
- All contributors and users who help improve this tool
- Latest Version: v1.0
- Last Updated: February 2026
- Support: Issues and feature requests welcome on GitHub
- Roadmap: Planned features include GUI version and cloud integration
Developed with ❤️ by RootX Yemen
Proudly serving the ethical hacking community