Termux Pentesting Tools

Top Pentesting Tools for Termux (No Root Required)

1. Network Scanning & Enumeration

• Nmap – Powerful network scanner (pkg install nmap)

• Netcat (nc) – Swiss army knife for networking (pkg install netcat)

• dnsenum – DNS enumeration tool (pkg install dnsenum)

• Nikto – Web server scanner (pkg install nikto)

2. Vulnerability Scanners

• SQLMap – Automated SQL injection tool (pkg install sqlmap)

• Metasploit Framework (Non-root, limited) – Requires manual setup (git clone from GitHub)

• OpenVAS (Limited setup) – Requires heavy dependencies

3. Password Cracking

• Hydra – Brute-force tool (pkg install hydra)

• John the Ripper (JTR) – Password cracker (pkg install john)

• Hashcat (Limited without GPU) (pkg install hashcat)

4. Wi-Fi Hacking (Limited without root)

• Aircrack-ng (Monitor mode won’t work without root) (pkg install aircrack-ng)

• Reaver – WPS attack tool (pkg install reaver)

5. Web Hacking

• WPScan – WordPress vulnerability scanner (gem install wpscan)

• Gobuster – Directory brute-forcing (pkg install gobuster)

• Dirb – Web directory scanner (pkg install dirb)

6. Social Engineering & Phishing

• SEToolkit (Limited) – Requires manual setup (git clone)

• SocialFish – Phishing framework (git clone from GitHub)

7. Exploitation Frameworks

• Metasploit (Non-root) – Use termux-metasploit (GitHub)

• Commix – Automated command injection (pkg install commix)

8. OSINT & Recon

• theHarvester – Email & subdomain scanner (pkg install theharvester)

• Sherlock – Find usernames across social media (pkg install sherlock)

• Recon-ng – Full-featured recon tool (pkg install recon-ng)

9. Anonymity & Proxies

• Tor – Anonymous browsing (pkg install tor)

• Proxychains-ng – Route traffic via proxies (pkg install proxychains-ng)

10. Miscellaneous Tools

• Binwalk – Firmware analysis tool (pkg install binwalk)

• Wireshark (Termux-X11) – Packet analysis (GUI required)

• Maltego (Limited) – Requires manual setup

Installation Tips:

• Use pkg update && pkg upgrade before installing tools.

• Some tools require pip or gem (pkg install python pip ruby).

• For Metasploit, check Termux-Metasploit on GitHub.

Final Thoughts

Termux is a great way to learn penetration testing without needing a rooted device. These tools allow you to perform security assessments, network scanning, and vulnerability testing right from your Android phone.

⚠️ Legal Disclaimer: Always use these tools ethically and with proper authorization. Unauthorized hacking is illegal.