Execute ANY command on the Kali server without restrictions. Full root access.

Execute a command with streaming output collection.

Check server health and tool availability.

Get comprehensive network information for the Kali system.

Send text input to any active interactive session.

Read output from any active interactive session.

Execute an Nmap scan.

Execute Nikto.

Execute ssh-audit.

Execute Gobuster.

Execute WPScan.

Execute SQLMap.

Execute Hydra.

Execute John.

Execute enum4linux.

Execute subfinder.

Execute httpx.

Execute arjun.

Execute fierce.

Execute byp4xx.

Execute subzy.

Execute assetfinder.

Execute waybackurls.

Execute masscan.

Execute katana.

Execute sslscan.

Query crt.sh.

Execute gowitness.

Execute amass.

Search CVEs.

Audit package.

Execute Nuclei vulnerability scan.

Execute FFUF web fuzzer.

Execute Dirb web content scanner.

Execute Hashcat.

Execute Commix command injection scanner.

Execute Dalfox XSS scanner.

Execute Ghauri SQL injection scanner.

Execute WhatWeb technology detection.

Execute MassDNS resolver.

Execute mapcidr CIDR utilities.

Analyze firmware/files with binwalk.

Steganography with steghide or stegseek.

Read/write file metadata with exiftool.

Carve files with foremost.

Extract strings from a binary.

Memory forensics with Volatility3.

Extract JavaScript files from a URL.

Extract URLs and secrets from JavaScript.

Discover links and parameters from JavaScript.

Discover parameters from web archives.

Scan for secrets with TruffleHog.

Deobfuscate/beautify JavaScript.

Parse raw security tool output into structured JSON.

Add entries to /etc/hosts.

Remove hostname from /etc/hosts.

List managed /etc/hosts entries.

Clear managed /etc/hosts entries.

Search exploits via searchsploit.

Suggest exploits from nmap output.

Suggest exploits for a service.

Get exploit details.

Copy exploit to destination.

Fingerprint a URL.

Detect WAF.

Analyze security headers.

GraphQL introspection.

GraphQL fuzz.

Analyze JWT.

Crack JWT.

Fuzz API endpoint.

Test rate limiting.

Test auth bypass.

FFUF fuzz.

Kiterunner scan.

Nuclei API scan.

Run Newman collection.

Check AD tool availability.

BloodHound collection.

Impacket secretsdump.

Kerberoasting.

AS-REP roasting.

PsExec.

WMIExec.

LDAP enumeration.

Password spray.

SMB enumeration.

Start Responder LLMNR/NBT-NS poisoner.

WinRM shell via evil-winrm.

ADCS attacks via certipy-ad.

AD privilege escalation via bloodyAD.

Coerce authentication (coercer or petitpotam).

Start reverse shell listener.

Run command in reverse shell.

Send payload via reverse shell.

Reverse shell status.

Stop reverse shell.

Upload content via reverse shell.

Download via reverse shell.

Generate reverse shell payload.