The tool commands on this site are checked against the real releases wherever that is possible, and each page says exactly what was checked. 33 of 35 pages have checked commands, 313 commands in all, and 11 mistakes were caught and fixed. Last full pass: 2 Nov 2026.
Each documented command is taken apart and compared with the tool it names:
--help output was compared with every flag and subcommand on the page.ls, curl, chmod), output samples and anything the checker could not parse were skipped. The count above is commands actually checked.The first pass found these in the pages as originally written. They are fixed.
| Page | Was | Now |
|---|---|---|
| evil-winrm | evil-winrm … -d corp.local | No domain flag exists; removed (-r is Kerberos realm only) |
| Gobuster | gobuster vhost … -d target.com | --domain target.com |
| smbmap | smbmap … -R (recursive) | -r with --depth; -R does not exist in current releases |
| Certipy | certipy find … -old-bloodhound | Removed: Certipy 5.x has no BloodHound export; use -vulnerable -stdout |
| Hashcat | etype 17/18 Kerberoast → -m 19700 | etype 17 → -m 19600, etype 18 → -m 19700 |
| Rubeus | AES256 (etype 17/18) → 19700 | etype 17 → 19600, etype 18 → 19700 |
| Gobuster | gobuster dir … -s "200,…,500" | Adds -b "": in 3.6, -s alone fails because a 404 blacklist is set by default |
| ffuf | -fc 404 to hide 404s | 404s are hidden by default; use -fc 403 or -ac, and -mc all to see 404s |
| smbmap | --depth 3 to "go deeper"; -x needs write access | -r already descends 5 levels, --depth changes that; -x needs admin rights |
| Hashcat | OneRuleToRuleThemAll.rule in /usr/share/hashcat/rules | Not shipped with hashcat; clone NotSoSecure's repository first |
| xfreerdp | /f /toggle-fullscreen | /f already includes Ctrl+Alt+Enter; the extra flag was redundant |
| Tool | Method | Checked against | Commands |
|---|---|---|---|
| Nmap | Ran the real release | Nmap 7.94SVN | 25 |
| enum4linux-ng | Read the source | enum4linux-ng (git 288826f, 2026-02-20) | 5 |
| smbmap | Ran the real release | smbmap 1.9.2; upstream 1.10.7 README | 10 |
| ldapsearch | Ran the real release | OpenLDAP 2.6.10 | 12 |
| BloodHound | Ran the real release | bloodhound.py 1.9.0 (CLI collector only; the GUI cannot be checked) | 2 |
| Certipy | Ran the real release | Certipy 5.1.0 | 12 |
| Rubeus | Upstream docs | Rubeus upstream README | 18 |
| Responder | Read the source | Responder (git 424fbe5, 2026-06-10) | 5 |
| Kerbrute | Ran the real release | kerbrute 1.0.3 | 4 |
| PowerView | Read the source | PowerView.ps1 (PowerSploit) function names | 12 |
| bloodyAD | Ran the real release | bloodyAD 2.5.7 | 17 |
| ntlmrelayx | Ran the real release | Impacket 0.13.1 | 8 |
| secretsdump.py | Ran the real release | Impacket 0.13.1 | 8 |
| evil-winrm | Ran the real release | evil-winrm 4.1 | 6 |
| psexec.py | Ran the real release | Impacket 0.13.1 | 5 |
| wmiexec.py | Ran the real release | Impacket 0.13.1 | 5 |
| xfreerdp | Ran the real release | FreeRDP 2.11.5 | 8 |
| Hashcat | Ran the real release | hashcat 6.2.6 | 16 |
| LaZagne | Upstream docs | LaZagne upstream README | 1 |
| Mimikatz | Read the source | mimikatz module sources (module::command names) | 6 |
| SessionGopher | Read the source | SessionGopher.ps1 function names | 1 |
| winPEAS | Not checked | no command-line options to check | – |
| Seatbelt | Upstream docs | Seatbelt upstream README | 14 |
| SharpUp | Upstream docs | SharpUp upstream README | 1 |
| PowerUp | Read the source | PowerUp.ps1 (PowerSploit) function names | 9 |
| Potato Attacks | Upstream docs | PrintSpoofer, GodPotato, JuicyPotato upstream READMEs | 9 |
| linPEAS | Upstream docs | linPEAS upstream README | 8 |
| pspy | Upstream docs | pspy upstream README | 6 |
| Ligolo-ng | Ran the real release | ligolo-ng 0.9.2 | 5 |
| Chisel | Ran the real release | chisel 1.13.0 | 12 |
| Proxychains | Ran the real release | proxychains-ng 4.17 | 6 |
| ffuf | Ran the real release | ffuf 2.1.0 | 22 |
| Gobuster | Ran the real release | gobuster 3.6 | 14 |
| sqlmap | Ran the real release | sqlmap 1.8.4 | 21 |
| Burp Suite | Not checked | graphical tool, nothing to check from the command line | – |
Please open an issue with the page, the command and what you saw. Corrections are added to the list above.