How this is verified

The tool commands on this site are checked against the real releases wherever that is possible, and each page says exactly what was checked. 33 of 35 pages have checked commands, 313 commands in all, and 11 mistakes were caught and fixed. Last full pass: 2 Nov 2026.

What "checked" means

Each documented command is taken apart and compared with the tool it names:

What it does not prove

Mistakes this caught

The first pass found these in the pages as originally written. They are fixed.

PageWasNow
evil-winrmevil-winrm … -d corp.localNo domain flag exists; removed (-r is Kerberos realm only)
Gobustergobuster vhost … -d target.com--domain target.com
smbmapsmbmap … -R (recursive)-r with --depth; -R does not exist in current releases
Certipycertipy find … -old-bloodhoundRemoved: Certipy 5.x has no BloodHound export; use -vulnerable -stdout
Hashcatetype 17/18 Kerberoast → -m 19700etype 17 → -m 19600, etype 18 → -m 19700
RubeusAES256 (etype 17/18) → 19700etype 17 → 19600, etype 18 → 19700
Gobustergobuster dir … -s "200,…,500"Adds -b "": in 3.6, -s alone fails because a 404 blacklist is set by default
ffuf-fc 404 to hide 404s404s are hidden by default; use -fc 403 or -ac, and -mc all to see 404s
smbmap--depth 3 to "go deeper"; -x needs write access-r already descends 5 levels, --depth changes that; -x needs admin rights
HashcatOneRuleToRuleThemAll.rule in /usr/share/hashcat/rulesNot shipped with hashcat; clone NotSoSecure's repository first
xfreerdp/f /toggle-fullscreen/f already includes Ctrl+Alt+Enter; the extra flag was redundant

Every tool

ToolMethodChecked againstCommands
NmapRan the real releaseNmap 7.94SVN25
enum4linux-ngRead the sourceenum4linux-ng (git 288826f, 2026-02-20)5
smbmapRan the real releasesmbmap 1.9.2; upstream 1.10.7 README10
ldapsearchRan the real releaseOpenLDAP 2.6.1012
BloodHoundRan the real releasebloodhound.py 1.9.0 (CLI collector only; the GUI cannot be checked)2
CertipyRan the real releaseCertipy 5.1.012
RubeusUpstream docsRubeus upstream README18
ResponderRead the sourceResponder (git 424fbe5, 2026-06-10)5
KerbruteRan the real releasekerbrute 1.0.34
PowerViewRead the sourcePowerView.ps1 (PowerSploit) function names12
bloodyADRan the real releasebloodyAD 2.5.717
ntlmrelayxRan the real releaseImpacket 0.13.18
secretsdump.pyRan the real releaseImpacket 0.13.18
evil-winrmRan the real releaseevil-winrm 4.16
psexec.pyRan the real releaseImpacket 0.13.15
wmiexec.pyRan the real releaseImpacket 0.13.15
xfreerdpRan the real releaseFreeRDP 2.11.58
HashcatRan the real releasehashcat 6.2.616
LaZagneUpstream docsLaZagne upstream README1
MimikatzRead the sourcemimikatz module sources (module::command names)6
SessionGopherRead the sourceSessionGopher.ps1 function names1
winPEASNot checkedno command-line options to check–
SeatbeltUpstream docsSeatbelt upstream README14
SharpUpUpstream docsSharpUp upstream README1
PowerUpRead the sourcePowerUp.ps1 (PowerSploit) function names9
Potato AttacksUpstream docsPrintSpoofer, GodPotato, JuicyPotato upstream READMEs9
linPEASUpstream docslinPEAS upstream README8
pspyUpstream docspspy upstream README6
Ligolo-ngRan the real releaseligolo-ng 0.9.25
ChiselRan the real releasechisel 1.13.012
ProxychainsRan the real releaseproxychains-ng 4.176
ffufRan the real releaseffuf 2.1.022
GobusterRan the real releasegobuster 3.614
sqlmapRan the real releasesqlmap 1.8.421
Burp SuiteNot checkedgraphical tool, nothing to check from the command line–

Found something wrong?

Please open an issue with the page, the command and what you saw. Corrections are added to the list above.