> For the complete documentation index, see [llms.txt](https://calvin-lai.gitbook.io/calvin-lai-security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://calvin-lai.gitbook.io/calvin-lai-security/useful-command/kali.md).

# Kali

{% tabs %}
{% tab title="Vunlnarbility Search " %}
[nuclei](https://github.com/projectdiscovery/nuclei) 

nuclei -u search.xxx.com -tags cve -bs 30 -c 50 -o nuclei.search-xxxx.com.result -nc

<figure><img src="/files/MDv1GIR6hG8dxrvc4I6r" alt=""><figcaption></figcaption></figure>

nmap

nmap -Pn --script vuln -T5 search.xxxx.com -o vuln.nmap.search.xxx.result

<figure><img src="/files/uhdn3PcNvqVq3i9vgV3J" alt=""><figcaption></figcaption></figure>

Nikto

nikto -host search.xxxxx.com

<figure><img src="/files/a0rsVbK87Hx6Rn3ry26b" alt=""><figcaption></figcaption></figure>
{% endtab %}

{% tab title="Domain Name Search" %}
urlcrazy

urlcrazy -p xxx.com -r -o urlcrazy-xxx.result

{% embed url="<http://www.morningstarsecurity.com/research/urlcrazy>" %}

Spiderfoot

spiderfoot -l 127.0.0.1:5001

{% embed url="<https://github.com/smicallef/spiderfoot>" %}
{% endtab %}

{% tab title="Payload" %}
{% embed url="<https://www.revshells.com/>" %}

{% embed url="<https://github.com/swisskyrepo/PayloadsAllTheThings>" %}
{% endtab %}
{% endtabs %}