60 Hacking Commands You NEED to Know

NetworkChuck Technology Careers Career & Money

About this video

A rapid-fire tour of 60 hacking and penetration-testing commands, mostly on Kali Linux, with guest tips from other creators and a free in-browser Kali sandbox and cheat sheet linked in the description. It starts deep on ping variants: oversized packets, flooding, hping3 for port-specific floods and traceroute workarounds, and ptunnel to tunnel TCP/SSH traffic over ICMP to evade firewalls, watched live with tcpdump. It then covers piping command output into Vim, nmap host/service/OS discovery, vulnerability and malware scripts, fragmentation, source-port tricks and decoy scans, plus masscan for very fast large-network scanning. Recon tools follow: whois, WhatWeb, curl for headers and API testing (a guest’s favorite), Nikto, Gobuster for directories and subdomains, SecLists wordlists, Sublist3r, WPScan, and Amass. Later segments cover git clone and searchsploit, a guest demonstration of a setuid bash persistence technique, advanced tcpdump and tshark capture/filter/analysis, tmux, SSH remote commands and SOCKS proxy tunneling, and netcat reverse shells and chat. A sponsor segment demos Bitdefender’s free Scamio scam checker catching a phishing message generated for the test.

Key takeaways

Ping is a toolkit, not just a connectivity check: hping3 tests ports and traceroute paths, and ptunnel can carry SSH over ICMP past restrictive firewalls
Nmap depth matters: combine -sV, -O, -Pn and scripts for vuln/malware checks, and use fragmentation, source ports, or -D decoys to reduce detection
Use masscan when nmap is too slow for huge ranges, setting an explicit rate and port, e.g. hunting for insecure Telnet on port 23
Web recon stacks together: curl -I for headers, WhatWeb for technologies, Nikto for dangerous items, Gobuster with SecLists for directories/subdomains, and WPScan/Amass for WordPress and subdomain enumeration
Capture and session tools round out the kit: tcpdump/tshark for packet capture and filtered analysis, SSH -D for a SOCKS proxy tunnel, and netcat for reverse shells

Episode details: published April 3, 2024 · 27:01 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.

← Previous: Run your own AI (but private) · Next: you STILL need a website RIGHT NOW!! (yes, even in 2025) →

All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube