Tools Reference

Tools Reference

Every wrapped tool lives in its own module under lib/modules/<tool>.sh and exposes a single <tool>_run function. This page documents each tool's modes, the exact command each mode runs, whether it needs sudo, and where output lands. Output directories are written under $FEEDYOURSPIDER_OUTPUT_ROOT (default $HOME); the placeholder <ts> is a YYYYMMDD_HHMMSS timestamp.

Quick navigation: Nmap · Netcat · Tcpdump · TShark · hping3 · arp-scan · Masscan · Nikto · dnsenum · WhatWeb

---

1. Nmap

Port and service scanning. Prompts for a target (IPv4, hostname, or CIDR; validated) then a scan type. All modes write nmap's three output formats with -oA.

Output: feedyourspider_nmap/scan_<target>_<ts>.{nmap,gnmap,xml}

Mode	Command (args)	sudo
Quick (top ports)	nmap -T4 --top-ports 100 -oA <base> <target>	no
Service/version	nmap -sV -sC -T4 -oA <base> <target>	no
Aggressive	nmap -A -T4 -oA <base> <target>	yes
All ports	nmap -p- -T4 -oA <base> <target>	yes
SYN stealth	nmap -sS -T4 -oA <base> <target>	yes
Custom args	nmap <your args> -oA <base> <target>	depends

sudo is applied automatically when the chosen arguments include -sS, -A, or -p- (raw-socket scans). You are told before the elevated run.

---

2. Netcat

The general-purpose TCP/UDP utility. Detects either nc or netcat on PATH. None of the modes use sudo.

Output: feedyourspider_netcat/… (per-action filenames below)

Action	Behavior	Saved file
Connect to host (client)	Validated host + port, optional tcp/udp. Runs nc -v -w 5 <target> <port> (adds -u for UDP), session tee'd to a log.	connect_<target>_<port>_<ts>.log
Listen (server)	Validated port, optional protocol. Listens with -l (uses -l -p <port> if the build expects -p), output tee'd.	listen_<port>_<ts>.log
File transfer → send	Validated host + port, path to an existing file. Pipes the file into nc <target> <port>.	send_<file>_<target>_<port>_<ts>.log
File transfer → receive	Validated listen port, optional output name. Writes the received stream to disk.	<name> or received_<ts>
Banner grab	Validated host + port, optional protocol. For TCP, sends HEAD / HTTP/1.0 then reads the banner; UDP probes with -u -v -w 3.	(printed to screen)
Custom args	Free-form args passed straight to the netcat binary.	—

---

3. Tcpdump

Packet capture. Always runs under sudo because capture needs raw-socket access. Press Ctrl+C to stop a capture.

Output: feedyourspider_tcpdump/capture_<ts>.pcap

Mode	Filter applied	Command
Capture on interface	none	sudo tcpdump -i <iface|any> -w <base>.pcap
Capture specific port	port <n>	sudo tcpdump -i any "port <n>" -w <base>.pcap
Capture specific host	host <ip>	sudo tcpdump -i any "host <ip>" -w <base>.pcap
Custom filter	your BPF expression	sudo tcpdump -i any "<filter>" -w <base>.pcap

The interface prompt defaults to any. Port and host inputs are validated.

---

4. TShark (Wireshark)

The command-line side of Wireshark: live capture plus offline analysis of existing pcap files.

Output (live capture): feedyourspider_tshark/capture_<ts>.pcap

Mode	sudo	Behavior
Live capture on interface	yes	sudo tshark -i <iface|any> -w <base>.pcap. Ctrl+C to stop. Interface defaults to any.
Read pcap file	no	Prompts for a path to an existing pcap and prints the first 50 decoded packets (tshark -r <file> | head -50).
Packet statistics	no	Protocol-hierarchy stats for a pcap: tshark -r <file> -q -z io,phs.

The two analysis modes verify the file exists before running.

---

5. hping3

Custom packet crafting and probing. Every mode runs under sudo (raw sockets). Targets are validated as host/IP; output is printed to screen, not saved to a file.

Mode	Command
TCP SYN scan	sudo hping3 -S --dport <port> <target>
UDP ping	sudo hping3 --udp <target>
ICMP echo	sudo hping3 -1 <target>
Custom args	sudo hping3 <your args>

---

6. arp-scan

Layer-2 host discovery on the local network. Runs under sudo. Results are tee'd to disk.

Output: feedyourspider_arpscan/…

Mode	Command	Saved file
Scan local network	sudo arp-scan -l	localnet_<ts>.txt
Scan specific range (CIDR)	sudo arp-scan <cidr>	scan_<cidr>_<ts>.txt
Custom args	sudo arp-scan <your args>	—

The CIDR range is validated (e.g. 192.168.1.0/24).

---

7. Masscan

High-rate mass port scanning. Single flow: prompts a target (IP or CIDR, validated) and a port specification (validated, supports lists and ranges like 80,443,1-1000). Runs under sudo.

Output: feedyourspider_masscan/masscan_<target>_<ts>.gnmap

sudo masscan <target> -p <ports> -oG <base>.gnmap --rate 5000

The fixed --rate 5000 is a deliberately conservative packets-per-second cap. Edit the module if you need a different rate for your engagement.

---

8. Nikto

Web server vulnerability scanning. No sudo. Results saved to a text report.

Output: feedyourspider_nikto/…

Mode	Command	Saved file
Scan URL	nikto -url <url> -o <base>	scan_<ts>.txt
Scan host:port	nikto -h <host> -p <port> -o <base>	scan_<host>_<port>_<ts>.txt
Custom args	nikto <your args>	—

In host:port mode the host is validated and the port defaults to 80.

---

9. dnsenum

DNS enumeration for a domain. No sudo. Single flow: prompts for a domain (validated as a hostname), runs the enumeration, and tee's the result.

Output: feedyourspider_dnsenum/enum_<domain>_<ts>.txt

dnsenum <domain>

---

10. WhatWeb

Web technology fingerprinting. No sudo. Each mode prompts for a URL and tee's the output.

Output: feedyourspider_whatweb/identify_<ts>.txt

Mode	Command
Identify URL (verbose)	whatweb -v <url>
Identify URL (quiet)	whatweb -q <url>
Identify URL (all plugins)	whatweb -a 4 <url>
Custom args	whatweb <your args>

---

Notes that apply to every tool

• Custom args modes split your input on whitespace and pass it straight through. They are the escape hatch for anything the presets do not cover.
• The exact command is printed before each run, so you always see what is about to execute, including whether sudo is involved.
• Validated inputs re-prompt on malformed values; an empty answer cleanly aborts back to the menu. Details in Input Validation.
• Where files go and how to redirect them is covered in Output & Files.