awesome-termux-hacking
⚡️An awesome list of the best Termux hacking tools
A curated reference list of hundreds of security and penetration testing tools that run on Android via Termux, covering network scanning, web app testing, OSINT, password cracking, and more, all linking to their source code.
This repository is a curated list of security and penetration testing tools that can be run on Android devices through Termux. Termux is a free app that turns an Android phone into a Linux command-line environment, and this list collects hundreds of tools that work within it, covering nearly every area of security research and testing.
The list is organized as a flat collection of links, each pointing to a separate GitHub project. The tools span a wide range of purposes: scanning networks, finding subdomains, testing web applications for common vulnerabilities, gathering information from public sources (known as OSINT), intercepting network traffic, analyzing Android app packages, cracking passwords, and more. Each entry includes the tool name, a short description, and a link to its source.
There is no setup guide or installation walkthrough in the repository itself. It is purely a reference directory, intended for people who already know how to use Termux and want a single place to browse for tools. The value is in the breadth of coverage: instead of searching for security tools one at a time, someone can scan this list and find options across dozens of categories.
The list has grown very large over time and the README is one of the longest in this category. Because it is just a list of external links, there is no code in the repository itself to run or install. The quality and maintenance status of each linked tool varies and is the responsibility of each tool's own author.
The full README is longer than what was shown.
Where it fits
- Browse hundreds of Termux-compatible security tools organized by category to build a mobile penetration testing toolkit.
- Find a specific tool for subdomain discovery, network scanning, or OSINT research that runs directly on your Android phone.
- Quickly locate a web application vulnerability scanner or traffic-interception tool that works inside Termux.