This package contains an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems. Legion is a fork of SECFORCE's Sparta.
sudo apt install legion (7.51 MB)
Dependências: dirbuster, dnsmap, enum4linux, feroxbuster, finger, hping3, httpx-toolkit, hydra, imagemagick, impacket-scripts, ldap-utils, mariadb-client-core, medusa, metasploit-framework, nbtscan, netcat-traditional, nfs-common, nikto, nmap, nuclei, perl, polenum, postgresql-client, python3, python3-colorama, python3-pandas, python3-pyexploitdb, python3-pyfiglet, python3-pyqt6, python3-pyshodan, python3-qasync, python3-requests, python3-rich, python3-serial-asyncio, python3-service-identity, python3-six, python3-sqlalchemy, python3-termcolor, python3-urllib3, rdesktop, rpcbind, ruby, smbclient, smtp-user-enum, snmp, sparta-scripts, sqlmap, sslscan, sslyze, telnet, theharvester, unicornscan, urlscan, vncviewer, wafw00f, wapiti, whatweb, wordlists, wpscan, x11-apps, xserver-xephyr, xsltproc, xvfb
Escolha um comando ao lado para ver a descrição e a ajuda completa.
legion
root@kali:~# legion -h
usage: legion.py [-h] [--mcp-server] [--headless] [--web] [--tool-audit |
--tool-install-plan {kali,ubuntu} |
--tool-install {kali,ubuntu}] [--web-port WEB_PORT]
[--web-bind-all] [--web-transparent-ui]
[--input-file INPUT_FILE] [--discovery] [--staged-scan]
[--output-file OUTPUT_FILE] [--run-actions]
Start Legion
options:
-h, --help show this help message and exit
--mcp-server Start MCP server for AI integration
--headless Run Legion in headless (CLI) mode
--web Run Legion with the local Flask web interface
--tool-audit Print a tool availability audit and exit
--tool-install-plan {kali,ubuntu}
Print the generated install script for missing tools
on the selected platform and exit
--tool-install {kali,ubuntu}
Run the generated install plan for missing tools on
the selected platform and exit
--web-port WEB_PORT Local web interface port
--web-bind-all When used with --web, bind the web interface to
0.0.0.0 instead of 127.0.0.1
--web-transparent-ui When used with --web, enable transparent UI effects
--input-file INPUT_FILE
Text file with targets (hostnames, subnets, IPs, etc.)
--discovery Enable host discovery (default: enabled)
--staged-scan Enable staged scan
--output-file OUTPUT_FILE
Output file (.legion or .json)
--run-actions Run scripted actions/automated attacks after
scan/import