CLI Tools

An independent project by johlem.net

Install & Uninstall

Manage the Rust suite with jcli

curl -fsSL https://cli.johlem.net/tools/jcli/install.sh | bash
jcli list                          # see the catalogue
jcli install urlrecon phishprobe   # install one or more
jcli run urlrecon -- --help        # exec through jcli

jcli is the suite manager — install / list / run / update / rollback every Rust tool with a single CLI. Reads /catalogue.json, verifies SHA-256 + Ed25519 signature before every install.

Install one tool directly

curl -fsSL https://cli.johlem.net/install.sh | bash -s -- urlrecon

New flags on the global installer: --list, --check <tool>, --update <tool>, --rollback <tool>, --pin-version <V>, --force.

Uninstall

curl -fsSL https://cli.johlem.net/uninstall.sh | bash -s -- urlrecon

Replace urlrecon with any tool name listed below.

Security notice: Always review scripts before piping to bash.
Read the source: install.sh · uninstall.sh

# All tools install to the same layout
~/.local/lib/<tool>/    # Source files
~/.local/bin/<tool>     # Executable

NixOS / Nix

Run without installing

nix run "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz#urlrecon" -- --help

Install to profile

nix profile install "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz#urlrecon"

NixOS system configuration

# flake.nix
inputs.cli-johlem.url = "tarball+https://cli.johlem.net/releases/cli-johlem-net-latest.tar.gz";

# configuration.nix module
nixpkgs.overlays = [ inputs.cli-johlem.overlays.default ];
environment.systemPackages = with pkgs.cli-johlem; [
  urlrecon cidrcalc b64chain # pick any tools
];

Update

nix flake update cli-johlem && sudo nixos-rebuild switch

Full NixOS Cheatsheet

Available Tools

Tools tagged foundation are feature-complete Rust ports whose first signed binary release hasn't been published yet. They install via local-file fallback (jcli install <tool> --from <PATH>) until the public release lands.

urlrecon

Async multi-module URL / domain reconnaissance

v1.7.2
NixOS x86_64 Rust

lexharvest

Ranked wordlist generator with CeWL-style mutations + pentest boost

v1.0.2
NixOS x86_64 Rust

shard

Storage Health, Audit & Recovery Device

v1.10.1
NixOS x86_64 Rust

socq

SOC query translator — daily hunting intents to KQL + AQL, with a built-in Windows event-ID catalogue

v1.3.2
NixOS x86_64 Rust

WebHarvest

Web asset extractor and link harvester for OSINT and reconnaissance

v1.0.2
NixOS x86_64 Rust

PayloadForge

Obfuscated payload generator for authorized penetration testing

v1.2.2
NixOS x86_64 Rust

vlanrecon

Layer 2 VLAN security assessment — Cisco IOS / Arista EOS / Juniper Junos

v1.1.2
NixOS x86_64 Rust

wifiaudit

Wi-Fi audit toolkit — passive scan, authorized pentest, defense

v1.1.2
NixOS x86_64 Rust

casper

Privacy stack + engagement security CLI with 4 levels, real-time monitor, and hard kill-switch

v1.0.2
NixOS x86_64 Rust

ubdem

Offline browser fingerprinting analyzer with Ed25519 + HMAC signed evidence

v1.0.2
NixOS x86_64 Rust

SPECTER

Forensic CLI: parallel hashing + ssdeep, native metadata, signed evidence, cluster + triage

v1.0.3
NixOS x86_64 Rust

pentree

Walk pentest methodology trees, step by step

v1.1.2
NixOS x86_64 Rust

cidrcalc

Subnet calculator, IP range expander, and CIDR notation tool

v1.0.1
NixOS x86_64 Rust

b64chain

Multi-stage encoder/decoder for chained encoding operations

v1.0.3
NixOS x86_64 Rust

RegexLab

CLI regex toolkit: tester, builder, transformer + benchmark/fuzz/diff/audit

v2.0.2
NixOS x86_64 Rust

HashCrackRef

Hash identification and cracking command reference (does NOT crack)

v1.0.2
NixOS x86_64 Rust

LogTimeline

CLI timestamp normaliser, converter, and incident-response timeline builder

v1.0.2
NixOS x86_64 Rust

speedtest-cli

Multi-stream internet speed test with bufferbloat + watch mode

v1.1.1
NixOS x86_64 Rust

SkyRecon

OSINT CLI for aircraft + vessels — race-not-fallback sources, proximity, geofence, PDF

v1.0.2
NixOS x86_64 Rust

ohm

Electronics & hardware reference CLI: calc, power, id, pcb, thermal, rf, ref, safe

v1.0.2
NixOS x86_64 Rust

jcli

cli.johlem.net suite manager — install / remove / list / run / update

v1.5.1
NixOS x86_64 Rust

mailforge

Red-team mail operations toolkit — pixel beacons, landing pages, delivery testing, SPF/DKIM/DMARC offensive analysis, OSINT email harvesting, template variation

v1.0.3
NixOS x86_64 Rust

esptools

ESP32 hardware security assessment toolkit — device management, blue-team monitors, red-team audits, forensics, reporting

v2.0.3
NixOS x86_64 Rust

phishprobe

Phishing detection — URLs, domains, emails, headers

v1.3.4
NixOS x86_64 Rust

openclaw

Phishing takedown pipeline (detect → abuse mail → approve → send)

v1.0.2
NixOS x86_64 Rust

credsweep

Credential / secret scanner for files, dirs, stdin, and git history

v1.2.4
NixOS x86_64 Rust

hostwatch

Continuous host monitoring — availability, TLS expiry, DNS changes

v1.0.3
NixOS x86_64 Rust

darkrecon

Dark-web / OSINT reconnaissance for threat intelligence

v1.2.2
NixOS x86_64 Rust

avwatch

File integrity monitoring + YARA-lite scan + event-driven file routing

v1.2.4
NixOS x86_64 Rust

stegcrypt

Professional steganography with AEAD encryption, K-of-N threshold split, PNG / BMP / WAV carriers

v1.1.0
NixOS x86_64 Rust

kage

Realtime computer monitoring with live connection watch and one-key block

v1.0.0
NixOS x86_64 Rust

jfind

Canonical findings + evidence schema — Ed25519-signed, Merkle-rooted, deterministic JSON

v1.0.1
NixOS x86_64 Rust

yttranscript

Fetch any YouTube video transcript to a .txt file — no API key, no auth, no async runtime

v1.0.1
NixOS x86_64 Rust

mediagrab

Generic web media downloader — find video/audio on any standards-compliant page, save as open-source container

v1.0.1
NixOS x86_64 Rust

glasswatch

Passive BLE scanner for smart-glasses manufacturer IDs (Meta, EssilorLuxottica, Snap)

v1.0.1
NixOS x86_64 Rust

dronewatch

Passive multi-sensor drone detection — WiFi OUI + OpenDroneID RemoteID decoder

v0.1.1
NixOS x86_64 Rust

mark

Privacy-first CLI bookmark manager — SQLite + FTS5 full-text search

v1.0.1
NixOS x86_64 Rust

complymap

Control mapping engine — jfind findings → DORA / NIS2 / ISO 27001 / CSSF

v1.0.0
NixOS x86_64 Rust

dossier

Reporting layer — jfind / complymap inputs → johlem-branded HTML / Markdown / Document IR

v1.0.1
NixOS x86_64 Rust

inciclass

DORA / NIS2 incident classifier + notification clock — RTS 2024/1772 thresholds

v1.0.0
NixOS x86_64 Rust

roigen

DORA Register of Information generator — ITS 2024/2956 templates, validates, exports

v1.0.0
NixOS x86_64 Rust

tiberscope

TLPT scoping helper — DORA Art. 24 / TIBER-EU four-phase plan + suite-tool map

v1.0.0
NixOS x86_64 Rust

offsec

Category dispatcher — offensive toolkit front door (urlrecon / payloadforge / mailforge / wifiaudit / pentree / …)

v1.0.0
NixOS x86_64 Rust

socialscope

Passive social-media OSINT — username enumeration, email-existence probes, search-engine dorking, image EXIF

v1.0.0
NixOS x86_64 Rust

cmdb

Lightweight asset inventory — hosts / services / owners with DORA Art. 8 + NIS2 Art. 21 metadata

v1.0.0
NixOS x86_64 Rust

notify

Suite glue — pipe jfind/v1 findings in, route to Slack / Teams / webhook / file / stdout

v1.0.0
NixOS x86_64 Rust

compose-audit

Container manifest auditor — Dockerfile / docker-compose / Kubernetes hardening checks with DORA Art. 9 mapping

v1.0.0
NixOS x86_64 Rust

pkgaudit

Multi-lockfile CVE scanner — Cargo / npm / Python / Go via OSV.dev with DORA Art. 28 mapping

v1.0.0
NixOS x86_64 Rust

shellrec

Terminal session recorder with Ed25519 chain-of-custody — DORA Art. 17 evidence artefact

v1.0.0
NixOS x86_64 Rust

webfuzz

Wordlist-driven HTTP fuzzer — path / vhost / param with jfind/v1 classification

v1.0.0
NixOS x86_64 Rust

changefeed

CVE / advisory subscription monitor via OSV.dev — pairs with cmdb and notify

v1.0.0
NixOS x86_64 Rust

signtree

Detached Ed25519 signature verifier — signify / minisign / shellrec jfind-like

v1.0.0
NixOS x86_64 Rust

backupcheck

DORA Art. 12 restore-test runner — extract / validate / log / jfind

v1.0.0
NixOS x86_64 Rust

tabletop

DORA Art. 25 / NIS2 tabletop exercise generator — six curated scenarios

v1.0.0
NixOS x86_64 Rust

pwgen

Cryptographically random password / passphrase / PIN / WiFi generator

v1.0.0
NixOS x86_64 Rust

burp-cli

Thin CLI MITM proxy — HTTP forward + CONNECT tunnel + history + replay + jfind/v1 (v1.0)

v1.0.0
NixOS x86_64 Rust